RoverPass Privacy Policy

Last Modified: September 2026

RoverPass, Inc. ("RoverPass," "we," "us," or "our") is committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have.

This Policy applies to all users of the RoverPass Services, including:

• Campgrounds and RV park owners/operators using RoverPass to manage reservations, payments, websites, and property operations
• Campers and guests using RoverPass to search for, book, and manage stays
• Visitors browsing any RoverPass website or interacting with us online or offline

By using the RoverPass Services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to all online and offline interactions with RoverPass, including:

• The RoverPass website
• The RoverPass marketplace and booking platform
• The Campground Owner Portal
• Integrated products such as Smart Metering, E-Signature/AutoWaivers, Ticketing, and SMS features
• Communication through email, phone, SMS, or in-person at events

It also applies to personal information collected from:

• Campers
• Campground owners and staff
• Business partners and vendors
• Website visitors

If you do not agree with any part of this Policy, please discontinue use of our Services.

We collect and process Personal Information depending on how you use our Services.

3.1 Information Provided Voluntarily

You may provide Personal Information when you:

• Create an account
• Make or manage a reservation
• List or manage a campground property
• Communicate with RoverPass or another user
• Participate in surveys, promotions, or marketing programs
• Connect a social login account (e.g., Facebook)

This may include:

• Name, email address, phone number
• Account login credentials
• Reservation and payment details
• Property details (for campgrounds)
• Communications, support requests, or feedback
• Business tax or billing information (for campgrounds)

3.2 Information Collected Automatically

When you interact with our Services, we automatically collect:

• Device type, IP address, browser type
• Operating system
• Usage data such as pages viewed, clicks, searches, and time spent
• Location information (approximate or precise, depending on settings)
• Log files and diagnostic data
• Cookie identifiers and tracking data

This information helps us secure, maintain, and improve the Services.

Google API: our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.3 Information from Third Parties

We do not collect personal information from third parties.

If you choose to register or log in with a social media account, we receive certain profile information from that provider because you asked us to connect it. Section 7 describes what we receive and how we use it. Payment data is handled and stored by Stripe, our payment processor.

3.4 Sensitive Personal Information

We do not process sensitive personal information. Some information is treated as "special" or "sensitive" in certain jurisdictions, for example racial or ethnic origins, sexual orientation, and religious beliefs. We do not collect or process it, so there is no "Right to Limit Use" for us to offer under the CPRA.

We do collect location data, which may be precise or imprecise depending on your device and its settings, in order to provide the Services you request. You can opt out by refusing access to that information or by turning off location on your device, though some parts of the Services may then not work.

3.5 Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months. It includes illustrative examples of each category and does not reflect the personal information we collect from you specifically. For the full inventory of what we process, see Sections 3.1 through 3.4 above. The table covers what RoverPass itself collects; information that third-party advertising and analytics partners collect through cookies on our site is described in Section 5 and Section 6, and in our Cookie Policy.

We may also collect other personal information outside of these categories where you interact with us in person, online, or by phone or mail in the context of:

• Receiving help through our customer support channels
• Participation in customer surveys or contests
• Facilitation in the delivery of our Services and to respond to your inquiries

We use and retain the collected personal information as needed to provide the Services, or for:

• Category A: as long as you have an account with us
• Category B: as long as you have an account with us
• Category C: as long as you have an account with us
• Category D: as long as you have an account with us
• Category G: as long as you have an account with us

We use tracking technologies, including cookies, pixels, and web beacons, to:

• Keep the website functioning
• Remember your preferences
• Analyze performance and usage
• Improve the platform
• Deliver relevant content or promotions

You may adjust cookie settings through your browser, though doing so may affect functionality. For full details, please see our separate Cookie Policy.

If you choose to register or log in using a social media account:

• The social platform may provide us with profile information
• This may include your name, email, profile photo, friend lists, or other public data
• We use this only to enable login and verify identity

We do not control how social media platforms handle your data, please review their privacy policies.

We retain Personal Information only as long as necessary to:

• Provide the Services
• Fulfill the purposes outlined in this Policy
• Comply with legal and accounting obligations

No purpose in this Policy requires us to keep your Personal Information for longer than the period in which you have an account with us, unless a longer retention period is required or permitted by law, such as tax, accounting, or other legal requirements. Where those requirements apply, we retain information collected directly from you for up to seven (7) years after your last interaction with the Services, after which we delete or anonymize it.

When we have no ongoing legitimate business need to process your Personal Information, we delete or anonymize it. Where that is not possible, for example because it sits in a backup archive, we store it securely and isolate it from any further processing until deletion is possible.

You may request details of retention periods for specific data types at [email protected].

