Privacy Policy

Last Updated: July 2026

1. Information We Collect

When You Register:

• Name & Email — Required to create your account
• Password — Hashed securely using bcrypt (we never store plain-text passwords)
• IP Address — Logged when you agree to Terms (for security & audit purposes)

When You Subscribe:

• Stripe Customer ID — Unique identifier for your Stripe account (for billing)
• Subscription Status — Whether your subscription is active, cancelled, or past-due
• Billing Plan — Monthly or Yearly plan you selected

Content You Create:

• Photos, passports, collections, notes, and other content you upload
• We store this to provide the Service

2. How We Use Your Information

We use your data to:

• Provide the Service (account management, billing, storage)
• Send transactional emails (verification, password reset, billing notifications)
• Prevent fraud and abuse
• Comply with legal obligations

We do NOT:

• Sell your data to third parties
• Share email or personal info without your consent
• Use your content for marketing without permission

3. Third-Party Services

Stripe (Payment Processing) — We use Stripe to process subscriptions. Stripe securely handles your payment method and does not share it with us. See Stripe's Privacy Policy.

Email (Transactional Only) — We send emails via our host's mail service. Emails are not retained beyond their delivery.

4. Data Retention

Active Accounts: We retain your account data while your account is active.

After Deletion: When you delete your account, we:

• Remove your personal data (name, email, password hash) within 30 days
• Keep anonymized billing records for tax & legal compliance (required by law)
• Notify Stripe to remove your customer record

5. Your Rights

Right to Access: You can request a copy of your data by emailing us.

Right to Delete: You can delete your account anytime from account settings. We will remove personal data as described above.

Right to Correct: You can update your name, email, and other profile information anytime.

6. Security

We use industry-standard security practices:

• Passwords hashed with bcrypt (never stored plain-text)
• HTTPS encryption for all data in transit
• Firewall protection on our servers

No system is 100% secure. If we discover a data breach, we will notify affected users within 30 days.

7. Children's Privacy

S2D Spots is intended for users 13 and older. We do not knowingly collect data from children under 13. If we learn we have done so, we will delete that data immediately.

For Stripe subscriptions: Stripe requires the payment method holder to be 18+. Parents/guardians may set up accounts on behalf of their children if they provide their own payment method.

8. Changes to Privacy Policy

We may update this Privacy Policy. We will notify you of material changes by email or by posting a notice on the Service.

9. Contact

Questions about your privacy? Contact us at support@s2dadventures.com

This Privacy Policy is governed by the laws of the State of Tennessee. Contact us at the email above with any questions or requests regarding your data.

S2D Spots takes legal and regulatory compliance seriously. We regularly review this Privacy Policy and our broader data-handling practices, and we run ongoing internal sweeps to identify any compliance concerns. Any issue flagged for review is prioritized and resolved in a timely manner.