Privacy Policy

1. Our Commitment to Privacy

CampVector ("we", "our", "us") respects your privacy and is committed to protecting your personal information in accordance with British Columbia's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

You can browse our interactive maps, wildfire layers, smoke indices, and recreation site datasets without creating an account or providing any personal information.

2. Information We Collect

• Account Credentials: If you sign up or log in, we collect your email address and authentication tokens via Supabase. If you sign in using Google OAuth, we receive your email and basic profile identifier.
• Watchlist & Notification Data: When you configure campsite watchlists, we store your target parks, date filters, minimum stay rules, push subscription device tokens (VAPID), or phone number (for SMS alerts) strictly to deliver requested drop alerts.
• Diagnostic & Server Logs: Standard server logs record IP addresses, browser user-agents, and HTTP request headers strictly for security monitoring, abuse prevention, rate-limiting, and DDoS defense.
• Aggregated Analytics: We collect non-identifiable usage metrics (such as visited pages, layer toggles, and feature interactions) to improve app performance and map responsiveness.
• Feedback: If you voluntarily submit feedback or bug reports, we receive your rating, comments, and optional contact email.

We will never sell, rent, monetize, or distribute your personal data or email to advertisers or data brokers.

3. Payment Security & Processing

All financial transactions and subscription billings are processed directly by Stripe, Inc. CampVector never receives, processes, or stores your credit card numbers, CVV, or banking credentials. Stripe handles transactions under strict PCI-DSS Level 1 compliance standards.

4. Third-Party Sub-Processors & Data Residency

To deliver our 24/7 service, we utilize trusted infrastructure providers who process data strictly on our behalf:

• Supabase: Encrypted PostgreSQL database and user authentication storage (hosted in secure North American AWS facilities).
• Stripe: Payment processing and subscription management.
• Resend: Transactional email dispatch for cancellation alerts and weekly digests.
• Twilio: Direct SMS dispatch for high-priority cancellation alerts (phone numbers are used strictly for requested alerts).
• Google Analytics: Aggregated, anonymized website traffic and performance measurement.
• Mapbox: Geospatial vector tile rendering (processes anonymous map viewport requests).
• Vercel & Cloudflare: Edge hosting, CDN caching, and DDoS mitigation.

Data is stored in Canadian and United States data centres under modern encryption standards (TLS in transit, AES-256 at rest).

5. Data Retention Schedules

• Incident & Drop Telemetry: Public cancellation and wildfire events are retained for 48 hours on live feeds and archived for 30 days for historical pattern analysis.
• User Accounts & Watchlists: Active account data and alert preferences are retained for the lifetime of your account.
• Account Deletion: Upon receiving a deletion request, all personal identifiers, active watchlists, and authentication records are permanently erased within 24 to 48 hours.

6. Communications & Anti-Spam (CASL)

In compliance with Canada's Anti-Spam Legislation (CASL), we only send emails and SMS alerts that you have specifically configured or opted into. You can manage or delete alert watchlists at any time in the app, reply STOP to any SMS, or unsubscribe from digests via the 1-click link in any email footer.

7. Your Rights & Data Deletion

Under Canadian privacy law (PIPA / PIPEDA), you have the right to request access to the personal data we hold about you, request corrections, or request complete account and data deletion.

To request full deletion of your account and all associated watchlists, email us at privacy@campvector.com. We will process verified requests promptly.