Depending on your location, you may have the right to:

• Request access to the personal information we hold
• Request correction of inaccurate information
• Request deletion of your data
• Request details about how your data is used
• Obtain a copy of the personal information you previously shared with us
• Opt out of certain uses (marketing, tracking)
• Withdraw consent (where applicable)
• Be free from discrimination for exercising your rights
• Appeal decisions made regarding your request

11.1 US State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of it, or delete it. You may also have the right to withdraw your consent to our processing, and to opt out of the sale or sharing of personal information, of targeted advertising, and of profiling in furtherance of decisions that produce legal or similarly significant effects. These rights are not absolute and may be limited in some circumstances by applicable law.

Depending on the state where you live, you may also have the right to:

• Access the categories of personal data being processed (including under the privacy law in Minnesota)
• Obtain a list of the categories of third parties to which we have disclosed personal data (including under the privacy laws in California, Delaware, and Maryland)
• Obtain a list of the specific third parties to which we have disclosed personal data (including under the privacy laws in Minnesota and Oregon)
• Obtain a list of the third parties to which we have sold personal data (including under the privacy law in Connecticut)
• Review, understand, question and, depending on where you live, correct how personal data has been profiled (including under the privacy laws in Connecticut and Minnesota)
• Limit the use and disclosure of sensitive personal data (including under the privacy law in California)
• Opt out of the collection of sensitive data, and of personal data collected through the operation of a voice or facial recognition feature (including under the privacy law in Florida)

Texas residents (under the TDPSA) have these rights, including the right to opt out of sale, of targeted advertising, and of profiling in furtherance of decisions that produce legal or similarly significant effects.

11.2 How to Exercise Your Rights

To submit a privacy request, you can:

• Fill out our data subject access request form
• Email [email protected]
• Use our support form
• Use the "Do Not Sell or Share" link in our website footer

You can also opt out of the sale of your personal information, of targeted advertising, and of profiling by disabling cookies in your cookie preference settings. We honor the Global Privacy Control (GPC) opt-out signal when it is enabled in your browser.

We acknowledge requests within 10 days and respond within 45 days (extendable once by a further 45 days). To appeal a decision, reply to our response; if it remains unresolved, you may contact your state Attorney General.

Under certain US state privacy laws you may designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent who does not submit proof of valid authorization to act for you.

11.3 Request Verification

When we receive your request we need to verify that you are the person the information belongs to. We use the personal information in your request only to verify your identity or your authority to make the request. If we cannot verify you from the information we already hold, we may ask for additional information for verification and for security and fraud prevention. If you submit through an authorized agent, we may need further information as well as written, signed permission from you.

This section supplements the Policy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Direct marketing (APP 7): RoverPass does not use the personal information of Australian residents for direct marketing. Electronic messages you receive relating to a reservation are transactional and are sent on behalf of the campground. If this changes, we will only use your information for direct marketing where you would reasonably expect it or have consented, will include a simple opt-out in every message, and will tell you the source of your information on request.

Overseas disclosure (APP 8): We disclose personal information to recipients outside Australia, including in the United States (hosting, payment, and email providers) and the European Union/United Kingdom (our channel-distribution provider, which hosts data in the Netherlands). Before disclosing, we take reasonable steps to ensure these recipients handle your personal information consistently with the APPs (including through contractual data-protection terms), and we remain accountable for those disclosures under the Privacy Act.

Complaints: Contact us at [email protected]; if unsatisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Notice requirements: This Policy satisfies the notice requirements of the Privacy Act, in particular what personal information we collect from you, from which sources, for which purposes, and the other recipients of your personal information.

If you do not wish to provide the personal information we need for its applicable purpose, it may affect our ability to provide our services, in particular to:

• Offer you the products or services that you want
• Respond to or help with your requests
• Manage your account with us
• Confirm your identity and protect your account

At any time you have the right to request access to or correction of your personal information by contacting us using the details in Section 17.

California Civil Code Section 1798.83, known as the "Shine The Light" law, permits California residents to request and obtain from us, once a year and free of charge, information about the categories of personal information (if any) we disclosed to third parties for direct marketing purposes, and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year.

If you are a California resident and would like to make such a request, please submit it in writing using the contact details in Section 17.

We take reasonable steps to protect your information, including:

• Encryption
• Access controls
• Monitoring and auditing
• Secure hosting
• Employee training
• Firewalls and threat detection

While we strive to protect your data, no system is 100 percent secure.

If a breach occurs, we will notify affected users and relevant authorities as required by law.

Our Services may include links to external sites. We do not control and are not responsible for their privacy practices.

RoverPass, Inc. 2028 E Ben White Blvd #240-4852 Austin, TX 78702 United States

Email: [email protected]

Help Center: https://help.roverpass.com/portal/en/home

To review, update, or delete the personal information we hold about you, fill out our data subject access request form.