Privacy Policy

1. Who we are

Superheroes Retreat operates superherosretreat.com and the vacation home in Terra Lago, Indio, California. For privacy requests, email support@superherosretreat.com or use the contact form.

2. Scope

This policy covers:

• this website (browsing, cookies, contact form);
• direct bookings started on this site through Hospitable;
• guest Wi-Fi after check-in through StayFi, where guests typically enter an email address and mobile number;
• related operations of the rental (house rules, deposits, guest communications).

It does not control Airbnb, VRBO, Booking.com, or Expedia. Those companies have their own policies if you book there.

3. Information we collect

Website

• Contact form: name, email address, and message. Delivered to us by Resend so we can reply.
• Analytics, only if you accept cookies: Google Analytics 4 may record page views, approximate location, device and browser type, and referral source. We do not use analytics for ads.
• Your cookie choice in this browser (shr-analytics-consent).
• Server logs our host (Railway) may keep: IP address, user agent, path, and time, for security and uptime.
• If you load the map, Google may receive request data for that embed, under Google’s terms.

Bookings (Hospitable)

• Guest name, email, phone, address, stay dates, guest count, payment details, and the rental-agreement acceptance. Hospitable processes payment. We do not store full card numbers on this website.
• Messages you send us about the reservation.

After check-in — guest Wi-Fi (StayFi)

House Wi-Fi uses StayFi. To get online, guests usually complete a splash page and provide an email address and mobile number (and any other fields shown on that screen). StayFi may also log device or connection data needed to run Wi-Fi. This happens at the property, not on the booking calendar. Every guest who connects — not only the person who booked — may be asked for this information.

Other sources

• OTA platforms, if you booked there and the platform shares guest details with us.
• You, when you email or call us.

4. How we use information

• Answer questions and manage reservations, check-in, and the stay.
• Show availability and take payment through Hospitable.
• Enforce house rules, occupancy, parking, and City of Indio requirements.
• Provide guest Wi-Fi and keep the network reasonably secure.
• Send stay-related messages (access instructions, house information, issues during the stay).
• If you opt in on the StayFi splash page or another consent screen: email or SMS about future stays, reviews, or offers. You can opt out as described below.
• Understand how the website is used (only with analytics consent).
• Detect abuse, fraud, and security incidents, and comply with law.

5. How we share information

We share personal information with service providers who help us operate:

• Hospitable — calendar, payments, rental agreement.
• StayFi — guest Wi-Fi, and email or SMS tools if we use them there.
• Resend — contact-form delivery.
• Google — Maps embed; Analytics only if you consent.
• Railway — website hosting.
• Payment processors Hospitable uses (for example, a card network or bank).

We may also share information if required by law, to protect people or the property, or with a professional advisor under confidentiality. If we ever sell or reorganize the business, guest records could transfer with it, still under this policy or a successor notice.

We do not sell personal information for money. We do not share it for cross-context behavioral advertising. We do not use analytics for ads.

6. Cookies and Global Privacy Control

Essential cookies or local storage may remember your analytics choice. Google Analytics cookies load only after you accept. If your browser sends a Global Privacy Control (GPC) signal, we treat that as a decline of analytics. You can also decline in our cookie banner. Declining analytics does not block booking or the contact form.

7. Email and text messages

Transactional messages about a booking or an active stay do not require marketing consent. Marketing email and SMS from StayFi or us require the consent collected on the StayFi splash page or another clear opt-in. Reply STOP to SMS or use the unsubscribe link in emails. Opting out of marketing does not stop messages we must send about a current reservation or safety.

8. Retention

• Contact-form mail: as long as needed to reply and keep a normal business record.
• Booking and payment records: as required for taxes, disputes, and the rental.
• StayFi guest contacts: while we use StayFi and as needed for opt-out lists.
• Analytics: Google’s retention settings, if you consented.
• Server logs: the host’s defaults, typically a short operational window.

9. Security

We use HTTPS on this site and rely on Hospitable, StayFi, Resend, Google, and Railway for their own security. No method of transmission or storage is perfectly secure. Tell us promptly if you think your information was exposed.

10. California privacy rights (CCPA/CPRA)

If you are a California resident, you may request to:

• know the categories and specific pieces of personal information we have collected;
• know the categories of sources, purposes, and categories of third parties;
• delete personal information, subject to legal exceptions (for example, a completed stay or tax record);
• correct inaccurate personal information;
• opt out of sale or sharing — we do not sell or share as those terms are used in the CCPA/CPRA;
• limit use of sensitive personal information, if we collect any (we do not seek government IDs or precise geolocation on this website).

We will not discriminate against you for exercising these rights. Email support@superherosretreat.com from the address we have on file, or describe how we can verify you. We may need to confirm your identity before we fulfill a request. An authorized agent may submit a request with proof of authority. We aim to respond within 45 days, or as the statute allows.

Categories we may collect, depending on how you interact with us: identifiers (name, email, phone, IP address); commercial information (stay dates, amounts); internet activity (analytics, if consented); and inferences we do not build for advertising. We collect them from you, from Hospitable or an OTA, from StayFi after you connect to Wi-Fi, and from our host’s logs.

11. Children

The website and StayFi splash page are not directed at children under 13. We do not knowingly collect their personal information. Occupancy may include children as registered guests on a booking made by an adult. If you believe a child submitted data to us, email us and we will delete it where we can.

12. People outside the United States

The home and our vendors are in the United States. If you use the site from another country, your information is processed in the U.S., which may have different data-protection rules than your home country.

13. Other privacy notices

Hospitable’s and StayFi’s own notices also apply to data they process. The StayFi splash page is the place to review StayFi’s consent language before you join Wi-Fi.

14. Changes

We may update this policy. The “Last updated” date at the top will change. Continued use of the website after an update means you accept the revised policy for website activity. We will not silently expand marketing uses of StayFi contacts without a consent path.

15. Contact

Contact form · support@superherosretreat.com · Terms of Use