Privacy policy

Section One

About this policy

This policy applies to our websites, forums, the Field Map, Rally Point, Crews, the Overland Bound One mobile application, and our online store (collectively, the “Platform”).

It does not apply to third-party websites, services, or messaging platforms that members use to organize among themselves. Those are governed by their own policies.

Your use of the Platform is also governed by our Terms of Service, which contains our release, indemnification, warranty, and liability terms.

Section Two

Who we are

Overland Bound, Inc. is a Delaware corporation and is the controller of the personal information described in this policy.

Overland Bound, Inc.
2945 Bell Road #215
Auburn, CA 95603
United States

Privacy contact: support@overlandbound.com

Section Three

Information we collect

3.1 · Information you give us

• Account information — name, username, email address, password, member number, profile photo, vehicle information, and biography.
• Location you enter — the city, state, or country you add to your account or profile. See Section 5.
• Purchase information — billing and shipping address, phone number, order contents, and membership tier.
• Payment information — handled by our payment providers. We do not store full payment card numbers.
• Content you post — forum posts, messages, photographs, videos, trip reports, reviews, comments, points of interest, waypoints, GPX and other track or route data, and trail descriptions.
• Communications — support requests, emails, and messages you send us.
• Marketing preferences — newsletter subscriptions and email preferences.

3.2 · Information collected automatically

• Device and browser — device type, operating system and version, browser type, screen size, and language.
• Usage — pages and screens viewed, features used, links clicked, referring page, and session timing.
• Network — IP address, and approximate location derived from IP address.
• Identifiers — cookie identifiers, mobile advertising identifiers, and session identifiers.
• Device location — GPS and background location, when you grant permission. See Section 5.
• Server logs — requests made to our servers, including IP address, timestamp, and user agent.

3.3 · Information from others

• App stores. Apple and Google tell us that a purchase or subscription occurred and its status. They do not give us your payment details.
• Geocoding provider. When you enter a location, a third-party service returns approximate map coordinates for it. See Section 5.2.

We do not purchase personal information from data brokers.

Section Four

How we use information

We use personal information to:

• Create and administer your account and membership;
• Provide the Platform, including the Field Map, Rally Point, Crews, the forums, and the mobile app;
• Process purchases, subscriptions, renewals, and shipping;
• Send transactional messages — order confirmations, membership confirmation and activation, receipts, password resets, and service notices;
• Send newsletters and marketing messages, where you have subscribed;
• Send event invitations and regional community notices relevant to the location you have set;
• Respond to support requests;
• Understand how the Platform is used and improve it;
• Detect, investigate, and prevent fraud, spam, automated abuse, and security incidents;
• Enforce our Terms of Service and Community Guidelines; and
• Comply with legal obligations.

Automated abuse detection. We analyze traffic patterns, IP addresses, and request behavior to identify automated traffic and abuse. This is necessary to keep the Platform available and its data trustworthy.

Section Five

Location information

Location is central to what the Platform does, so this section is detailed. There are two separate kinds of location information, and they work differently.

5.1 · Device location

The Services deal with location, so in order to work, the Services need to know your location.

If you allow location services, when you open and interact with our apps on your mobile device, or visit one of our sites, we use location information from your device or browser — for example latitude and longitude — to tailor your experience to where you are, such as showing nearby locations.

You may use the Overland Bound One app without enabling location services, though some functionality will not be available — for example, you will not be able to record a track.

The app also uses your device’s background location to provide the Services, including sending notifications of member check-ins near you and locating your vehicle during navigation. You can disable background location in your device settings at any time.

5.2 · Your Field Map pin

When you provide a location — for example, your city, state, or country — in your Overland Bound account or profile, we use it to show your approximate location as a pin on the Overland Bound Field Map, so that other Overland Bound members can find and connect with you.

The location text you provide is converted to approximate map coordinates using a third-party geocoding service, subject to that service’s terms.

Showing your location on the Field Map is optional and within your control. You can turn your Field Map pin on or off, or change or remove the location associated with your account, at any time in your account settings. If you turn it off or remove your location, your pin is removed from the map, and you will also no longer be included in event invitations or region-specific Overland Bound community notices.

We make your approximate Field Map location available only to signed-in Overland Bound members through the Field Map.

5.3 · What we do not do

5.4 · Deletion

You may remove your location yourself in your account settings, or request deletion of your Field Map location data at any time by contacting support@overlandbound.com.

Content you have chosen to publish — such as a saved track, a point of interest, or a trip report — is separate from your Field Map pin. Removing your pin does not remove published content. To request removal of published content, contact us.

Section Six

Cookies and tracking technologies

We and our providers use cookies, pixels, local storage, and similar technologies to keep you signed in, remember your preferences, measure how the Platform is used, and detect abuse.

Cookies and similar identifiers can constitute personal information under California and European law, and we treat them that way.

We use the following categories:

• Strictly necessary — sign-in, session security, fraud prevention, and load balancing. The Platform will not function without these.
• Preferences — remembering settings and display choices. You can block these in your browser settings.
• Analytics — understanding usage and improving the Platform. You can opt out; see Section 8.
• Marketing and attribution — measuring campaign performance and personalizing email. You can opt out; see Section 8.

Most browsers let you block or delete cookies. Blocking strictly necessary cookies will break sign-in and other core features.

Do Not Track. We do not currently respond to browser Do Not Track signals, because no common standard for them has been adopted.

Section Seven

How we share information

We share personal information in the following circumstances, and no others.

7.1 · With other members

• Your username, profile information, member number, and posted content are visible to other members, and forum content may be publicly visible.
• Your approximate Field Map pin is visible to signed-in members, if you have it enabled.

