Privacy Policy
Booked! Now What?
1. Geographic Scope
The Services are intended solely for users located within the United States.
We do not intentionally market or direct the Services to individuals located outside the United States.
By using the Services, you represent that you are located in the United States at the time of account creation.
Temporary access while traveling internationally does not change the intended U.S.-only scope of the Services.
All personal information is processed and stored in the United States.
2. Categories of Information We Collect
We collect information necessary to operate the Services.
Identifiers
- Name
- Email address
- Account credentials
Account and Profile Information
- User role
- Subscription status
- Timezone
- Travel preferences
- Dietary restrictions
- Accessibility needs
User-Generated Content
- Trip details and itineraries
- Chat messages with AI concierge
- Expense records
- Packing lists
- Travel documents
- Uploaded photos and receipts
Travel and Event Inputs
- Destination preferences
- Itinerary details
- Hotel reservations
- Flight information
Technical Information
- Session cookies for authentication
- Local storage for user preferences and session state
- Device and browser type
- Push notification tokens
- First-party analytics events
We do not use third-party advertising trackers.
We do not use cross-context behavioral advertising.
Location Information
With your permission, the dashboard weather feature uses your device's approximate location, rounded to about 10 km, to show local weather. This approximate location stays on your device for up to 2 hours and is not saved to your account.
On the Emergency page, you can choose to share your device's precise location to find nearby hospitals, police, and embassies. It is used only for that search and is not saved to your account.
You may also enter locations manually (for example, a city or destination) to use location-based planning features.
You can turn off location access at any time in your browser or device settings.
3. How We Use Personal Information
We use personal information to:
• Provide and maintain the Services.
• Process subscriptions and payments.
• Enable AI-powered functionality.
• Deliver notifications.
• Improve system performance and security.
• Provide customer support.
• Prevent fraud and abuse.
• Comply with legal obligations.
We do not sell personal information.
4. Artificial Intelligence Processing
Certain features use artificial intelligence services provided through our app platform and its third-party AI providers.
When you use AI-enabled features, the content you submit, including photos of tickets, boarding passes, bookings, or receipts you choose to scan, is sent to these providers for processing.
Scanned images are stored privately and accessed only through short-lived links during processing. We save only the details extracted from them, not the images.
• AI-generated outputs are stored within user accounts for functionality.
• AI-generated content may be inaccurate or incomplete.
We do not use user content to independently train proprietary AI systems.
5. Payment Processing
Web Payments (Stripe):
• Payments processed via web are handled by Stripe.
• We do not store full payment card numbers.
• Stripe processes payment information under its own privacy policy.
• We receive limited subscription and transaction metadata necessary to manage subscriptions.
App Store Payments (Future Native Apps):
• If the Service becomes available via Apple App Store or Google Play, payment processing will be handled by the applicable platform provider.
• We do not receive or store full card information.
• We may receive subscription status and transaction identifiers.
6. Data Sharing
We share personal information only with service providers necessary to operate the Services, including:
• Stripe (payment processing)
• Google (place search, hotel information, and weather forecasts; receives the destinations, places, and locations you search)
• OpenStreetMap Nominatim (converts approximate coordinates into a city name)
• U.S. National Weather Service (forecasts for U.S. locations; receives approximate coordinates)
• Third-party AI providers (AI features)
• Apple or Google (if applicable)
• Hosting and infrastructure providers
We may also disclose personal information:
• If required by law.
• In response to subpoenas, court orders, or governmental requests.
• To protect rights, property, or safety.
• In connection with a merger, acquisition, or asset sale.
We do not sell or rent personal information.
7. Data Retention
We retain personal information while accounts remain active.
Upon account deletion:
• Account records are removed from active systems.
• Shared content may remain accessible to authorized users.
• Financial records may be retained as required by law.
• Backup systems may retain residual copies for a limited period.
8. Security Measures
We implement reasonable safeguards, including:
• HTTPS encryption.
• Encrypted storage at rest.
• Role-based access control.
• Secure authentication procedures.
No system is completely secure.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you may have rights to:
• Request disclosure of personal information categories collected.
• Access personal information.
• Request deletion (subject to exceptions).
• Request correction of inaccurate information.
• Be free from discrimination for exercising rights.
We do not sell personal information.
Requests may be submitted to: info@iroxannestudio.com
We will respond within 45 days of a verified request.
We do not share personal information for cross-context behavioral advertising.
We do not use third-party advertising trackers.
10. Children's Privacy
The Services are not directed to individuals under eighteen (18) years of age.
We do not knowingly collect personal information directly from minors without parental authority.
11. Third-Party Links and Vendors
The Services may reference or link to third-party vendors (for example, travel providers or booking sites).
We are not responsible for the privacy practices of third parties.
Users should review third-party privacy policies before engaging with external services.
12. Data Breach Notification
In the event of a confirmed data breach involving personal information, we will:
• Investigate promptly.
• Take reasonable mitigation measures.
• Notify affected users without unreasonable delay as required by U.S. law.
• Notify regulatory authorities where legally required.
13. Changes to This Policy
We may update this Privacy Policy periodically.
Material changes will be posted with an updated effective date.
Continued use of the Services constitutes acceptance of revised terms.
14. Contact
For privacy inquiries, contact us at: info@iroxannestudio.com
Mailing address:
10612 Providence Rd STE D - PMB 747
Charlotte, NC 28277
© 2026 iRoxanne Studios, LLC. All rights reserved.