Privacy Policy

1. Information We Collect

We collect information you provide directly when you create an account or update your profile:

• Account information: name, email address, and password (stored securely via Firebase Authentication).
• Optional contact info: phone number, used to send SMS trip alerts if you opt in (see Section 3).
• Wave profile: skill level, preferred wave type, wave height range, minimum water temperature, and preferred wave direction.
• Flight profile: home airport(s), ideal trip length, maximum flight cost, maximum layovers, and preferred departure days.

We also collect information automatically when you use the service:

• Usage data: pages viewed, features used, and interactions with trip recommendations.
• Device and log data: browser type, operating system, IP address, and referring URLs.
• Cookies and similar technologies: see Section 5 below.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account.
• Match your surf and travel preferences to available trip windows and send you alerts.
• Improve and personalize the service.
• Respond to your support requests sent to support@popupsurftrips.com.
• Send transactional emails (account verification, password reset, match alerts). We will not send marketing emails without your consent.
• Monitor usage patterns to fix bugs and improve performance.
• Comply with applicable laws and protect our legal rights.

3. SMS / Text Message Alerts

If you provide a mobile phone number and opt in, we send recurring SMS text alerts about surf trips matched to your profile. SMS alerts are entirely optional and require your express consent — you opt in by checking the SMS consent box on your Profile page. You can use the rest of the service without them.

• Message frequency: Message frequency varies and depends on how often surf and flight conditions match your profile, but is less than 3 messages per week.
• Message and data rates: Message and data rates may apply, depending on your mobile carrier and plan.
• Opt out and help: You can cancel SMS alerts at any time by replying STOP to any message; we will send one confirmation and then stop. Reply HELP for help, contact us at support@popupsurftrips.com, or turn alerts off on your Profile page.
• No sharing of your mobile information: We do not sell or share your mobile phone number or your SMS opt-in and consent information with any third parties or affiliates for their marketing or promotional purposes. Mobile opt-in data and consent are never shared with third parties. We disclose your number only to our messaging service provider (Twilio) strictly to deliver the alerts you requested.

4. Sharing of Information

We do not sell your personal information. We share it only in the following limited circumstances:

• Service providers: We use Google Firebase (Authentication and Firestore database) and Google Analytics to operate and improve the service. These providers process data on our behalf under their own privacy policies. Firebase data is governed by Google's privacy policy.
• Legal requirements: We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
• Business transfers: If Links Letters LLC DBA PopUp Surf Trips is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the site before your information is transferred and becomes subject to a different privacy policy.

5. Cookies and Analytics

We use cookies and similar tracking technologies to operate the service and understand how it is used. Specifically:

• Firebase Authentication uses browser storage (IndexedDB / localStorage) to keep you logged in between sessions.
• Google Analytics collects anonymized usage data (pages viewed, session duration, geographic region) to help us improve the service. Google Analytics may set cookies in your browser. You can opt out using the Google Analytics Opt-out Browser Add-on.

Most browsers allow you to refuse or delete cookies via settings. Disabling cookies may limit some features of the service.

6. Data Retention

We retain your account and profile information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

7. Data Security

We use industry-standard security measures, including TLS encryption in transit and Firebase's built-in security for data at rest. No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your information.

8. Children's Privacy

Our service is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at support@popupsurftrips.com and we will delete it promptly.

9. Your Rights and Choices

You may:

• Access and update your personal information at any time via your Profile page.
• Delete your account by contacting us at support@popupsurftrips.com. We will process your request within 30 days.
• Opt out of analytics using the Google Analytics opt-out tool linked in Section 5.

If you are a resident of California or another state with applicable privacy laws, you may have additional rights including the right to know, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@popupsurftrips.com.

10. Third-Party Links

Our service may display links to third-party websites (such as airline booking sites). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the site before the changes take effect. The "Effective date" at the top of this page reflects the date of the most recent revision. Your continued use of the service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

Links Letters LLC DBA PopUp Surf Trips
Email: support@popupsurftrips.com