RoverPass Privacy Policy

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We process only limited information that may be considered sensitive in some jurisdictions, such as payment/financial information and, where you enable it, precise geolocation, and only as needed to provide the Services you request.

Do we collect any information from third parties? We may collect information from public databases, marketing partners, social media platforms, and other outside sources.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Our Platform may contain links to other websites not owned or controlled by RoverPass. We are not responsible for the privacy practices of these other sites. We encourage you to read the privacy policies of every website you visit.

To make this Policy easier to understand, here are key definitions:

"Personal Information" Information that identifies or relates to an identifiable individual.

"Sensitive Personal Information" Certain categories protected under state laws, such as precise geolocation, account access credentials, or financial data.

"Campgrounds" Campground or RV park owners/operators using RoverPass to manage reservations or operations.

"Campers" Individuals using RoverPass to search, reserve, or manage campground bookings.

"Service Providers" Third parties processing information on our behalf (e.g., Stripe).

"Business Partners" OTAs, integration partners, affiliates, and promotional partners.

We use Personal Information to:

• Provide, improve, and operate the RoverPass Services
• Process reservations and payments
• Display campground availability
• Communicate with you about reservations, updates, or platform features
• Provide customer support
• Send marketing communications about the RoverPass Marketplace, partner platforms such as The Dyrt, and other offerings (currently to US recipients only; you may opt out at any time)
• Disclose limited contact information to marketing and referral partners, such as The Dyrt, unless you opt out (this may be a "sale" of personal information under certain US state laws — see Section 6)
• Secure our platform and prevent fraud
• Analyze usage to improve features
• Comply with legal obligations

We do not use Personal Information for automated decision-making that produces legal effects.

We may share Personal Information with:

A. Service Providers

Examples include: Stripe (payments), email systems, SMS gateways, hosting providers, analytics providers, advertising partners.

B. Business Partners

Such as OTA channels, integration partners, or promotional partners.

C. Campgrounds (if you are a Camper)

We share necessary reservation details with the campground you book.

D. Campers (if you are a Campground)

Information you publish, such as property descriptions, amenities, and pricing, is visible to users.

E. Compliance and Legal Obligations

We may disclose information to government authorities or when required by law.

F. Corporate Transactions

Personal Information may be transferred in a merger, acquisition, or similar event.

G. Marketing and Referral Partners

Where you have not opted out, we disclose limited contact information (such as your name and email address) to marketing and referral partners, including The Dyrt, so they may offer you their products and services. We receive compensation in connection with this program. Under certain US state privacy laws, this disclosure is considered a "sale" of personal information.

For purposes of US state privacy laws (including the California CCPA/CPRA and similar laws in Texas, Virginia, Colorado, and other states), some of our practices constitute a "sale" or "sharing" of personal information. First, our use of advertising and analytics cookies and similar technologies allows third-party advertising partners to collect online identifiers and activity for cross-context behavioral advertising. Second, as described in paragraph G above, we disclose limited contact information to referral partners such as The Dyrt for monetary consideration. We do not sell sensitive personal information, and we do not knowingly sell or share the personal information of consumers under 16 years of age without opt-in consent. You may opt out of these sales and sharing at any time by declining the partner-offer option presented during booking, using the "Do Not Sell or Share My Personal Information" link in our website footer, or enabling an opt-out preference signal such as the Global Privacy Control (GPC), which we honor as a valid opt-out for the browser or device on which it is enabled.

RoverPass is based in the United States, and your Personal Information may be transferred to and processed there and in other countries where our service providers operate, including the European Union (our channel-distribution provider hosts data in the Netherlands) and the United Kingdom. Where required by law, we use recognized transfer mechanisms, which may include the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement, or a provider's Binding Corporate Rules, together with reasonable technical and organizational safeguards.

RoverPass does not knowingly collect or market to individuals under 18. If we discover such data, we will delete it promptly.

If you are in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) applies to how we handle your personal information. We collect, use, and disclose your information only for the purposes described in this Policy, and we obtain consent for any new purpose. You may access, correct, or withdraw consent (where processing is consent-based) by contacting [email protected].

Anti-Spam (CASL): RoverPass does not send marketing electronic messages to Canadian residents. Electronic messages you receive in connection with a reservation, such as booking confirmations and updates, are transactional and are sent by RoverPass on behalf of the campground with which you have an existing business relationship. Every such message identifies the sender, provides contact information, and includes a means to opt out, which we honor within 10 business days.

Complaints: You may complain to us first; if unsatisfied, contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

When RoverPass provides Services to a government agency, the agency owns the data and acts as the controller; RoverPass acts solely as a service provider/processor. We do not sell, share for advertising, or otherwise use constituent data of government accounts for our own purposes, and we do not add it to the RoverPass Marketplace, The Dyrt syndication, or any marketing program. For government accounts subject to US data-residency requirements, we store and process data within the United States, including backups and disaster recovery, and disable or US-route any sub-processor (such as Channex) that would otherwise host data outside the United States. Data return and breach notification for these accounts follow the applicable government agreement and state law, which supersede the general timelines in this Policy.

There is no common industry standard for "Do Not Track" browser signals, and we do not respond to them. However, we recognize and honor the Global Privacy Control (GPC) as an opt-out preference signal for the sale or sharing of personal information, where required by applicable law.

14.1 SMS Communications

If you opt into SMS:

• We collect your phone number and consent
• We use SMS only for operational purposes (reservation updates, account information)
• You can opt out any time by replying STOP
• We do not sell or share SMS consent data for marketing

14.2 AutoWaiver

AutoWaiver collects waiver data solely to send, manage, and store waivers on behalf of campgrounds.

• Campgrounds own all waiver content
• RoverPass acts as a data processor
• We do not use waiver data for advertising or profiling
• Waivers are stored using industry-standard security practices

We may update this Policy as laws or our Services change. We will update the "Last Updated" date and may provide additional notice for material changes.