Privacy Policy

1.  NOTICE OF UPDATES

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will include a revised "Last Updated" date at the top of this document. A version history is maintained and available upon request. Upon login following an update, existing users will be required to review and affirmatively acknowledge the revised Privacy Policy before accessing the Site.

Previous policy versions are available by contacting us at www.nomadpreserve.com/contact.

2.  INFORMATION WE COLLECT

We collect two categories of information from users:

A. Information You Provide Voluntarily

This includes information you submit directly when creating an account, managing a profile, listing a property, joining a waitlist or marketing list, contacting us, or booking access. Examples include:

• Name, email address, phone number, and mailing address
• Profile and account information
• Property listing information provided by landowners (description, amenities, rules, etc.)
• Copies of state-issued hunting, trapping, and/or fishing licenses, if voluntarily uploaded (see Section 3 for details)
• Communications you send through the Site's messaging features or contact forms
• Waitlist or early-access signup information (name, email, user type, zip code)

B. Information Collected Automatically

When you visit or use the Site, certain data is collected automatically through our platform and third-party tools to help us monitor site health, security, and user experience. This may include:

• Pages and property listings you have viewed
• Bookings you have made
• Reviews you have submitted
• Device type, browser type, and operating system
• IP address and approximate geographic location derived from your IP address
• Site usage patterns and session data

We use the following third-party tools that may collect data automatically on our behalf: Supabase (database and authentication infrastructure), Cloudflare Turnstile (bot and abuse prevention), Vercel Analytics (site performance and usage), and Google Analytics (aggregated traffic and usage analytics). Each third-party tool is governed by its own privacy policy, links to which are provided in Section 8.

We do not require you to provide sensitive personal information such as Social Security Numbers, passport numbers, medical records, or financial account numbers in order to use the Site. Credit card data is handled exclusively by Stripe as described in Section 4. If you voluntarily upload a hunting, fishing, or trapping license, that document may contain personal details (including date of birth and license number), which we handle as described in Section 3.

3.  HUNTING LICENSE UPLOADS

We encourage hunters to upload a copy of their state-issued hunting, trapping, and/or fishing license when using the Site. Uploading a license is optional and is not required to complete an Instant Booking. All Bookings on the Site use Instant Booking: payment is captured at checkout and the Booking is confirmed immediately. There is no landowner review or approval step. A Booking shown as "pending" or "Awaiting payment" in account screens means checkout has started and payment has not yet completed; it does not mean the Booking is waiting for landowner approval. Nomad Preserve does not enforce state or federal game laws or regulations.

Because hunting licenses contain personal information (including your name, address, date of birth, and license number), we treat these documents with the following handling standards:

• License images are stored in a private storage bucket with access limited to authorized Nomad Preserve administrators and, where applicable, the landowner(s) associated with a relevant booking. Managed Supabase infrastructure encrypts stored objects at rest (AES-256) and data in transit (TLS).
• License images are deleted promptly when you delete your account. For active accounts, license files are generally removed through an automated process when you have had no booking check-out for approximately 24 months, subject to applicable law.
• Upon written request (if not already removed by the processes above), we aim to permanently delete license images from our systems within 30 days, subject to any retention obligations required by law.
• We do not share license images with any third party except as required by law or as described in Section 14.

4.  CREDIT CARD AND PAYMENT INFORMATION

When a hunter books a property, they are prompted to provide payment information to complete the transaction. That payment data is transmitted directly to Stripe, Inc. via Stripe's secure API and never passes through or is stored on Nomad Preserve's servers. We do not have access to, store, sell, or share your full credit card number or CVV.

Nomad Preserve uses Stripe to both collect payments from hunters and facilitate revenue payouts to landowners. Hunters interacting with the standard checkout flow are subject to Stripe's Privacy Policy and Terms of Service.

Landowner payout enrollment: Landowners who enroll to receive payouts are required to create a Stripe Connect Express account. By doing so, landowners enter into a direct relationship with Stripe and are subject to the Stripe Connected Account Agreement and Stripe's Privacy Policy, in addition to this Privacy Policy. Nomad Preserve does not store landowner banking details; that information is held solely by Stripe.

For more information on payment processing, applicable platform fees, and payout timing, please refer to our Terms and Conditions. We encourage all users to review Stripe's Privacy Policy at stripe.com/privacy.

For security: Nomad Preserve will never ask you to provide credit card or banking information via email or phone. See Section 10 for details.

