Privacy Policy
This policy explains what information Tarn collects, how we use it, and the choices you have. We keep it plain because that's how we'd want it explained to us.
Who this policy covers
Tarn is booking software for outdoor adventure companies. That means two kinds of people interact with us: operators — the companies that run trips and use Tarn to manage them — and guests, the people who book those trips through an operator's booking page.
For operators, Tarn decides how account information is collected and used. For guests, the operator you book with owns your booking relationship — Tarn stores and processes your information on that operator's behalf so they can run your trip. This policy explains both, plus what we collect from visitors to this website.
Information we collect
From operators: your name, email, company details, and the information you and your staff enter to run your operation — trips, schedules, bookings, guest records, and settings.
From guests: what you provide when you book — your name, email, phone number, party size and participant details, and anything the operator's booking form asks for. If a trip requires a waiver, we store the signed waiver, including participant names and signatures, as part of the booking record.
From everyone: standard technical information such as device type, browser, and pages visited, used to keep the service secure and working.
How we use information
We use information to operate Tarn: to process bookings and payments, send booking confirmations, reminders, and receipts, help operators manage their trips, provide support, and improve the product. We do not sell personal information, and we do not use guest information for advertising.
If you start a booking and don't finish
If you begin booking a trip and enter your email but don't complete checkout, the booking is saved as an unfinished cart and you may receive a single reminder email on the operator's behalf with a link to pick up where you left off. Unfinished carts that never turn into bookings are deleted automatically.
Payments and saved cards
Payments are processed by Stripe. Your card details go directly to Stripe over its PCI-compliant infrastructure — Tarn never sees or stores full card numbers. If you choose to save a card during checkout for future charges, the card is stored with Stripe and Tarn keeps only a summary (card brand and last four digits) along with a record of your consent.
Email and text messages
Booking-related emails — confirmations, payment receipts, trip reminders, waiver requests — are sent through our email provider on the operator's behalf. If you opt in to text messages at checkout, trip updates may be sent by SMS through our messaging provider; reply STOP at any time to opt out. We don't send marketing messages to guests.
Analytics and cookies
This website and the Tarn application use Google Analytics for Firebase to collect aggregate usage statistics — pages visited, device and browser type, and general region. It sets an analytics cookie to tell visits apart. We use the data only to understand how Tarn is used and improve it — never for advertising — and we don't sell it.
Service providers
We share information only with the providers that help us run Tarn, and only as needed to provide the service:
- Google Cloud / Firebase — application hosting, database, and file storage
- Stripe — payment processing and payouts
- Postmark — transactional email delivery
- Twilio — text message delivery
- Google Analytics for Firebase — aggregate usage analytics on this website and the application
Where data lives and how it's protected
Data is stored on Google Cloud infrastructure in the United States, encrypted in transit and at rest. Each operator's data is isolated to their own account, and access within an operator's team is controlled by roles they assign. We may disclose information if required by law.
Retention and your rights
Operators own their operational data and can export it at any time. If an operator closes their account, we retain data only as long as needed for legal and operational purposes, then delete it.
You may request access to, correction of, or deletion of your personal information. If you're a guest, the fastest path is usually the operator you booked with, since they own the booking record — but you can also contact us directly and we'll help, working with the operator where their approval is needed.
Children
Tarn is not directed at children and we don't knowingly collect personal information from them. When a trip includes minor participants, their details (such as a name on a waiver) are provided by a parent or guardian as part of the booking and are kept only as part of that booking record.
Changes to this policy
If we make meaningful changes to this policy, we'll update the date at the top and notify operators by email. Continued use of Tarn after a change means the updated policy applies.
Contact
Questions about privacy? Email support@tarnbooking.com and we'll help.