Privacy Policy

1. Scope and current stage

We are collecting interest in future RigLodge managed hosting. The inquiry website does not take payments, create hosting customer accounts, reserve capacity, or accept custody of equipment. Directory accounts are separate and support listings and conversations between members. A directory inquiry is not a booking.

This policy does not authorize access to data on your workstation or monitoring of your models. Future hosting, on-site cameras, equipment handling, billing, and service-specific data practices will need applicable notices and agreements before use.

Independent hosts are responsible for information they receive directly and their own arrangements. Their practices are not controlled by this policy. This policy covers RigLodge's handling of an inquiry, including delivery to your chosen host.

2. Information we collect and why

Sources are you, your browser and activity, members interacting with you, and providers returning city suggestions or email-delivery information. We do not buy contact lists or enrich profiles with data-broker records.

Account credentials are sensitive information used for authentication and security, not to infer personal characteristics. Do not submit passwords, private keys, identification documents, payment details, health information, or private files in messages or public content. The landing-page sign-in form does not create a customer account and does not retain submitted credentials.

• Contact and inquiry information: email, city or ZIP, equipment and workload descriptions, power needs, timing, selected location/event, and messages. You provide these so we can answer a request, discuss potential fit, and plan locations or events.
• Directory account information: display name, email, password hash, optional biography, verification status, and settings. These create and secure your account and let you manage participation. We do not store readable passwords.
• Directory content and activity: listings, approximate areas, prices and electricity terms, formats, features, photos, saved spaces, inquiries, reviews, and reports. These support the directory, conversations, and abuse handling. Other members may provide information about you in relevant inquiries, reviews, or reports.
• Preferences and request records: choices, applicable notice versions, timestamps, submission identifiers, privacy requests, and opt-out records. These record instructions, prevent duplicate submissions, and honor preferences.
• Connection and security information: your browser sends an IP address and ordinary request information. Directory sessions store a browser user-agent description. Abuse controls store keyed identifiers derived from IP addresses or account/contact information. Infrastructure logs may also contain connection data, timestamps, requested URLs, and errors for operation and security.
• Location-search information: city-search text and the city/approximate area selected for a listing. These find and display an area. We do not ask for device geolocation permission or require a private street address.

3. Who receives information

We do not sell personal information, share it for cross-context behavioral advertising, or give contact lists to other businesses for their own direct marketing. Providers, your selected host, and recipients of public content still receive information as described above.

• RigLodge personnel and providers supporting the website, database, security, and communications may process information needed for their work, with access limited to the applicable task.
• The public can see published listing details, host display name and profile identifiers, approximate area, selected photos, and reviews with reviewer display names. Account email is not in a public listing. Draft and paused listings are private. Public content may be copied or indexed by others.
• Sending an inquiry gives that host your current display name, the reply email you enter for that inquiry, equipment description, power estimate, timing, and message. The reply email is saved with the inquiry and does not change when you change your account email. Your current display name continues to appear in earlier inquiries. Earlier inquiries without a separately supplied reply email continue to show your current account email. Viewing or saving a space does not send an inquiry. Deleting your account cannot recall a copy already received by a host.
• We may disclose relevant information when reasonably needed to comply with law or valid legal process, protect people and the service, or establish or defend legal rights.

4. Maps, email, security, and links

MapTiler supplies maps. Loading tiles or attribution assets sends your IP address and ordinary browser request information to MapTiler. Directory city lookup also sends search text to MapTiler through our server. Enter a city rather than a private address. We do not send passwords or hosting-inquiry form contents to MapTiler.

When email delivery is enabled, Resend processes recipient addresses, subjects, message bodies, and delivery information for account and inquiry notifications. Host notifications point to the inbox rather than containing the full equipment inquiry. Our websites do not run advertising pixels or analytics trackers.

Cloudflare Turnstile checks protected submissions for automated abuse. When the check runs, your browser connects to Cloudflare and supplies connection and browser security signals, including IP address, user-agent information, and the website origin. We send the resulting short-lived token to Cloudflare for validation; we do not include your password, message, or other form contents in that validation request. Cloudflare also uses security signals to improve its bot detection, as described in its Turnstile Privacy Addendum. We use this service for security, not advertising.

Providers may process information outside California and outside the United States. We do not promise California-only or US-only storage. External websites have their own practices.

• MapTiler privacy policy
• Resend privacy policy
• Cloudflare privacy policy
• Turnstile Privacy Addendum
• Cookies & Browser Storage

5. How long we keep information

We review open requests for continuing need and close records when their purpose is complete. During manual maintenance we delete eligible closed records after the applicable 12- or 24-month period; eligibility is not a reason to keep them indefinitely. A specific legal preservation need may require a limited separate record for the duration of that obligation or dispute, restricted to that purpose.

Directory maintenance normally runs hourly while its server is running. Maintenance delays can extend physical cleanup. We do not promise immediate erasure from every provider or retained recovery copy. Information retained for recovery, security, or a legal obligation stays restricted to that purpose and is not returned to ordinary use to defeat deletion.

