Privacy
Policy

Effective date: October 21, 2026

Waypoints Digital LLC (“Waypoints,” “we,” “us,” or “our”) operates our public marketing website at https://waypointsdigital.com and the Waypoints Compass (“Compass”) multi-tenant, cloud-based B2B application at https://compass.waypointsdigital.com. This Privacy Policy explains how we handle information across both properties — including website analytics, account data, tracking technologies, and connected developer API information. Where our practices or our legal role differ between the marketing website and the Compass application, we say so.

1. Scope — The Two Contexts This Policy Covers

This policy applies to two different audiences:

• Marketing website visitors — anyone browsing https://waypointsdigital.com, including prospective customers and the general public.
• Compass application subscribers — campground and RV park businesses, their owners, operators, and commercial staff who use the Compass dashboard.

2. Marketing Website Analytics (waypointsdigital.com)

When you visit our marketing website, we use Google Analytics 4 (GA4) for measurement only to understand site traffic and improve our content. This includes standard information such as device and browser type, IP address, pages viewed, referral source, and marketing campaign (UTM) parameters.

• Measurement only — no advertising. We do not enable Google Signals, GA4 advertising features, or remarketing, and we do not run advertising or conversion pixels (such as a Meta Pixel) on our marketing website. We do not use this analytics data for advertising, and we do not sell or share personal information for cross-context behavioral advertising.
• Cookies and your choices. This analytics relies on cookies. Non-essential analytics cookies load only as described in our Cookie Policy, and you can opt out at any time through our cookie settings, your browser’s Global Privacy Control (GPC) signal, or Google’s Analytics opt-out browser add-on.

3. The Compass Application — Multi-Tenant Architecture and B2B Isolation

Compass is strictly a business-to-business (B2B) marketing dashboard built for campground and RV park owners, operators, and commercial staff.

• No Consumer Reservation Data: Our software operates in complete technical isolation from your reservation engines. We do not ingest, touch, store, or process campground booking logs, camper personal information, or consumer guest checkout transaction histories.
• Washington Business Disclosure: Waypoints Digital LLC is headquartered in Washington State (UBI 606 213 263). Our platform does not track or store sensitive personal health metrics or broad-market consumer behavioral logs.

4. Information We Collect in the Compass Application

• Account Credentials: We collect business entity details, administrative staff names, phone numbers, and physical property addresses.
• Connected Accounts: When you connect accounts, Compass receives access tokens through secure sign-in (OAuth): your Facebook Page and linked Instagram business account (to publish the posts you approve and to show performance counts); optionally, your Meta advertising account (to create and manage ads you approve, billed to your own Meta account); and your Google Business Profile (to show your listing and performance and to read and reply to reviews with your approval). Google Business Profile reviews include the reviewer’s public display name. Connection tokens are encrypted by our application before they are stored, using keys kept separately from our database, and are used only to perform actions at your direction.
• AI Features: When you use Compass’s AI features, the content needed for the task is sent to our AI providers (see Section 5). For written drafts, that can include a guest’s message or a review you ask Compass to reply to, which may contain the guest’s or reviewer’s name. For images, that includes the photos you select (which may show people, such as your guests), your logo, brand colors and your written request. Content is processed to produce your result and, under our providers’ business terms, is not used to train their models. We keep usage records (provider, model, cost), not the content of your requests. See our AI Governance Policy.

5. Authorized Third-Party Sub-Processors

We utilize a restricted list of sub-processors to power our website and application. We do not sell, lease, or rent commercial subscriber data to third parties.

• Vercel Inc.: Multi-tenant application hosting and cloud delivery network infrastructure.
• Supabase Inc.: Primary cloud relational database hosting and secure asset storage.
• Stripe Inc.: Payment processing, automatic subscription renewals, and transaction management.
• Resend: Delivery of account and transactional email, including invitations, password resets, and schedules or activity sheets a customer chooses to send to their staff or guests.
• Anthropic PBC: AI drafting of written content and reading of documents and images a customer imports. Not used to train Anthropic’s models.
• OpenAI, L.L.C.: AI image enhancement and generation (primary). Not used to train OpenAI’s models; may be retained up to 30 days for abuse monitoring.
• Google LLC: Gemini image models (secondary AI image service; paid terms, not used for training); Google Business Profile and Google Places data services; Google Analytics on our marketing website only.