5.  DIRECT MESSAGING AND USER COMMUNICATIONS

The Site allows hunters and landowners to communicate directly through an in-platform messaging feature. While messages transmitted through our platform do not automatically expose personal contact information beyond your display name or username, users may choose to share additional contact information at their own discretion.

With respect to messages sent through the platform:

• Messages are stored on our servers and are generally retained for the duration of your account plus approximately 12 months following account closure, to support dispute resolution and our legal obligations.
• Nomad Preserve staff may access message content only when necessary to investigate a reported dispute, suspected violation of our Terms and Conditions, or as required by law.
• Messages will not be shared with third parties except as described in this Privacy Policy or as required by law.

Nomad Preserve acts solely as a venue connecting hunters and landowners. We are not responsible for information exchanged privately between users outside the platform. Please use sound judgment when deciding what personal information to share with other users.

6.  GEOLOCATION AND PROPERTY LOCATION DATA

A. Device Location

The Site may collect your IP address, which may be used to derive your approximate geographic location. This information is used for site security, fraud prevention, and to surface relevant property listings in your region. It is not used to track your precise physical location in real time.

B. Property Location Data

Landowners are asked to provide a property address and/or latitude/longitude coordinates when creating a listing. This information is used to display the general area of a property on listing pages visible to all users.

Precise property location, including full address, coordinates, and detailed map markers (such as hunting spots, tree stands, and food plot locations), is visible to all authenticated users browsing listings. Landowners consent to this disclosure by creating a listing on the Site. The Site requires an account to browse listings. Unauthenticated visitors have access to general marketing content only and cannot view individual property listings or location information.

7.  COOKIES AND TRACKING TECHNOLOGIES

Like most websites, Nomad Preserve uses cookies and similar technologies (such as local storage and session tokens) to operate the Site and improve the user experience. Cookies are small text files stored on your device when you visit the Site.

We use the following categories of cookies and similar technologies:

• Strictly necessary cookies: Required for the Site to function. These include authentication session tokens (managed via Supabase) that keep you logged in. These cannot be disabled without impairing core Site functionality.
• Functional cookies: Used to remember your preferences and settings across sessions.
• Analytics cookies / scripts: Used to understand how the Site is used and to improve performance. We use Vercel Analytics and Google Analytics for this purpose.

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain features of the Site, including logging in. We do not currently respond to Do Not Track (DNT) signals from browsers. We do not sell personal data. If you believe our analytics tools constitute a "sale" or "share" under your state's privacy law, contact us at www.nomadpreserve.com/contact to request that we limit analytics processing for your account where feasible.

8.  DATA SHARED WITH THIRD PARTIES

We do not sell your personal information to third parties. We may share your data with the following categories of third-party service providers who assist us in operating the Site:

• Database and authentication infrastructure: Supabase (supabase.com/privacy)
• Payment processing: Stripe, Inc. (stripe.com/privacy)
• Hosting and deployment: Vercel (vercel.com/legal/privacy-policy)
• Site analytics: Vercel Analytics (vercel.com/legal/privacy-policy)
• Site analytics: Google Analytics (policies.google.com/privacy)
• Bot and abuse prevention: Cloudflare Turnstile (cloudflare.com/privacypolicy/)
• Mapping and property visualization: Mapbox (mapbox.com/legal/privacy)
• Transactional and operational email: Resend (resend.com/privacy)

All third-party providers are contractually required to process data only on our behalf and in accordance with our instructions, and are prohibited from using your data for their own commercial purposes, except as disclosed in their own privacy policies for their analytics or infrastructure products. We vet third-party providers for adequate security practices before sharing data with them.

If you choose to share your experience on social media or external platforms, Nomad Preserve is not responsible for any information collected by those platforms. Their use of your data is governed by their own privacy policies.

9.  MARKETING AND WAITLIST COMMUNICATIONS

If you join our waitlist or otherwise provide your email for early access or updates, we may use your email to send operational messages (such as a welcome confirmation) and occasional product updates. You can unsubscribe using the link in those emails or by contacting us. Waitlist data is processed using the same service providers described in Section 8 (including Resend for email delivery).

10.  SECURITY MEASURES

Nomad Preserve implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS) and encryption at rest provided by our managed infrastructure providers, access controls limiting who within our organization can access user data, and regular security reviews.

No system is perfectly secure, and we cannot guarantee that unauthorized third parties will never be able to defeat our security measures. In the event of a data breach that affects your personal information, we will notify affected users as required by applicable law.