7.2 · With service providers

We use third-party providers to operate the Platform. They may process personal information only to provide services to us, under contract. They fall into the following categories:

• Hosting and infrastructure — including Amazon Web Services. Processes all Platform data.
• Online store and subscription billing — including Shopify. Processes purchase, contact, shipping, and subscription data, and sends order confirmations.
• Payment processing — our payment providers process payment card and transaction data. We do not store full card numbers.
• Email delivery and marketing — including Klaviyo and Mailchimp. Processes your email address, name, membership status, and email engagement data, and delivers newsletters, membership confirmation and activation messages, and system notifications.
• Mapping — including Mapbox. Processes map requests and approximate location.
• Geocoding — converts the location text you enter into approximate map coordinates. See Section 5.2.
• Customer support — including Groove. Processes your support messages and contact details.
• Order fulfillment and shipping — our fulfillment providers and carriers, including USPS, DHL, and FedEx. Process your name, shipping address, and order contents.
• Analytics — including Google Analytics and Google Search Console. Process usage, device, and cookie identifiers and IP address.
• App distribution and in-app purchases — Apple and Google. Process purchase and subscription status.

7.3 · For legal and safety reasons

We may share information with government agencies, law enforcement, or other companies where permitted or required by law; to protect against or prevent actual or potential fraud or unauthorized transactions; to investigate fraud that has occurred; to enforce our Terms of Service; or to protect the rights, property, or safety of Overland Bound, our members, or the public.

We report content involving the sexual exploitation of minors to the National Center for Missing & Exploited Children and to law enforcement.

Information shared for these purposes is not provided for marketing purposes.

7.4 · Business transfers

If Overland Bound is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

7.5 · With your direction

We share information with third parties when you ask us to.

7.6 · Aggregated and de-identified information

We may create and share aggregated or de-identified information — for example, trail usage patterns or regional activity levels — that cannot reasonably be used to identify you. We do not attempt to re-identify it.

Section Eight

Your choices

• Turn off your Field Map pin — in your account settings, at any time.
• Change or remove your saved location — in your account settings, at any time.
• Turn off device or background location — in your device’s system settings.
• Unsubscribe from marketing email — use the unsubscribe link in any marketing email, or update your email preferences. Transactional messages such as receipts, membership confirmations, and security notices will still be sent.
• Opt out of analytics — block analytics cookies in your browser, or use Google’s browser opt-out add-on.
• Delete your account — contact us; see Section 16.
• Request a copy of your data — email support@overlandbound.com.

Section Nine

California privacy rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended:

• Right to know what personal information we collect, the sources, the purposes, and the categories of third parties we disclose it to;
• Right to access a copy of the personal information we hold about you;
• Right to delete personal information we have collected, subject to legal exceptions;
• Right to correct inaccurate personal information;
• Right to opt out of the sale or sharing of personal information;
• Right to limit the use of sensitive personal information;
• Right to non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised a privacy right.

Sensitive personal information. Precise geolocation is treated as sensitive personal information under California law. We use it only to provide the features you have requested, and not to infer characteristics about you.

To exercise these rights, email support@overlandbound.com with the subject line “Privacy Request”. We will verify your identity, usually by confirming control of the email address on your account, before acting on a request. You may use an authorized agent.

Section Ten

Rights in the EEA, UK, and Switzerland

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, delete, restrict, or object to our processing of your personal information, and the right to data portability. You may also lodge a complaint with your local supervisory authority.

We process personal information on the following legal bases:

• Performance of a contract — providing your account, membership, and purchases.
• Consent — your Field Map pin, device location, and marketing email. You may withdraw consent at any time.
• Legitimate interests — security, abuse prevention, and improving the Platform.
• Legal obligation — compliance with law.

To exercise these rights, email support@overlandbound.com with the subject line “Privacy Request”.

Section Eleven

How long we keep information

We keep personal information for as long as it is needed for the purposes described in this policy, and for as long as required by law. In practice:

• Account information is kept for as long as your account is active.
• Your Field Map location is kept until you remove it or delete your account.
• Device location used for live features is not retained beyond your session, unless you save it — for example, as a recorded track.
• Content you have published remains until you or we remove it. Please note the license described in Section 6 of our Terms of Service, which survives account closure.
• Purchase and transaction records are kept as required by tax, accounting, and consumer protection law.
• Marketing suppression lists are kept after you unsubscribe, so that we can continue to honor your opt-out.
• Support communications and server logs are kept for a limited period for security, troubleshooting, and abuse investigation, and are then deleted or de-identified.

When you delete your account, we remove or de-identify your personal information, except where we must retain it for legal, accounting, fraud prevention, or dispute resolution purposes.

Section Twelve

Security

We use administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, and restricting access to authorized employees, agents, and contractors who are bound to keep it confidential.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any required authorities as the law requires.

Section Thirteen

Children

The Platform is intended for adults. You must be at least 18 years old to create an account or purchase a membership.

We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it and terminate the account. If you believe a child has provided us with personal information, contact support@overlandbound.com.

Section Fourteen

International data transfers

We are based in the United States, and our providers are located primarily in the United States. If you use the Platform from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

Where required by law, we take steps to ensure that appropriate safeguards are in place for these transfers.

Section Fifteen

Changes to this policy

We may update this policy. When we do, we will revise the “Last Updated” date at the top of this page and post the updated policy here.

If we make a material change — for example, a new category of sharing, or a new use of location information — we will provide notice by email to the address associated with your account, by notice within the Platform, or both, before the change takes effect.

Changes apply going forward and are not retroactive.

Section Sixteen

How to contact us