Privacy Policy

Last updated: March 16, 2026

1. Data We Collect

Account Information

Name, email address, profile photo, kiting level, certifications, and preferences provided during registration and onboarding.

Booking Data

Reservation details, payment information (processed by Stripe — we never store card numbers), and communication between riders and operators.

Location Data

With your consent, we collect your location to provide distance-based search features ("Kite This Weekend"). Location sharing is always optional.

Session & Activity Data

Wind session logs, equipment preferences, and progression data you choose to track on the platform.

Trip Visibility

When you announce a trip, other users can see your name, level, and dates at a spot. You control visibility: Public, Friends Only, or Private.

2. How We Use Your Data

  • To provide and improve our marketplace services
  • To facilitate bookings and payments
  • To send booking confirmations, weather alerts, and service notifications
  • To personalize wind forecasts and spot recommendations
  • To match you with other kiters at spots (with your consent)
  • To detect and prevent fraud and abuse

3. Data Sharing

  • Operators: We share your name and booking details with operators to fulfill your reservation
  • Payment Processor: Stripe processes payments securely under their own privacy policy
  • Other Users: Public profile info and trip announcements are visible based on your privacy settings
  • Law Enforcement: Only when required by law

We never sell your personal data to third parties for advertising.

4. Your Rights (GDPR)

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to processing for specific purposes
  • Withdraw Consent: Revoke consent at any time

5. Data Retention

We retain account data for as long as your account is active. Booking records are kept for 7 years for legal/tax compliance. You can request account deletion at any time.

6. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted data at rest, and regular security audits. However, no system is 100% secure.

7. Contact

Data Protection Officer: privacy@kiteatlas.io