11.  UNSOLICITED CONTACT AND PHISHING

Nomad Preserve will never ask you to provide credit card information, banking details, Social Security Numbers, or other sensitive personal information via email or phone. Any unsolicited request for such information purportedly from Nomad Preserve should be treated as a potential phishing or social engineering attempt.

In the event that Nomad Preserve needs you to update your payment or banking information, we will contact you by email or phone solely to direct you to log in to your account at www.nomadpreserve.com and update that information through the secure account settings interface. We will never transmit or request sensitive data through email or phone directly.

Nomad Preserve is not liable for financial losses or data exposure resulting from inaccurate payment information provided by a user, or from a user's voluntary disclosure of credentials or sensitive information to a third party.

If you believe you have received a fraudulent communication, please report it at www.nomadpreserve.com/contact.

12.  PASSWORD AND ACCOUNT SECURITY

You are responsible for maintaining the confidentiality of your username and password and for all activity that occurs under your account. We are not responsible for unauthorized access resulting from your sharing of account credentials or from another party successfully guessing your login information.

We recommend using strong, unique passwords containing a mix of uppercase and lowercase letters, numbers, and special characters. Do not reuse passwords across multiple services.

If you believe your account has been compromised, contact us immediately at www.nomadpreserve.com/contact.

13.  DATA RETENTION

We retain personal data only as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. Retention is implemented through a combination of automated processes and manual operational review. The following guidelines describe our typical practice and may be adjusted for legal, security, or operational reasons:

• Account information (name, contact details, profile): When you delete your account (or we process a deletion request), identifiable profile fields such as name, email, phone, bio, and avatar are anonymized or removed promptly. A non-identifying profile record may be retained as needed to preserve booking and transaction references. A scheduled safety pass runs approximately 36 months after account closure to clear any residual profile fields that were not removed earlier.
• Booking and transaction records: Generally retained for at least 7 years following the transaction date to support financial recordkeeping and tax obligations, even if your account is closed.
• Direct messages: Generally retained for the duration of your account plus approximately 12 months following account closure, after which they are deleted through an automated process.
• Hunting license images: Deleted promptly upon account deletion. For active accounts, license files are generally removed through an automated process when a hunter has had no booking check-out for approximately 24 months.
• Analytics and usage data: Typically retained in aggregate, anonymized form for as long as useful for product and security purposes, subject to the retention practices of our analytics providers.
• Waitlist / marketing contacts: Retained until you unsubscribe or request deletion, or until the list is no longer needed for the stated purpose.

Users may delete their account directly through their profile settings page, which processes the deletion promptly. Alternatively, deletion requests may be submitted via the contact form at www.nomadpreserve.com/contact and are generally handled within 30 days of receipt. You will receive confirmation once your deletion has been completed. Note that certain data (particularly transaction and booking records) may be retained beyond account deletion as required by applicable law.

14.  YOUR PRIVACY RIGHTS

Depending on your state of residence, you may have certain rights with respect to your personal information, including:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request that inaccurate or incomplete data be corrected.
• Right to deletion: Request that your personal data be deleted, subject to certain exceptions (such as retention required by law).
• Right to portability: Request that your data be provided in a portable, machine-readable format.
• Right to opt out of sale / share: We do not sell personal data. To request that we limit analytics-related sharing where feasible, contact us as described below.

To exercise any of these rights, please contact us at www.nomadpreserve.com/contact. We will respond to verified requests within 45 days. We may need to verify your identity before processing a request. We will not discriminate against you for exercising any privacy rights.

The Site is directed to users in the United States. Residents of California, Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws may have additional rights under applicable state law.

15.  LEGAL DISCLOSURES

We may be required to disclose personal information to comply with applicable law, a valid court order, subpoena, or law enforcement request. Where we are legally permitted to do so, we will endeavor to notify affected users of such requests prior to disclosure so that they may seek legal protection if they choose. We may challenge requests that we believe to be overbroad or legally deficient.

16.  SALE OF COMPANY, MERGER, OR ACQUISITION

If Nomad Preserve, LLC is involved in a merger, acquisition, sale of assets, bankruptcy, or reorganization, your personal information may be transferred to the acquiring or successor entity as part of that transaction. In such an event, we will provide affected users with at least 30 days' advance notice via email before your information becomes subject to a different privacy policy. You will have the opportunity to request deletion of your data prior to any such transfer.

17.  CONTACT US

If you have questions, requests, or concerns regarding this Privacy Policy, please contact us at:

Nomad Preserve, LLC