Privacy Policy

Who we are

ROC — Roatán Online Concierge is an AI-powered travel guide for visitors to Roatán, Honduras, operated by Mickel, based in Roatán, Bay Islands, Honduras. You can reach us at roc.concierge@outlook.com.

What we collect

• Account information — email address, password (encrypted), arrival date, and departure date when you create an account.
• Chat messages — the questions you type into the ROC chat. These are sent to Anthropic's API to generate responses and are not stored by us long-term.
• Payment information — if you pay for access, Stripe processes your payment. We never see or store your card details.
• Usage data — anonymous analytics (pages visited, session duration) via Vercel Analytics. No personally identifiable information is collected.
• Session cookies — essential cookies required for login and authentication.

How we use your data

• Your email and stay dates are used to manage your account and determine access to full provider contact details.
• Your chat messages are processed by Anthropic to generate responses. We do not read or store individual conversations.
• Your email may be used to send transactional messages (account confirmation, payment receipts). We do not send marketing emails without your consent.
• We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

Third-party services

ROC uses the following services, each governed by their own privacy policies:

• Anthropic — processes chat messages to generate AI responses
• Supabase — stores account data (email, stay dates) securely
• Stripe — processes payments; we never store card details
• Vercel — hosts the application and provides anonymous analytics
• Resend — sends transactional emails

Data storage & security

Your account data is stored securely on Supabase servers in the United States. We use HTTPS encryption for all data in transit. Passwords are hashed and never stored in plain text. We implement rate limiting, input validation, and other security measures to protect your data.

Cookies

ROC uses only essential session cookies required for authentication and login. We do not use advertising, tracking, or third-party cookies. The Vercel Analytics we use is privacy-friendly and does not set cookies or collect personal information.

Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and all associated data
• Withdraw consent at any time

To exercise any of these rights, contact us at roc.concierge@outlook.com or use the contact page. We will respond within 30 days.

Children's privacy

ROC is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of ROC after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email us at roc.concierge@outlook.com or use our contact page.