Privacy Policy
OREEZA is a brand operated by Bellmont Group LLC ("OREEZA," "we," "us," or "our"). This Privacy Policy explains what information we collect when you use the OREEZA website and apps (the "Service"), how we use it, who we share it with, and the choices you have. By using the Service you agree to the practices described here.
1. Information we collect
We collect only what we need to provide the Service:
- Account information — name, email address, phone number, country/region, and a profile photo if you upload one.
- Authentication data — one-time passcodes (OTPs) sent to your phone or email, sign-in timestamps, and IP address.
- Booking and host information — experiences you browse, dates of travel, communications with hosts, and approximate location to recommend nearby experiences.
- Payment information — processed by our third-party payment provider; we do not store full card numbers on our servers.
- Device and usage data — browser type, operating system, pages visited, and similar diagnostic data needed to keep the Service reliable and secure.
2. How we use your information
- To create your account and verify your identity (including SMS OTP for sign-in).
- To process bookings, payments, and communicate with you about them.
- To match travelers with hosts and personalize recommendations.
- To prevent fraud and maintain the safety of the Service and the communities we serve.
- To respond to your support requests.
- To comply with legal obligations.
3. SMS messaging — consent and opt-out
We do not sell or share your mobile number with third parties for marketing or promotional purposes. Mobile information will not be shared with third parties for marketing or promotional purposes.
Consent. When you enter your phone number on the OREEZA sign-in screen and tap “Send code,” you opt in to receive a one-time passcode (OTP) via SMS for the purpose of verifying your phone number. Message frequency is limited to authentication and account-related events. Standard message and data rates may apply.
Opt-out. You can opt out of OREEZA SMS messages at any time by replying STOP. To resume, reply START. For help, reply HELP or contact support@oreeza.com.
No marketing SMS. OREEZA only sends transactional SMS messages such as verification codes and account-related notifications.
Consent to receive SMS messages is not a condition of using the Service. Carriers are not liable for delayed or undelivered messages.
4. Third-party services we rely on
To run the Service we share limited data with the following processors, each bound by a data-protection agreement:
- Supabase — user accounts, sessions, and the application database.
- Twilio — delivery of SMS and WhatsApp verification codes and notifications.
- Google — "Sign in with Google" authentication (only if you choose it) and map services.
- Vercel — web hosting and content delivery.
- Payment processor — for handling bookings (PCI-compliant; we do not store card details).
5. How long we keep your data
We retain account information for as long as your account is active and for a reasonable period afterward to comply with legal and tax obligations and to resolve disputes. You can request deletion of your account at any time (see Section 7).
6. How we protect your data
We use industry-standard safeguards including encryption in transit (TLS), access controls, and short-lived authentication tokens. No system is perfectly secure, but we work continuously to reduce risk.
7. Your rights and choices
- Access & correction. You may view and update your profile information from your account page.
- Deletion. You may request deletion of your account by emailing support@oreeza.com. We will delete or anonymize your data within a reasonable time, except where retention is required by law.
- Opt out of SMS. Reply STOP to any OREEZA SMS, or contact support.
- Marketing email opt-out. Use the unsubscribe link in any non-transactional email.
- Regional rights. Depending on where you live, you may have additional rights under laws such as GDPR, the California Consumer Privacy Act (CCPA), or Peru's Personal Data Protection Law (Law No. 29733). Contact us to exercise them.
8. Children's privacy
OREEZA is not intended for children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will promptly delete it.
9. International data transfers
OREEZA serves communities in Peru and travelers worldwide. Your information may be processed in countries other than the one where you live, including the United States. We rely on safeguards permitted by applicable law for such transfers.
10. Changes to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects when changes took effect. Material changes will be communicated through the Service or by email.
11. Contact us
Questions or requests regarding this Privacy Policy or your data:
Bellmont Group LLC (dba OREEZA)
2360 Route 33, Ste 112, Unit #732
Robbinsville, NJ 08691
United States
Email: support@oreeza.com