• Landing inquiries and location/event interest remain while open for the requested purpose. Closed records become eligible for manual deletion 12 months after resolution. This is not automatic deletion exactly 12 months after submission. You can request earlier deletion.
• Privacy requests have a separate recordkeeping period: minimum records of the request and handling are retained for at least 24 months after resolution. When erasing inquiry information, we remove message and email content from retained request records and keep limited request-type, timing, and handling information for accountability. These records are not used for marketing.
• Directory profiles, listings, attached photos, saved spaces, and related activity remain while the account/content is in use, until removal or a resolved deletion request. Pausing makes a listing private but does not delete it. Unconfirmed accounts without a successful sign-in or account update for 30 days become eligible for cleanup once remaining sessions and verification/recovery links expire.
• Directory inquiries, reviews, and reports remain for the conversation, community record, or investigation while related records remain. Deleting a listing removes its inquiries, reviews, reports, and saved-listing links. Its photos become unattached and private until removed by the owner or cleanup; related delivery records follow the separate email period below. Deleting a directory account removes its account-linked records, but not separate main-website inquiries or a shared unsubscribe record. Request deletion of those separately or specify both services in a privacy request. Copies held by visitors or recipients cannot be recalled.
• Expired directory sessions and one-time tokens are removed in maintenance. Directory rate-limit records older than two days and landing rate-limit records older than 24 hours are removed during cleanup. Infrastructure/security logs follow operational troubleshooting, security, and legal-preservation needs, not advertising-profile purposes.
• Photos that are unattached to a listing and more than 24 hours old, measured from upload, are eligible for cleanup. Detaching a photo makes it private but the owner can still access it until deletion. Explicit photo or account deletion stops access and queues physical file cleanup. Successfully delivered email bodies are cleared from our delivery queue; pending bodies expire after 20 hours, failed bodies after a day, and delivery records after 30 days. Notification records may outlast the listing they refer to. Providers have their own retention practices.
• We retain the minimum email-based suppression record needed to honor an unsubscribe, including after other records are deleted. Account deletion removes its ordinary preference fields; the suppression record remains and is not used to send promotions.

6. Access, correction, deletion, and contact

Use the privacy request form to ask what information we hold, request a copy/correction/deletion, unsubscribe, or ask a question. You may request specific information as well as its categories, sources, purposes, and categories of recipients. Choose Other for a correction or narrower communication preference. Mention the directory or both services as applicable. No new account, payment, or acceptance of marketing or new terms is required.

Directory members can edit profiles and marketing choices, download account data, revoke sessions, or delete their account in Host workspace. Security-sensitive changes require authentication. The public request form remains available if you cannot sign in.

You can also email hi@riglodge.ai for privacy requests, including if the form or its security check is unavailable or blocked. No website account or successful security check is required to contact us by email.

Before disclosing, changing, or deleting private records, we may verify control of the relevant email/account and request information reasonably needed to match records. Do not send identity documents unless we explain why and provide an appropriate method. An authorized agent may use the form; we may need proof of authority and, where permitted, your confirmation. Unsubscribing needs no identity documents or account verification.

Successful submission records a request; people review access, correction, and deletion requests. We aim to acknowledge them within 10 business days and respond within 45 calendar days, or explain a permitted extension or limitation. We will not discriminate against you for exercising applicable privacy rights.

• Make a privacy request or unsubscribe
• Email hi@riglodge.ai

7. California privacy choices

California residents may have rights under the California Consumer Privacy Act, as amended, where it applies to the business and information involved: know/access, correct, delete, opt out of sale or advertising sharing, limit certain sensitive-information uses, and receive equal treatment. Exceptions and verification requirements may apply. We offer the request process above regardless of whether a particular CCPA threshold applies; this policy is not a claim of CCPA certification.

We do not sell information or share it for cross-context behavioral advertising, or use credentials to infer characteristics. There is no such activity to turn off in the current service. A Global Privacy Control signal is consistent with these practices for all visitors. We will honor applicable opt-out signal requirements and give required notice before changing these practices.

California Do Not Track disclosure: our websites do not build cross-site browsing profiles. Do Not Track does not change necessary login, security, or requested map delivery. MapTiler receives map-request information here and may receive similar requests when you use its maps on other websites. Its own privacy policy describes those records and states that its maps do not track end users for targeted advertising. We do not authorize advertising tracking through maps or claim that third-party connection records are absent.

We do not disclose personal information to other businesses for their own direct marketing. You can ask about California's Shine the Light disclosure rules using the same form. Nothing in these documents waives privacy rights provided by law.

8. Security and children

Our measures include password hashing, expiring credentials, access restrictions, and abuse controls. No website or transmission is guaranteed secure. Approximate map areas and removal of embedded photo metadata reduce exposure; visible signs, street numbers, people, or text can still identify a location. Review content before publication.

Hosting/event-interest forms and directory accounts are intended for adults aged 18 or older. Privacy and contact requests are not restricted by that eligibility rule. We do not knowingly collect personal information from children under 13 and do not claim to verify everyone's age. If you believe a child submitted information, contact us so we can investigate and remove it as appropriate.

9. Changes and operator contact

RigLodge LLC is responsible for this policy. Contact us through the form below, including if an account control is unavailable. We update the effective date/version when practices change and highlight material changes on the affected website or by an appropriate account notice. We obtain new permission where required; earlier marketing choices do not authorize unrelated new uses.