How Coastly protects you
Plain answers, and only things we can show.
Your money
Coastly never holds or handles your payment to a business. You pay the business directly, in cash, by a local transfer or through the business's own payment link.
Businesses pay Coastly's commission separately, on their own invoice. Guests pay Coastly no fee.
Your sign-in
If you continue with Google or Apple, they share your name and email with Coastly, and Google also shares your profile photo. Apple can give us a private relay address instead of your real email. We never see or store your Google or Apple password.
You can also sign in with a one-time code sent to your email.
Your data
We keep what the app needs to work for you: your account, your orders and bookings, your messages, and the reviews and reports you post.
Analytics are optional. We ask first, and none are collected unless you say yes.
Your control
You can delete your account any time. In the app: You, then Privacy & data, then Delete account. On the website: You, then Security.
Deleting removes your personal information right away. We keep only what we must: order, booking and payment records in anonymized form for up to 7 years, signed waivers, and a minimal record that the deletion happened.
You can change your notification and analytics choices any time, in the app's settings and with Manage cookies on the website.
How it's built
- Everything between your device and Coastly travels encrypted, over HTTPS.
- Our database provider encrypts the data it stores.
- Only staff who need it can reach account data, and each Town Lead sees only their own town.
- When a business pays Coastly, Stripe handles the card. Card numbers never reach or stay on our servers.
- We only say what we can show. We don't display badges or certifications we don't hold.
Who we are
Coastly is run from Playa Venao, Panama, with each town's Town Leads.
Something wrong, or a security concern? Write to support@coastly.surf. For privacy and data requests, write to privacy@coastly.surf.