Back to Vaycurate

Privacy Policy

Last updated: February 27, 2026

1. Introduction

Vaycurate (“we,” “our,” or “us”) operates the vaycurate.com website and related services (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Platform or use our services, including our SMS text messaging program. By accessing or using our Platform, you agree to this Privacy Policy.

2. Information We Collect

Personal Information You Provide

When you create an account, make a booking, or interact with our Platform, we may collect:

  • Name (first and last)
  • Email address
  • Phone number (used for account verification and, with your consent, SMS notifications)
  • Account credentials (password, stored in encrypted form)
  • Booking and transaction details
  • Messages sent through our messaging system
  • Profile information you choose to provide
  • SMS notification preferences and consent records

Information from Third-Party Sign-In

If you choose to sign in using Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password. Your use of Google sign-in is also subject to Google’s Privacy Policy.

Information Collected Automatically

When you use our Platform, we may automatically collect:

  • Browser type and version
  • Device information
  • IP address
  • Pages visited and time spent on those pages
  • Referring website address
  • Cookies and similar tracking technologies

Information Received from Integration Partners

Some experiences available on our Platform are sourced through connected property management systems and distribution channel partners. In these cases, we may receive inbound data from those systems, including experience availability, property listing details, and scheduling information. This is a receive-only relationship — Vaycurate does not transmit traveler personal information back to originating partner systems. Any bookings made on partner-connected experiences are processed and stored entirely within Vaycurate.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account
  • Process bookings and transactions
  • Connect travelers with experience vendors
  • Send booking confirmations and updates via email and, with your consent, SMS text messages
  • Send experience reminders via email and, with your consent, SMS text messages
  • Facilitate communication between travelers and vendors through our messaging system
  • Fulfill bookings and display current availability for experiences connected through property management system and distribution channel integrations
  • Improve our Platform and user experience
  • Respond to your inquiries and provide customer support
  • Send promotional communications (with your consent, via email or SMS)
  • Detect and prevent fraud or unauthorized activity
  • Comply with legal obligations

4. How We Share Your Information

We may share your information in the following circumstances:

  • With Vendors: When you book an experience, we share your name and relevant booking details with the vendor providing the experience. Vendor contact information is only shared with travelers who have confirmed bookings.
  • Service Providers: We share information with third-party service providers who help us operate the Platform, including payment processors (Stripe), email delivery services (Resend), SMS messaging providers (Twilio), analytics providers (Google Analytics), and hosting providers. These providers are contractually obligated to use your information only to provide services to us and are bound by appropriate data protection agreements.
  • Distribution and Integration Partners: Some experiences on the Platform originate from connected property management systems and distribution channel partners. These partners supply availability and listing data to Vaycurate on an inbound-only basis. Vaycurate does not share or transmit traveler personal information back to originating partner systems. All such integrations are governed by data processing agreements.
  • Legal Requirements: We may disclose your information if required by law, regulation, or legal process.
  • Business Transfers: In connection with any merger, sale, or transfer of company assets.

We do not sell your personal information to third parties. We do not sell, rent, loan, trade, lease, or otherwise transfer your phone number or any personal information to third parties for marketing or promotional purposes.

5. SMS & Text Message Communications

Vaycurate offers an optional SMS text messaging program that allows you to receive important notifications via text message. This section describes how we handle SMS communications and your phone number data.

Consent & Opt-In

SMS notifications are disabled by default. You must explicitly opt in to receive text messages by enabling the SMS toggle on your account Settings page. A valid phone number on your profile is required before SMS can be enabled. You may also select which types of messages you wish to receive through granular preference controls. For full details on our opt-in process, visit our SMS Consent page.

Types of Messages

With your consent, we may send the following types of SMS messages:

  • Booking Confirmations: Text confirmations when you book an experience, including the experience name, date, time, and location.
  • Experience Reminders: Reminder texts before your upcoming experiences to help you prepare and arrive on time.
  • Marketing & Promotions: With separate opt-in, promotional messages about new experiences, special offers, and seasonal activities (you may opt out of these independently).

Message Frequency

Message frequency varies based on your activity and preferences. Booking confirmations are sent once per booking. Reminders are sent once per upcoming experience. Promotional messages are limited in frequency. You control which message types you receive through your Settings page.

Message & Data Rates

Standard message and data rates from your wireless carrier may apply to SMS messages sent to and from our Platform. Please contact your wireless carrier for details about your messaging plan and any applicable charges.

How We Use Your Phone Number

Your phone number is used exclusively for:

  • Delivering SMS notifications you have opted in to receive
  • Sharing with vendors only when you have a confirmed booking (so they can contact you regarding your experience)

Your phone number is never sold, rented, or shared with third parties for their marketing purposes. Our SMS messaging provider (Twilio) processes messages on our behalf and is prohibited from using your phone number for any purpose other than delivering our messages.

Opting Out of SMS

You can opt out of SMS notifications at any time through any of the following methods:

  • Settings Page: Toggle off “Receive important updates via text message” in your account Settings, or disable individual message types.
  • Text STOP: Reply STOP to any Vaycurate text message to immediately unsubscribe from all SMS notifications.
  • Text HELP: Reply HELP to any Vaycurate text message for assistance or support information.
  • Contact Support: Email hello@vaycurate.com to request removal from SMS messaging.

After opting out, you will receive a one-time confirmation message acknowledging your unsubscription. You will not receive any further SMS messages unless you re-enable SMS notifications.

Consent Records

We maintain records of your SMS consent status, including when you opted in or out and your message type preferences. These records are kept for compliance purposes in accordance with applicable regulations, including the Telephone Consumer Protection Act (TCPA).

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. Key measures include:

  • Encryption at rest: All data in our primary database (Neon PostgreSQL) is encrypted at rest using AES-256 at the infrastructure level. Media files and images stored in Replit Object Storage are also encrypted at rest at the infrastructure level.
  • Password security: Passwords are processed through bcrypt, a one-way adaptive hashing algorithm, before storage. Passwords are never stored in retrievable form and cannot be recovered by us.
  • Encryption in transit: All data transmitted between your device and our platform uses Transport Layer Security (TLS). HTTPS is enforced for all platform requests.
  • Session security: Authentication sessions are managed server-side. Session cookies are marked httpOnly (inaccessible to browser JavaScript) and secure (transmitted only over HTTPS). Sessions expire after 7 days of inactivity.

No method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. However, we are committed to using industry-standard practices to protect your information.

6a. Data Retention

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected or to satisfy legal and regulatory obligations. Key retention periods include:

  • Traveler accounts: Retained while active. Accounts inactive for 3 or more years with no upcoming bookings are automatically anonymized.
  • Booking and financial records: Financial records are retained for a minimum of 7 years for tax compliance. Guest personal information attached to bookings is anonymized after 7 years.
  • SMS consent records: Retained for a minimum of 5 years to comply with TCPA requirements.

For full details including all data categories, automated enforcement, and your rights, see our Data Retention Policy.

7. Cookies

Essential Cookies

These cookies are strictly necessary for the Platform to operate. They are exempt from consent requirements under applicable privacy regulations, including GDPR.

  • Session authentication: A secure, server-side session token that keeps you logged in across page loads. This cookie is httpOnly and transmitted only over HTTPS.
  • Cart state: Temporary state used to maintain your booking cart during a session.
  • User preferences: Lightweight preference data such as your selected display theme.

Analytics Cookies

We use Google Analytics 4 to understand how visitors use the Platform — which pages are visited, how long sessions last, and what devices are used. This helps us improve the experience. Google Analytics sets the following cookies:

  • _ga: Distinguishes unique users. Expires after 2 years.
  • _ga_GTSLP6JFL3: Stores session state for this specific GA4 property. Expires after 2 years.

Analytics data is processed by Google in accordance with their Privacy Policy. We use IP anonymization so your full IP address is never stored. We do not sell or share analytics data with third parties for advertising purposes.

Consent

Visitors from the European Union, European Economic Area, United Kingdom, and Switzerland are shown a cookie consent banner before any analytics cookies are set. You may accept or decline analytics cookies at that time. Visitors from other regions are opted in automatically, as no legal requirement mandates prior consent in those jurisdictions.

You can withdraw or change your analytics consent at any time by clearing your browser’s local storage for this site, or by contacting us at hello@vaycurate.com. Declining analytics cookies has no effect on your ability to use the Platform — all features remain fully accessible.

8. Your Rights and Choices

You have the right to:

  • Access and update your personal information through your account settings
  • Request deletion of your account and associated data
  • Opt out of promotional communications (email and SMS)
  • Opt out of SMS text messages at any time by replying STOP, through your Settings page, or by contacting us
  • Manage granular SMS preferences (choose which message types to receive)
  • Request a copy of your personal data

To exercise these rights, please contact us at hello@vaycurate.com.

9. Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access.

10. Children’s Privacy

Our Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us so we can promptly remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time, including updates to our SMS messaging practices. We will notify you of any material changes by posting the updated policy on our Platform with a revised “Last updated” date. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, our SMS messaging program, or our data practices, please contact us at:

Vaycurate Email: hello@vaycurate.com

Vaycurate

Handpicked experiences along Florida’s 30A, from a small roster of vetted South Walton operators. Plan your trip in minutes, not hours.

Experiences

  • Private Sunset Sail
  • Private Beach Bonfire
  • Cypress Springs Paddle

Company

  • About Vaycurate
  • All 30A Experiences
  • Contact

Legal

  • Privacy Policy
  • Terms of Service
© 2026 Vaycurate. Santa Rosa Beach, Florida.
Instagram Facebook Privacy Terms