Note: Waypoints Digital’s own proprietary rendering engine composes the final templates in-house and is not outsourced. Separately, the optional AI photo-enhancement and image-generation features in the Create module use the AI image providers listed in this section.

6. Third-Party Platform Integrations & API Compliance

Google API Services User Data Policy Compliance (Limited Use): Waypoints Compass’s use, storage, and transfer of information received from Google APIs will strictly adhere to the Google API Services User Data Policy, including its Limited Use requirements.

• Permitted Use: Data received through the Google Business Profile APIs is utilized exclusively to display your local listing performance metrics within Compass, facilitate the authoring of guest responses, and transmit approved replies back to your public profile.
• AI Integration & Data Minimization: To support user-requested AI features, review text may be transmitted to our designated artificial intelligence processor, Anthropic. For individual review response generation, the system transmits the reviewer’s public display name, star rating, and review text. For bulk theme summarization (up to 200 reviews), data is strictly minimized prior to transmission: all reviewer names are stripped, and Google review identifiers are replaced with sequential internal labels.
• Prohibition on Model Training: All data transfers to Anthropic are executed through a commercial API tier governed by terms that explicitly prohibit the use of your data or customer content to train, tune, or improve underlying machine learning models.
• Human Access Policy and Audit Controls: Waypoints enforces strict internal access controls that restrict personnel from viewing raw data received via the Google Business Profile APIs. Internal access to customer environments is permitted solely for designated system administrators conducting essential technical support, system maintenance, or security forensics. All such administrative sessions are automatically recorded in an immutable internal access log that captures the timestamp, administrative identifier, and specific customer workspace accessed, ensuring comprehensive auditability.

Meta API Access, Data Controls, and Revocation: Data accessed via Meta’s APIs is restricted solely to publishing user-approved posts, executing subscriber-configured advertisement campaigns, and populating your analytical dashboards.

• Privacy Controls: Compass does not collect, ingest, or store the personal names or textual content of individuals commenting on or reacting to your Meta assets; comments and reactions are processed purely as aggregated quantitative metrics.
• Immediate Revocation: Subscribers may entirely disconnect Meta profiles and revoke API authentication keys at any time via Settings → Connections. All cached API authentication tokens are permanently and immediately deleted from Waypoints’ active production environment upon disconnection.

7. Our Roles — When We Are a Controller and When We Are a Processor

Our legal role under privacy law depends on the data in question:

• Marketing website visitor data — we are the Controller / Business. For information we collect about website visitors (Section 2), Waypoints Digital LLC is the controller/business and handles applicable privacy-rights requests directly (see Section 8).
• Customer guest lists inside Compass — we are the Processor / Service Provider. For the guest contact registries, camper email logs, and marketing lists a subscribing campground uploads into Compass, the campground is the Data Controller and Waypoints Digital LLC acts strictly as the Data Processor on the campground’s documented instruction.

8. State-Specific Consumer Privacy Rights (CCPA/CPRA, CPA, VCDPA)

• Data we control (marketing website). For personal information we collect as a controller about website visitors, you may exercise applicable rights — including access, deletion, correction, and opt-out — by contacting us at connect@waypointsdigital.com. Because we use analytics for measurement only, we do not sell or share personal information for cross-context behavioral advertising.
• Data we process on a subscriber’s behalf (guest lists). When we handle a subscriber’s uploaded guest registries, Waypoints acts as Processor / Service Provider. If an individual consumer or camper contacts Waypoints directly to exercise statutory rights over data held on behalf of a subscriber, we will not substantively resolve the request; instead we will redirect the consumer to the relevant campground operator (the Data Controller) and provide commercially reasonable technical assistance to that campground to help it fulfill validated requests within legally mandated timelines.

9. Public Contact Data

For questions regarding data processing, contact us at:

Waypoints Digital LLC
2442 NW Market St PMB 900, Seattle, WA 98107-4137
Phone: 206-657-7675
Email: connect@waypointsdigital.com

← All policies