Privacy Policy

OutfitterDesk ("we," "us," or "our") operates the OutfitterDesk platform at outfitterdesk.com. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights regarding your data.

By using the Service, you agree to the collection and use of information as described in this policy.

Account Information: When you register, we collect your name, business name, email address, phone number, state, and outfitter license number.

Business & Client Data: Information you enter about your guide business and clients, including client names, contact details, emergency contacts, hunting/fishing license numbers, trip history, and harvest logs. This data belongs to you.

Payment Integration Data: To enable your clients to pay invoices online, you may connect a third-party payment processor (Stripe, Square, or QuickBooks Payments). We store only the merchant/account identifiers provided by the processor after OAuth authorization — we never store full card numbers or bank account numbers. All payment card data is handled exclusively by your chosen payment processor.

Usage Data: We collect standard server logs, browser type, IP address, pages visited, and feature usage to operate and improve the Service.

Communications: If you contact support, we retain those communications to resolve your request.

• Provide, operate, and maintain the OutfitterDesk platform
• Process your subscription billing via Stripe
• Enable client payment flows through your connected payment processor
• Send transactional emails (waivers, invoices, booking confirmations) on your behalf
• Send SMS messages to your clients via Twilio at your direction
• Respond to support requests
• Detect and prevent fraud, abuse, or illegal activity
• Comply with legal obligations

We do not sell your data or your clients' data to third parties. We do not use client data for advertising purposes.

OutfitterDesk integrates with the following payment processors to enable guides to collect payments from their clients:

• Stripe, Inc. — stripe.com — Privacy policy at stripe.com/privacy
• Square, Inc. — squareup.com — Privacy policy at squareup.com/legal/privacy
• Intuit Inc. (QuickBooks Payments) — intuit.com — Privacy policy at intuit.com/privacy

When you connect a payment processor, that processor's privacy policy governs how payment data is handled. OutfitterDesk receives only the account/merchant identifier and OAuth tokens necessary to create payment links on your behalf. We store these securely and use them only to facilitate payments you initiate.

Your clients' payment card information is entered directly on the payment processor's hosted checkout pages and is never transmitted to or stored by OutfitterDesk.

We share data only in the following circumstances:

• Payment Processors: To process client payments at your direction (Stripe, Square, QuickBooks).
• Email Provider (Resend): To deliver waiver and invoice emails on your behalf.
• SMS Provider (Twilio): To deliver SMS messages to your clients at your direction.
• Infrastructure Providers: Supabase (database hosting) and Vercel (application hosting). Both are bound by data processing agreements.
• Legal Requirements: If required by law, court order, or government authority.
• Business Transfer: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users.

We retain your account and business data for as long as your account is active. If you cancel your account, we retain data for up to 90 days to allow for account recovery, after which it is deleted from production systems. Backup copies may persist for up to 30 additional days.

Certain data may be retained longer where required by applicable law or legitimate business purposes (e.g., financial records).

We protect your data using industry-standard security measures including TLS encryption for data in transit, AES-256 encryption for data at rest, role-based access controls, and secure infrastructure operated by Supabase and Vercel. Payment credentials (OAuth tokens) are stored encrypted.

No system is completely secure. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data via your account settings
• Delete your account and associated data
• Export your data in a portable format
• Disconnect payment processors from your account at any time

To exercise these rights, email us at support@outfitterdesk.com. We will respond within 30 days.

You may request deletion of your account and all associated data by emailing support@outfitterdesk.com with the subject line "Data Deletion Request." Include the email address associated with your account. We will confirm and complete deletion within 30 days, subject to legal retention requirements.

OutfitterDesk uses cookies and similar technologies solely to maintain authenticated sessions and remember your login state. We do not use tracking cookies for advertising. You can configure your browser to reject cookies, but doing so will prevent you from using the authenticated portions of the Service.

The Service is intended for adult business owners and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided data to us, contact us at support@outfitterdesk.com.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice at least 14 days before they take effect. The updated policy will be posted at outfitterdesk.com/privacy-policy.

Questions, concerns, or data requests? Reach us at:

OutfitterDesk
Email: support@outfitterdesk.com
Website: outfitterdesk.com