Privacy Policy

Who we are

ROC — Roatán Online Concierge is an AI-powered travel guide for visitors to Roatán, Honduras, operated by Mickel, based in Roatán, Bay Islands, Honduras. You can reach us at roc.concierge@outlook.com.

What we collect

• Account information — email address, password (encrypted), arrival date, and departure date when you create an account.
• Chat messages — the questions you type into the ROC chat. These are sent to Anthropic's API to generate responses and are not stored by us long-term.
• Donations — ROC is free and never asks for payment. If you choose to donate, you do so on a third-party donation service; we never see or store your payment details.
• Reviews you submit — the display name, rating, optional guide shoutout, and review text you enter on the reviews page. Reviews are held for approval before publication, and anything approved is shown publicly on the site.
• Messages you send us — the name, email address, topic, and message you submit through the contact form, so we can reply to you.
• Usage data — anonymous analytics (pages visited, session duration) via Vercel Analytics. No personally identifiable information is collected.
• Session cookies — essential cookies required for login and authentication.

How we use your data

• Your email and stay dates are used to manage your account.
• Your chat messages are processed by Anthropic to generate responses. We do not read or store individual conversations.
• Your email may be used to send transactional messages (account confirmation, password resets). We do not send marketing emails without your consent.
• We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

Third-party services

ROC uses the following services, each governed by their own privacy policies:

• Anthropic — processes chat messages to generate AI responses
• Supabase — stores account data (email, stay dates) securely
• Vercel — hosts the application and provides anonymous analytics
• Resend — sends transactional emails

Data storage & security

Your account data is stored securely on Supabase servers in the United States. We use HTTPS encryption for all data in transit. Passwords are hashed and never stored in plain text. We implement rate limiting, input validation, and other security measures to protect your data.

Cookies

ROC uses only essential session cookies required for authentication and login. We do not use advertising, tracking, or third-party cookies. The Vercel Analytics we use is privacy-friendly and does not set cookies or collect personal information.

Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and all associated data
• Withdraw consent at any time

To exercise any of these rights, contact us at roc.concierge@outlook.com or use the contact page. We will respond within 30 days.

Children's privacy

ROC is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of ROC after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email us at roc.concierge@outlook.com or use our contact page.