What we collect. Where it lives. What we do with it.

Offsite Outpost ("we") operates offsiteoutpost.com — an AI-assisted planner for corporate retreats and single-day client outings, plus a concierge service. Privacy questions, access requests, and opt-outs all reach us at hello@offsiteoutpost.com.

If you create an account, we store your email and a bcrypt-hashed password (we never see or store the plaintext), plus the plans you save. Sessions ride on a first-party cookie holding a random session ID — no personal data — set secure and SameSite=Lax.

The wizard collects what you enter: for a retreat — headcount, number of nights, month, the goal of the offsite, work-vs-play balance, setting preferences, audience, and any per-person budget cap; for an outing — whether it's at your office, a client's city, or a fly-in destination, the city, the focus and purpose, headcount, date, daypart, and the number of hosts and guests. To generate your plan we send those inputs to Anthropic's Claude API — we do not put your email or account ID into the prompt, only the planning parameters. Generated plans are stored so you can return to them.

As you move through the wizard we record which options you select and the steps you complete, tied to a first-party identifier cookie (`wp_vid`) so we can improve recommendations and, if you later give us your email, assemble a profile of your planning interests. This cookie is an opaque random ID, not your name.

If you drop your email to have a plan sent to you or to hear about relevant venues and partners, we store your email and the planning details tied to it. We may share these details with relevant venues and partners so they can follow up; you can opt out at any time (see § 06).

If you submit a concierge request, we collect your name, company, work email, headcount, timing, and message so we can scope and follow up on your event. We use concierge details to deliver the concierge service, and — as described in § 06 — we may also share or sell them to relevant venues and partners unless you opt out.

We run PostHog for product analytics — which settings get viewed, which wizard steps people complete or abandon — and Vercel Analytics + Speed Insights for traffic-level and performance measurement. We don't run ad-network pixels and we don't wire analytics up for third-party cross-site retargeting.

When you give us your email — to have a plan sent to you, hear about relevant venues and partners, or reach our concierge — we may share or sell your personal information to relevant venues and partners so they can follow up with offers for your offsite. The categories that may be shared or sold are your identifiers (name, email, company, phone) and your planning profile (setting preferences, headcount, budget, dates and city, and the options you selected), together with the behavioral signals we recorded while you used the planner.

Under the CCPA/CPRA and similar laws this is a “sale” or “sharing” of personal information, and you have the right to opt out at any time. Send a Global Privacy Control (GPC) signal from your browser — we honor it automatically as an opt-out — or email us at hello@offsiteoutpost.com to opt out. Until you opt out, we may share or sell the categories described above.

You can opt out of any sale or sharing of your personal information at any time. If your browser sends a Global Privacy Control (GPC) signal, we treat that as an opt-out automatically. You can also opt out — or request access to, correction of, or deletion of your data — by emailing hello@offsiteoutpost.com from the address on file; we respond within thirty days. California, EEA, UK, and other statutory-rights residents have the same access, deletion, and portability rights, plus the right to opt out of the sale or sharing of personal information.

We don't knowingly collect information from anyone under 18 — the corporate-offsite context is for working adults.

We don't embed third-party social-media pixels, and we don't run ad-network retargeting. We honor every opt-out — a Global Privacy Control signal or an email request stops the sharing and sale of your information. We never share your account password or the private contents of your saved plans.