Privacy Policy

Last Updated: October 15, 2026

Your privacy is important to us. This Privacy Policy explains how hocha.town, a product of Frontier Consulting Group, LLC, collects, uses, discloses, and protects your personal information when you use our website, iOS mobile application, and services. This policy applies to users in the United States.

1. Information We Collect

We collect information in several ways when you use our Service:

Information You Provide Directly

Data Type	Examples	Purpose
Account Information	Email address, name, profile picture	Create and manage your account
User Preferences	Saved favorites, saved trips, notification preferences	Personalize your experience
Communications	Contact form submissions, feedback	Respond to inquiries
Job Applications	Name, email, phone, message, cover letter and resume file you submit to a job post	Deliver your application to the business that posted the job
Newsletter	Email address and, if you give it, first name	Send the newsletter you signed up for

Information Collected Automatically

Data Type	Examples	Purpose
Device Information	Browser type, operating system, device type	Optimize site performance
Usage Data	Pages visited, time on site, click patterns	Improve user experience
Log Data	IP address, access times, referring URLs	Security and analytics
App Usage Data	Screens viewed and taps (such as call, website, directions, favorite) in our iOS and Android apps, with an anonymous install ID; linked to your account when you are signed in	Improve the apps. Not used for advertising or to track you across other companies' apps or websites
Push Notification Token	A device token issued by Apple or Google when you allow notifications	Send the alerts you opted into (events, weather, road conditions)
Outbound Link Clicks	When you tap through to a listing's website, booking page or ticket page: the listing, where the link was on our site or app, the destination's domain name only (not the full address), the time, and the anonymous browser or install ID our analytics already use. Those links also carry utm tags naming hocha.town, so the business can see the visit came from us	Show local businesses and the Town how much traffic we send. No name, email or IP address is stored with these records
Offer Codes	When you tap to see a special offer's code: the offer, whether you were on the website, in the app or came from a notification, the time, and the anonymous browser or install ID. When the business marks a code redeemed, we record the code and the time, nothing about you	Count how often offers are used, for the business and for the Town
Notification Test Group	When you turn on notifications in our app, your anonymous install ID is placed in one of two groups by a fixed rule. About 15% of installs do not get event or special offer notifications. Weather, road and conditions alerts go to everyone who turned them on	Measure whether event and offer notifications actually lead to more visits, by comparing the two groups in total. No one is singled out

2. How We Use Your Information

We use the information we collect for the following purposes:

Provide Services: Enable you to use our features, save favorites, and view trips you have saved
Account Management: Create and maintain your account through our authentication provider
Personalization: Customize content and recommendations based on your preferences
Communication: Send service-related notices, respond to inquiries, and provide customer support
Analytics: Understand how users interact with our site to improve features and content
Security: Detect, prevent, and address fraud, abuse, and technical issues
Legal Compliance: Comply with applicable laws and legal processes

3. Third-Party Service Providers

We use trusted third-party services to operate our website. These providers may have access to your information only to perform specific tasks on our behalf:

Provider	Purpose	Data Accessed
Clerk	User authentication and account management	Email, name, profile info
Supabase	Database storage for user preferences	Favorites, saved trips, user ID
Vercel	Website hosting and deployment. The Vercel Live toolbar loads only on internal preview deployments, not on hocha.town.	Technical logs, IP addresses
Google	Maps, Places API, business photos, and web fonts	Location queries and business searches. When a map or font loads, Google receives your IP address and browser information.
Apple (MapKit and Sign in with Apple)	Maps on some listing pages, and signing in with an Apple ID through Clerk	When a map loads, your IP address and browser information. If you sign in with Apple, the name and email address Apple shares with us.
PlugShare	The EV charger map on our EV charging guide, loaded only when you open it	Your IP address and browser information when the map loads.
Groq (AI provider)	Writing the daily conditions summary shown on the Today screen, and drafting business listing descriptions from public information	Public traffic, weather, burn-ban, and event information only. No personal information.
Apple and Google (Firebase Cloud Messaging)	Delivering push notifications in our iOS and Android apps	Device push token, notification content
Stay22 and booking sites (e.g., Vrbo, Booking.com, Expedia)	The places-to-stay map and “find a place to stay” links	When you load the map or follow a link, these services receive your IP address, browser and device information, and may set their own cookies. We pass a campaign tag so bookings can be attributed to us, not your personal information. A Stay22 script on our pages also adds this attribution to links to booking sites and may show accommodation suggestions; it receives the page address, your IP address, and browser information.
Stripe	Processing payments for paid listing plans	Name, email, billing details and payment card information, which are entered on Stripe's forms and handled by Stripe. We do not store full card numbers.
Sentry	Error monitoring and performance diagnostics	Error details, page address, browser and device information, and IP address. For a small share of sessions that hit an error, Sentry may record a replay of the page to help us fix the problem; text and form inputs are masked by default.
Google Analytics and Google Tag Manager	Measuring site usage	Pages viewed, approximate location, device and browser information, and a cookie identifier.
Meta (Facebook) Pixel	Measuring visits to our site and the results of any Meta (Facebook or Instagram) advertising we run	Pages viewed, device and browser information, IP address, and Meta cookie identifiers. Meta may associate this with your Meta account if you are signed in to it.
Resend	Sending account, notification and listing emails	Email address and the content of the message sent to you.
Cloudflare	Content delivery, bot protection and security	IP address, request details and browser information.
Formspree	Delivering contact, listing-request and onboarding form submissions to us, and internal alerts to our team (for example, a new account sign-up)	The information you type into those forms, including name, email, business details and message. Internal alerts can include a new user's name and email, or an IP address and email from a security check.

Public data sources: To show conditions, our servers request public information from the National Weather Service (weather.gov), Open-Meteo, the Oklahoma Department of Transportation road data hosted on ArcGIS, and OKTraffic (Waze) traffic reports. These requests come from our servers or ask only for public data. They do not include your personal information.

Each of these providers maintains their own privacy policies governing their use of data. We encourage you to review their policies:

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Essential Cookies: Required for the website to function properly, including authentication
Functional Cookies: Remember your preferences and settings
Analytics and Measurement Cookies: Google Analytics and the Meta Pixel help us understand how visitors use our site and the results of any Meta advertising we run
Third-Party Cookies: The Stay22 places-to-stay map and booking links may set cookies from Stay22 and the booking site you visit, used to attribute a booking to hocha.town. We may earn a commission when you book through these links, at no extra cost to you.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service, particularly features requiring authentication.

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers: With third-party vendors who assist in operating our website (as described above)
Legal Requirements: When required by law, subpoena, or legal process
Protection of Rights: To protect our rights, property, or safety, or that of our users or others
Business Transfers: In connection with a merger, acquisition, or sale of assets
With Your Consent: When you have given us explicit permission

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Encryption of data in transit using HTTPS/TLS
Secure authentication through Clerk (SOC 2 compliant)
Database security through Supabase with row-level security
Regular security reviews and updates
Access controls limiting who can access user data

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal requirements)
Data Portability: Request your data in a commonly used format
Opt-Out: Unsubscribe from marketing communications

To exercise these rights, please contact us at info@hocha.town. We will respond to your request within 30 days.

Oklahoma Residents: Under Oklahoma law, you have the right to know what personal information we collect and how it's used. You may also request deletion of your data. We do not discriminate against users who exercise their privacy rights.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy:

Account Data: Retained while your account is active and for a reasonable period after deletion
Usage Data: Typically retained for 12-24 months for analytics purposes
Log Data: Retained for security purposes for up to 90 days

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

9. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@hocha.town.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

10. Geographic Scope

hocha.town, a product of Frontier Consulting Group, LLC, is operated from and intended for users in the United States. We do not intentionally collect information from or market to users outside the United States.

If you access our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and service providers are located.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page and, if the changes are significant, we may provide additional notice (such as a banner on our website).

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: info@hocha.town

Website: hocha.town/contact

For data deletion requests or to exercise your privacy rights, please include "Privacy Request" in the subject line of your email.

Please also review our Terms of Service, which governs your use of our website and services.