Privacy Policy

Been Handled (operating as a Sole Proprietorship) ("we") runs the Been Handled service. This page explains what we collect, why, and how long we keep it.

1. What we collect

• Account info: name, email, avatar (if you sign in with Google).
• Trip info: trip names, dates, destinations, deposit amounts, milestones, and receipts you upload.
• Payment info: handled by Stripe. We store a payment record (amount, status, timestamps) but never see or store your full card number.
• Usage info: basic logs (IP, browser, actions taken) for security and debugging.

2. How we use it

• To run trips: show your squad who's paid, notify members of milestones, and process refunds.
• To send transactional emails (deposit confirmations, milestone reminders, receipt requests, refunds).
• To protect against fraud and abuse.
• To comply with tax and financial recordkeeping requirements.

We do not sell your personal information. We do not send marketing or newsletter emails from Been Handled.

3. Who we share it with

• Your squad: other members of trips you join can see your name, avatar, deposit status, and any receipts you upload to that trip.
• Service providers: Stripe (payments), our email provider (transactional email delivery), and our cloud hosting provider. Each is bound by their own security terms.
• Legal: if required by law, subpoena, or to protect the safety of users.

4. How long we keep it

Trip data, payment records, and receipts are retained for 7 years after a trip ends. This aligns with US financial recordkeeping expectations for transaction-based services. Account profile data is kept as long as your account is active. You can request deletion of your account at any time (see below); we may retain minimal payment records for the 7-year period even after account deletion where required by law.

5. Your choices

• Update your profile or delete your account from your dashboard.
• Unsubscribe from non-critical emails using the link in the footer of any email we send. Note: transactional emails tied to money (deposit confirmations, refunds) will continue as long as your account is active.
• Request a copy or deletion of your data by emailing privacy@beenhandled.com.

6. Security

Data is encrypted in transit (TLS) and at rest by our hosting and payment providers. Access to production systems is limited. No system is 100% secure — report vulnerabilities to security@beenhandled.com.

7. Children

Been Handled is not intended for anyone under 18. Do not create an account if you are a minor.

8. Changes

We'll update this page and email account holders when we make material changes.

9. Contact

Privacy questions: privacy@beenhandled.com.