Privacy Policy | OBX Charter

1. Who controls your data

OBX Charter is operated by That's a Big Idea LLC, a North Carolina limited liability company. We are the controller of the personal information described in this policy. Contact us at[email protected]or (252) 573-5666.

2. What we collect

If you book a trip (customer)

Your name, email address and phone number;
Details of the booking — trip, date, party size, boat and any notes you provide;
Payment information, which is collected and processed by Stripe. We do not receive or store your card number.

If you list trips (captain)

Your name, business name, email address and phone number;
Business and vessel details — home port, boat name and type, biography and photographs;
License, permit and insurance documentation you provide for verification;
Stripe Connect account identifiers and payout status.

Automatically

Server and security logs — IP address, browser type, timestamps and similar technical data generated by our hosting providers;
Device push notification tokens, if you install the captain app and grant permission.

3. Why we use it

To create and manage bookings and take payment;
To notify captains of bookings, leads and schedule changes;
To verify that a captain holds the licenses, permits and insurance required to operate;
To prevent fraud and abuse, and to keep the platform secure;
To send transactional messages about your booking or account;
To comply with our legal and tax obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

4. Who we share it with

We share personal information only with service providers that operate the platform:

Stripe — payment processing and captain payouts;
Twilio — SMS notifications to captains and customers;
Sequenzy — email and inbound lead handling;
Expo — push notification delivery to the captain app;
Supabase — database hosting and storage;
Vercel — application hosting and server logs.

When a booking is made, the captain receives the information needed to run the trip — your name, contact details and booking details. We may also disclose information where required by law, or to protect the rights, safety or property of any person.

5. Cookies and analytics

We use only the cookies and local storage necessary to operate the platform — keeping you signed in, remembering form state, and protecting against cross-site request forgery. Beyond that, we use the following analytics tools, and each one waits for your consent before it stores anything:

Google Analytics 4 (Google) — Counts visits, shows which pages people read and which searches or links brought them here. Their privacy policy.
Meta Pixel (Meta / Facebook) — Tells us whether a visit or a booking came from a Facebook or Instagram advert, so we know which adverts to keep buying. If you accept it, Meta may also use the pixel to measure advertising across its own sites, under Meta’s privacy policy. Their privacy policy.

Google Analytics 4 stores nothing on your device before you accept. The tag is on the page, but its storage is switched off until you accept, so no analytics cookie or identifier is written and your visit cannot be recognised or joined to a later one.

The Meta pixel stores nothing before you accept: its script is not loaded on your device at all, so Meta never sees the visit.

Until you accept, no analytics tool is configured with storage, so we keep no analytics record of your visit.

If you decline, you can still browse and book, and nothing changes about how the site works for you. You can change your mind at any time using the button in this section.

6. How long we keep it

Booking records — kept while your account is active and for as long afterwards as needed for tax and accounting obligations.
Captain verification documents — kept while the listing is active and for a reasonable period afterwards for compliance purposes.
Server logs — retained by our hosting provider on a short rolling basis.

When information is no longer needed, we delete or anonymise it.

7. Your rights

You may ask us to:

Tell you what personal information we hold about you, and give you a copy;
Correct information that is inaccurate;
Delete your information, where we are not required to keep it;
Provide your information in a portable format; and
Stop sending you non-essential messages.

Email[email protected]and we will respond within 30 days. We may need to verify your identity before acting, and we may decline a request where the law requires us to retain the data.

If you are in California, you have the rights described above under the CCPA/CPRA, including the right not to be discriminated against for exercising them. If you are in the EEA or UK, you also have the right to object to processing and to lodge a complaint with your local supervisory authority.

8. Security

We use industry-standard measures to protect personal information, including encryption in transit, access controls and payment processing through Stripe so that card data never reaches our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

The platform is not directed to children under 13, and we do not knowingly collect their personal information. A child may join a trip as a guest of a booking adult, in which case the adult provides the booking information.

10. Changes

We may update this policy. Material changes will be posted here with a new "last updated" date.

11. Contact

That's a Big Idea LLC · Outer Banks, North Carolina ·[email protected] · (252) 573-5666