Skip to content
Buffalo River Resort home

⇢ The Fine Print ⇠

Privacy Policy

This is how Buffalo River Resort collects and uses your information. Buffalo River Resort decides what is collected and why; the software it runs on, DeckPOS, processes it on Buffalo River Resort’s behalf and for nothing else.

When you buy something

  • What you bought, when, and what you paid — kept as the sales record tax law requires.
  • Your name, email address and phone number, if you give them at the counter or ask for a receipt by email or text.
  • Card payments are handled by Stripe. Your card number never reaches this store's systems; only a reference to the payment and the last four digits are kept.

When you book a stay or a rental

  • Your name, email, phone number and the dates and party size of your booking, to run the reservation and reach you if something changes.
  • Notes you give about your stay.

When you sign a waiver

  • For each participant: name, date of birth, gender, home address, email and mobile number, and an emergency contact's name, relationship and phone number.
  • A photo of your ID, if the activity requires one. Raw images are deleted after the signing is complete; a sealed evidence copy is kept with the signed waiver.
  • The signed waiver itself is a legal record and is retained even if you later ask for your other data to be deleted.

When you buy a ticket

  • The holder's name, email and phone number, so the ticket can be sent and reissued. The ticket page shows a first name only.

Who else sees it

Only the services that make this store run, each processing your data solely to provide their service:

  • Supabase, Inc. — database, authentication and file storage. Everything the product stores.
  • Vercel, Inc. — application hosting, delivery and custom-domain provisioning. Requests in transit; server logs; custom domain names.
  • Stripe, Inc. — subscription billing, and card payments for stores that use it. Billing contact and card details — card numbers never reach us; customer name and email on a saved card.
  • Resend, Inc. — transactional and marketing email, and inbound email relay. Recipient address, message content, delivery and bounce events.
  • Telnyx LLC — text messages — receipts, booking notices, replies — on the platform's account, and 10dlc registration. Recipient number, message content, the store's business details for carrier registration.
  • SignSealer — electronic signature on waivers, rental agreements, float releases and event contracts. Signer name and email, the document itself with the booking details printed into it — for a waiver, the phone, birth date and address it asks for and the names of the minors it covers — and the signing evidence the certificate records: the times, the IP address and the browser the signature was made from.
  • Anthropic, PBC — language models: drafting waivers, event copy, web pages and marketing text; summarising and suggesting replies in the sms inbox; the review digest; reading uploaded photos and supplier documents; the back-office assistant. The text and images handed to it for the task — which can include SMS transcripts with customer names and numbers, review text with reviewer names, uploaded images, supplier invoices and price lists, and the store data needed to answer a question.
  • OpenAI, L.L.C. — language models (the alternative provider for the same features), embeddings for the knowledge base, and image generation. The same categories as Anthropic when chosen as the provider; knowledge-base text for embeddings; prompts and source images for generated pictures.
  • OpenRouter, Inc. — routing image and video generation to third-party models. Prompts and source images — property photographs, product photographs — for the map illustrator and the video studio.
  • ElevenLabs Inc. — voice: narration for videos and the phone agent, including cloned voices. The text spoken; voice samples a staff member records for cloning, deleted from our storage once the clone exists.
  • Google LLC — business profile (reviews, hours, posts), analytics, google ads, drive imports, and sign-in with google. Review text and reviewer names read from Business Profile; site analytics; campaign settings and spend; files a staff member chooses to import; the email on a Google sign-in.
  • Apple Inc. — sign in with apple, for the customer portal. The email (or Apple relay address) on the sign-in.
  • Verisign, Inc. (RDAP) — checking a custom domain's registration and expiry. The domain name only.

How long we keep it

Sales records for as long as tax law requires. Signed waivers for as long as a claim could be brought. Messages we sent you and the log of what happened on your account for up to two years. Everything else until you ask us to delete it.

Cookies

Essential cookies keep sign-in and secure checkout working. An optional analytics category is off unless you allow it. Change your choice any time via in the footer.

Your choices

You can ask for a copy of what we hold about you, or ask us to delete it, at /privacy/request, or by calling 931-593-2000. We will confirm it is you first. We keep the records we are required to retain — sales, signed waivers, any credit you are owed — and delete the rest.

This policy describes what Buffalo River Resort’s software does with your information. Buffalo River Resort can replace it with its own words from its website settings.