Privacy Policy

Introduction

Sage Outdoor Advisory ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Information We Collect

Personal Information

We collect personal information that you provide to us when you:

• Sign in via Google OAuth: When you authenticate using Google, we receive your email address, name, and profile picture from Google's authentication service
• Create an account: We store your account information in our database, including your user ID, email address, and account status
• Contact us: If you contact us through our website, we collect the information you provide, such as your name and email address
• Use our services: We collect information about how you interact with our website and services

The specific information we collect includes:

• Email address (required for account creation)
• Name and display name (from Google OAuth or manual entry)
• Profile picture (from Google OAuth, if provided)
• Account status and authorization information

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages you visit and time spent on pages
• Referring website addresses

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and respond to your inquiries
• Send you administrative information and updates
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues
• Comply with legal obligations

Third-Party Services

We use the following third-party services that collect, monitor, and analyze information:

• Supabase: We use Supabase for data storage, database services, and user authentication. Your account information, including email address and account status, is stored securely in Supabase databases. Supabase's privacy policy applies to their handling of this data. View Supabase Privacy Policy
• Google OAuth: We use Google OAuth for user authentication. When you sign in with Google, Google provides us with your email address, name, and profile picture. Google's privacy policy applies to data collected by Google during the authentication process. View Google Privacy Policy
• Google Analytics: We use Google Analytics to analyze website traffic and usage patterns. Google Analytics collects information such as IP addresses, browser type, pages visited, and time spent on pages. View Google Privacy Policy

These third-party service providers have their own privacy policies addressing how they use such information. We encourage you to review their privacy policies.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access: Request a copy of the personal information we hold about you
• The right to correct: Request correction of inaccurate or incomplete information
• The right to deletion: Request deletion of your personal information (subject to legal obligations)
• The right to object: Object to certain processing of your information
• The right to data portability: Receive your data in a structured, commonly used format
• The right to withdraw consent: Withdraw consent for processing based on consent (where applicable)

How to Exercise Your Rights: To exercise any of these rights, please contact us at contact@sageoutdooradvisory.com with your request. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

Right to Lodge a Complaint (GDPR): If you are located in the European Economic Area (EEA) or United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your data protection rights.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal information based on the following legal bases under the General Data Protection Regulation (GDPR):

• Consent: When you provide explicit consent for specific purposes, such as account creation and authentication
• Contract: To fulfill our contractual obligations to you, such as providing access to our services
• Legal obligation: To comply with applicable laws and regulatory requirements
• Legitimate interests: For our legitimate business interests, such as improving our services, preventing fraud, and ensuring security, where such interests are not overridden by your privacy rights

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically:

• Account information: Retained for the duration of your account's active use, and for up to 3 years after account inactivity or deletion request, except where we are required to retain it by law
• Website analytics data: Retained for 26 months (Google Analytics default retention period)
• Communication records: Retained for 3 years from the date of last contact for customer service and legal compliance purposes
• Legal/regulatory requirements: Some information may be retained longer if required by applicable law, court order, or legal process

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

Specifically, we use Supabase, a service provider based in the United States, for data storage and processing. When we transfer personal information from the European Economic Area (EEA) or United Kingdom to the United States or other countries outside the EEA/UK, we ensure appropriate safeguards are in place to protect your information, including:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with our service providers
• Technical and organizational security measures

By using our services, you consent to the transfer of your information to the United States and other countries where our service providers operate.

Do Not Sell My Personal Information (California Residents)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding the sale and sharing of personal information.

We do not sell your personal information. We do not sell, rent, or disclose your personal information to third parties for monetary or other valuable consideration.

California residents have the right to:

• Know what personal information we collect and how it's used
• Request deletion of personal information
• Opt-out of the sale or sharing of personal information (though we do not sell your information)
• Non-discrimination for exercising privacy rights

To exercise these rights, please contact us at contact@sageoutdooradvisory.com.

Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at contact@sageoutdooradvisory.com. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you and relevant regulatory authorities as required by applicable law. Notifications will be provided without undue delay and, where feasible, within 72 hours of becoming aware of the breach (as required by GDPR) or as otherwise required by applicable law.

Notifications will be sent to the email address associated with your account or through other reasonable means as appropriate under the circumstances.

Cookies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (if you have an account and we have your email address)
• Displaying a notice on our website for significant changes

You are advised to review this Privacy Policy periodically for any changes. Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us: