Privacy Policy

OutfitterHub is a trade name of Black Pine Outfitters Inc., a corporation incorporated in Alberta, Canada. OutfitterHub is a software platform for hunting outfitters to manage bookings, invoices, payments, e-signed waivers and contracts, client portals, communications, and related operations. Contact: support@outfitterhub.ca.

• Account information from outfitters who sign up (name, business name, email, password hash, optional profile and workspace settings).
• Team member information when you invite staff (name, email, role, and permission settings).
• Client and booking data entered by outfitters or submitted through public forms and catalogs (guest names, contact info, trip details, party size, notes, species preferences, and similar).
• Payment information processed through Stripe (including Stripe Connect where enabled). We do not store full card numbers; Stripe handles cardholder data as a PCI-compliant processor.
• Signed documents including waiver and contract PDFs, signature images, IP address, and timestamp captured at the time of signing.
• Uploads and media such as licenses, photos, gallery images, and other files clients or outfitters submit through booking portals, Trip Hub, or forms.
• Messages exchanged in Trip Hub or similar in-product messaging between outfitters and guests.
• Communications metadata for email and SMS we send on your behalf (recipients, template or campaign identifiers, delivery/suppression status, and related logs). Message content you compose for campaigns or drips is stored to send and schedule those messages.
• SMS consent records when a guest opts in through Trip Hub or when an outfitter records consent for transactional or drip SMS.
• AI features: When you use optional AI features — including the help assistant, Content Studio caption suggestions, marketing campaign recommendations, and document auto-tagging — the relevant content you provide or select (which may include booking or CRM summaries, caption context, or document text) is processed by a third-party AI provider to generate a response. We do not use this data to train third-party AI models.
• Support access logs if you grant OutfitterHub support a time-limited window into your workspace (who accessed, when, and that the access was owner-granted).
• Audit and security logs of significant account actions (for example deletions, team changes, and surcharge acknowledgments) to operate and secure the service.
• Usage and technical data such as IP address, browser type, pages visited, and error logs, used to operate and improve the service.

• Provide and operate the platform: bookings, invoicing, payments, document signing, client management, portals, forms, and team collaboration.
• Send transactional emails and optional SMS (booking confirmations, invoices, receipts, reminders, signature requests, trip updates). These are necessary for the service when you enable them.
• Send marketing or follow-up email sequences and related campaigns when you instruct the platform to do so (for example from Segments or Campaigns), subject to suppression and unsubscribe handling.
• Power optional AI features you choose to use.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Improve the product, debug issues, and provide customer support (including when you grant time-limited support access).
• Comply with legal obligations.

We share information only with the service providers that make OutfitterHub work:

• Cloud hosting and database (managed Supabase / Cloudflare) for storing your data and serving the app.
• Stripe for processing payments and, where enabled, Stripe Connect payouts and related account onboarding.
• Email delivery (Lovable Cloud Email pipeline; delivery and suppression events may involve Mailgun) for transactional and campaign messages you send through the platform.
• Twilio for SMS delivery and inbound keyword handling (such as STOP / START / HELP) when SMS is enabled.
• Cloudflare Turnstile on certain public forms (for example sign-in and catalog inquiries) to reduce bots and abuse.
• AI provider (Lovable AI gateway, which may route to models such as Google Gemini) to power optional in-app AI features, limited to generating responses for the request you initiate.

We do not sell personal information. We disclose information when required by law or to protect our rights, users, or the public.

OutfitterHub relies on service providers located in the United States and elsewhere, so your information may be stored and processed outside your country, including in the United States. Where required, we take steps to ensure appropriate protection for these cross-border transfers.

We retain your account data for as long as your account is active. Signed documents are retained for the period required for your records and applicable law. Campaign, email, and SMS logs are retained as needed to operate delivery, suppressions, and support. You can request deletion of your data at any time by emailing support@outfitterhub.ca; some records may be retained where required by law (e.g., tax records, signed legal documents, or opt-out lists).

Data is encrypted in transit (HTTPS) and at rest. Access is restricted by role-based permissions, and authentication uses industry-standard practices. See our Security page for more detail. No system is perfectly secure; we recommend you use a strong unique password and enable any additional account protections we offer. If a data breach occurs that creates a real risk of significant harm, we will notify affected individuals and the relevant authorities as required by applicable law, including Canada's PIPEDA.

Depending on your jurisdiction (including Canada's PIPEDA, GDPR, and applicable US state laws), you may have the right to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact support@outfitterhub.ca. If you are a guest of an outfitter, please first contact the outfitter who collected your information.

We use cookies and similar technologies necessary to keep you signed in and to operate the app. We do not use third-party advertising cookies. Public pages may load Cloudflare Turnstile for bot protection and may load fonts from Google Fonts; those providers may receive standard technical data such as IP address when the browser requests their resources.

OutfitterHub is not intended for individuals under 16. Do not provide information about minors except as part of a legitimate booking (e.g., a youth hunter on a family trip), and only with appropriate parental consent. In the United States, we do not knowingly collect personal information from children under 13 (COPPA); any information about a minor should be provided only by the outfitter as part of a legitimate booking and with verifiable parental consent.

We may update this policy from time to time. Material changes will be communicated by email or in-app notice.

Questions about this policy: support@outfitterhub.ca.