Privacy Policy

1. What we collect

We collect only what we need to operate the property and respond to your inquiries.

Information you provide directly

• Booking inquiries: name, email address, dates of stay, number of guests, and any message you include.
• Payments: when you book and pay, Stripe collects your payment card details. We receive a booking confirmation and a transaction reference — we do not see or store your full card number.
• Chat with Tito: any messages you send to Tito, our AI local guide. See Section 4 for details.
• Email correspondence: if you contact us directly by email, we retain that correspondence.

Information collected automatically

• Server logs: IP address, browser type, pages visited, time of visit. Standard web hosting data retained by Vercel (our hosting provider).
• Analytics: we use Google Analytics 4 to measure aggregate site traffic, which pages are read, and how visitors found us. This is used to understand what is working, not to profile you or to advertise to you. Google Analytics 4 does not store your full IP address.
• Cookies: functional cookies required for the site to work, Google Analytics cookies for traffic measurement, and third-party cookies set by Stripe for payment fraud prevention. See Section 8 and our full Cookie Policy.

2. How we use it

• To respond to booking inquiries and confirm reservations
• To process payments securely via Stripe
• To send booking confirmations, check-in instructions, and stay-related communications
• To answer your questions through the Tito chat interface
• To operate and maintain the website
• To measure how the site is found and used, so we know what is working
• To comply with legal obligations

We do not sell your personal information. We do not use it for advertising or marketing beyond direct communications related to your booking or inquiry.

3. Payment processing

All payments are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. After we confirm your booking, we send you a secure Stripe-hosted payment link; you enter your card details on Stripe's own pages, and that information goes directly to Stripe — we never see or store your full card number, CVV, or bank account details.

Stripe may collect and process additional data as part of fraud prevention and payment verification, including device identifiers, IP address, and behavioral signals. This is governed by Stripe's own Privacy Policy at stripe.com/privacy.

We retain transaction records (booking confirmation, amount, date, transaction ID) for accounting, tax compliance, and dispute resolution purposes as required by law.

4. Tito — AI chatbot

Tito is an AI-powered local guide built into the Vida de Playa website. He's designed to answer questions about the property, the local area, beaches, restaurants, and activities around Potrero Beach.

How it works: when you send a message to Tito, that message is transmitted to Anthropic, PBC (the company that makes Claude, the AI model that powers Tito) for processing. Anthropic returns a response, which is displayed in the chat.

What this means for your data: your chat messages are processed by Anthropic in accordance with their Privacy Policy at anthropic.com/privacy. We do not store your chat history on our servers beyond the active session.

Please do not share sensitive personal information — payment card details, passwords, passport numbers, or similar — in the chat with Tito. The chat is for local knowledge questions, not for transmitting sensitive data.

5. Third-party services

We use the following third-party services that may process your data:

We do not share your information with any other third parties except where required by law (e.g., a valid legal request from a government authority).

International data transfers. Vida de Playa is operated from Costa Rica, and the third-party services above are based in the United States. If you access the site or submit a form from the EU, UK, or elsewhere, your information may be transferred to and processed in the United States and Costa Rica, which may have data-protection laws different from those in your own country. By using the site or submitting a form, you consent to this transfer.

6. Data retention

• Booking inquiries (not converted): deleted after 12 months.
• Confirmed bookings: guest name, email, dates, and transaction records retained for 7 years for tax and accounting compliance.
• Email correspondence: retained for 3 years, then deleted.
• Chat messages (Tito): not stored on our servers beyond the active browser session. Anthropic's retention policies apply to their processing.
• Server logs: retained per Vercel's standard policies (typically 30 days).

7. Your rights

Depending on where you live, you may have specific rights regarding your personal data.

EU/UK residents — GDPR rights

• Right to access the personal data we hold about you
• Right to correct inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to restrict or object to processing
• Right to withdraw consent where processing is based on consent

California residents — CCPA rights

• Right to know what personal information is collected and how it is used
• Right to delete personal information (with exceptions)
• Right to opt out of the sale of personal information — we do not sell personal information
• Right to non-discrimination for exercising your rights

To exercise any of these rights, email us at info@vidadeplayacr.com. We will respond within 30 days.

8. Cookies

We use a small number of cookies. See our full Cookie Policy for details. The short version:

• Essential cookies: required for the site to function. Cannot be disabled.
• Analytics cookies: set by Google Analytics to count visits and see which pages are read. You can block these with your browser or Google's opt-out add-on, and the site will work exactly the same.
• Stripe cookies: set by Stripe to prevent payment fraud. Required if you proceed to checkout.

We do not use advertising cookies, we do not run remarketing, and we do not sell cookie data to third parties.

9. Policy changes

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. For significant changes, we'll include a notice on the site. Continued use of the site after changes take effect constitutes acceptance of the revised policy.

10. Contact us

For any privacy-related questions, requests, or concerns: