Privacy Policy

The short version: your recs are private by default, we collect only what the product needs, we never sell your data, and recommendations can never be bought on Recs.

What we collect. Your email address and display name (to run your account), an optional photo and bio, the recommendations you create, and activity needed to make the product work — who you share lists with, favorites, bookings intents, and "going" confirmations you choose to make. We use privacy-respecting analytics (Vercel Analytics) to understand aggregate usage.

How it's used. To operate Recs: showing your lists to the people you explicitly share them with, sending the notifications you trigger (like alerts when someone acts on your rec), and improving the product. Venue contact details you add are visible only to you and used only when you choose to send a referral.

Who can see your recs. Only people you share a link with, people who answer your rec requests, and people you explicitly grant access. There are no public profiles and no search of other people's lists.

What we never do. We don't sell your data. We don't show ads. Venues cannot pay for placement, and recommenders are never paid — if that ever changed, this policy would say so in the first line.

Service providers. We run on Supabase (database & authentication), Vercel (hosting & analytics), Google (sign-in and place data), and Resend (email). Each processes data only to provide their service to us.

Your rights. You can access, correct, or delete your data at any time — edit in the app, or email us for full deletion. EU/GDPR rights (access, portability, erasure, objection) are honored for everyone, everywhere.

Contact. hello@recs.travel