Escape OS ("we," "us," or "our") operates the website at escapeos.app and the application at app.theescapearchive.com (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
1. Information We Collect
1.1 Information You Provide
- Account information: Name, email address, business name, and password when you create an account.
- Waitlist information: Name, email, business name, and number of rooms when you join our waitlist.
- Billing information: Payment details processed securely through Stripe. We do not store your full credit card number on our servers.
- Venue and booking data: Room configurations, booking records, waiver submissions, staff schedules, and customer records that you enter into the platform.
- Communications: Emails, support requests, or feedback you send us.
1.2 Information Collected Automatically
- Usage data: Pages visited, features used, clicks, session duration, and referral source.
- Device information: Browser type, operating system, screen resolution, and IP address.
- Cookies: We use cookies and similar technologies for analytics and to remember your preferences. See Section 5 for details.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service.
- Process transactions and send related information (confirmations, invoices).
- Send you product updates, waitlist notifications, and marketing communications (you can opt out at any time).
- Respond to support requests and communicate with you.
- Monitor usage patterns to improve performance and user experience.
- Detect, prevent, and address fraud, abuse, or technical issues.
- Comply with legal obligations.
3. How We Share Your Information
We do not sell your personal information. We share information only in the following circumstances:
- Service providers: We use trusted third-party services to operate the platform:
- Supabase — database and authentication infrastructure.
- Stripe — payment processing. Stripe's privacy policy applies to payment data.
- Resend — transactional and marketing email delivery.
- Google Analytics — website analytics (only with your cookie consent).
- Google reCAPTCHA — spam and abuse prevention.
- Cloudflare — DNS, CDN, and DDoS protection.
- AWS (Amazon Web Services) — application hosting via AWS Amplify.
- Vercel — marketing site hosting.
- Legal compliance: If required by law, subpoena, court order, or government request.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred.
- With your consent: We may share information when you explicitly direct us to.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you cancel your account, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).
Waitlist data is retained until you unsubscribe or the waitlist is closed.
5. Cookies and Tracking
We use cookies and similar technologies on our website. When you first visit, a consent banner allows you to accept or decline non-essential cookies.
- Essential cookies: Required for site functionality (e.g., authentication, session management). These cannot be disabled.
- Analytics cookies: Google Analytics tracking is loaded only if you click "Accept" on the cookie consent banner. If you decline, no analytics cookies are set.
You can clear cookies at any time through your browser settings. Clearing cookies will reset your consent preference, and you will see the consent banner again on your next visit.
6. Your Rights
6.1 All Users
You have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your personal information.
- Opt out of marketing emails at any time via the unsubscribe link in any email or at escapeos.app/unsubscribe.
- Withdraw cookie consent by clearing your browser cookies.
6.2 California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected, used, and shared.
- Right to delete personal information.
- Right to opt out of the sale of personal information. We do not sell personal information.
- Right to non-discrimination for exercising your privacy rights.
6.3 EEA/UK Residents (GDPR)
If you are located in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation including:
- Right of access, rectification, erasure, and data portability.
- Right to restrict or object to processing.
- Right to withdraw consent at any time.
- Right to lodge a complaint with a supervisory authority.
Our legal bases for processing are: performance of a contract (providing the Service), legitimate interests (improving the Service, preventing fraud), consent (analytics cookies, marketing emails), and compliance with legal obligations.
7. Data Security
We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), role-based access controls, and secure authentication. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.
9. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.
10. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your country of residence.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
Escape OS
Email: privacy@escapeos.app
For data deletion or access requests, please email us from the address associated with your account. We will respond within 30 days.