Privacy Policy

This Privacy Notice for Expiv ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://expiv.com or any website of ours that links to this Privacy Notice
• Download and use our mobile application (Expiv), or any other application of ours that links to this Privacy Notice
• Use Expiv. Expiv is an AI-powered travel planning platform that helps individuals, families, and teams organize smarter trips. Users can build personalized itineraries, manage budgets, track travel logistics, and receive real-time recommendations. With features like multi-city planning, smart packing lists, calendar integration, and team collaboration, Expiv simplifies the entire travel process from inspiration to on-the-go updates.
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process the personal information for the following purposes listed below. We may also process your information for other purposes only with your prior explicit consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
• To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
• To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
• To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
• To fulfill and manage your orders. We may process your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.
• To enable user-to-user communications. We may process your information if you choose to use any of our offerings that allow for communication with another user.
• To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.
• To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.
• To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
• To determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.
• To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual's vital interest, such as to prevent harm.

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
  • Send users information about special offers and discounts on our products and services
  • Analyze how our Services are used so we can improve them to engage and retain users
  • Support our marketing activities
  • Diagnose problems and/or prevent fraudulent activities
  • Understand how our users use our products and services so we can improve user experience
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

In Short: We may share information in specific situations described in this section and/or with the following categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.

The categories of third parties we may share personal information with are as follows:

• AI Platforms
• Affiliate Marketing Programs
• Payment Processors
• Social Networks
• Data Analytics Services

We also may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• When we use Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g., Google Maps API, Places API). Google Maps uses GPS, Wi-Fi, and cell towers to estimate your location. GPS is accurate to about 20 meters, while Wi-Fi and cell towers help improve accuracy when GPS signals are weak, like indoors. This data helps Google Maps provide directions, but it is not always perfectly precise.
• Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.
• Other Users. When you share personal information or otherwise interact with public areas of the Services, such personal information may be viewed by all users and may be publicly made available outside the Services in perpetuity. If you interact with other users of our Services and register for our Services through a social network (such as Facebook), your contacts on the social network will see your name, profile photo, and descriptions of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile.

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests which may appear either on our Services or on other websites.

To the extent these online tracking technologies are deemed to be "sale"/"sharing" (which includes targeted advertising, as defined under the applicable laws) under applicable US state laws, you can opt out of these online tracking technologies by submitting a request as described below under section "DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?"

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

Expiv does not operate its own artificial intelligence models. Instead, we integrate third-party AI providers, such as OpenAI and Google Cloud AI, to power certain features of our Services (including trip recommendations, itinerary generation, and search).

When you use these features, the inputs you provide (such as prompts, questions, or uploaded content) and the outputs generated (such as suggested itineraries) may be transmitted to and processed by these AI providers.

Please note:

• These third-party providers may process and store your inputs and outputs in accordance with their own terms and privacy policies. For example, OpenAI may use submitted data for service improvement if its data-sharing settings are enabled.
• Expiv does not control how these third-party AI providers process your data once it is transmitted to them.
• You should avoid including sensitive personal information (such as health, financial, or government ID data) or third-party personal data in your AI submissions.
• By using our AI features, you agree that your inputs and outputs may be processed by these providers and that such processing is necessary to deliver our Services.
• Expiv does not control how these third-party AI providers process your data once it is transmitted to them.
• All personal information that Expiv itself processes in connection with these AI features is handled in accordance with this Privacy Notice and applicable data protection laws.

If we learn that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete such information. If you believe we may have information from or about a child under 13, please contact us at [email protected].

To exercise any of these rights, please visit https://expiv.com/en/settings or contact us using the contact details provided in this Privacy Notice. We will consider and act upon any request in accordance with applicable data protection laws.

Any content you submit (such as travel prompts, itineraries, or other inputs) may be treated as user-generated content and processed by our third-party AI providers to generate outputs. You remain solely responsible for the information you provide in your submissions.

In Short: If you choose to register or log in to our Services using a social media account, we will have access to certain information about you.

Our Services offer you the ability to register and log in using your social media account details (like your Facebook or Google account). Where you choose to do this, we will receive certain profile information about you from the social media provider, as well as information about your contacts and your activity on the social media platform, in accordance with your privacy settings on that social media platform.

The information we may receive from social media providers includes your first and last name, email address, profile picture, gender, birthdate, and other information you choose to make available. We use this information to facilitate account creation and log-in process, and to personalize your experience on our Services.

Please note:

• We do not control, and are not responsible for, how these social media providers collect, use, or disclose your information. We recommend that you review the privacy policies and settings of the social media platforms you use to understand their data practices.
• By using our Services, you consent to the collection, use, and disclosure of your information by these social media providers in accordance with their privacy policies.

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States and other countries. If you are accessing our Services from outside the United States, please be aware that your information, including personal information, may be transferred to, stored, and processed in the United States and other countries where our servers are located and where we have facilities, service providers, or partners, regardless of where you are located.

The data protection and privacy laws in the United States and other countries may not be as comprehensive as those in your country. However, we take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, and we implement safeguards to help protect the confidentiality and security of your personal information.

By using our Services, you consent to the transfer of your information to countries outside your country of residence, including the United States, which may have different data protection rules than your country, and to the use and disclosure of your information as described in this Privacy Notice.

In Short: We keep your information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

We will retain your personal information for as long as your account is active or as needed to provide you with the Services. We may also retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

In general, the criteria we use to determine our retention periods include:

• How long we provide the Services to you and how long you have an account with us
• Whether there is a legal obligation to which we are subject (for example, certain laws may require us to retain records of your transactions for a certain period)
• Whether retention is advisable in light of our legal position (such as regarding applicable statutes of limitations, litigation, or regulatory investigations)

If you have any questions about our data retention practices, please contact us using the contact details provided in this Privacy Notice.

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We use a variety of security measures, including encryption, firewalls, and secure socket layer (SSL) technology, to help protect your personal information. We also limit access to your personal information to those employees, agents, contractors, and other third parties who have a business need to know such information, and who are subject to confidentiality obligations.

While we have taken reasonable steps to secure your personal information, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security. Any transmission of personal information is at your own risk.

We are not responsible for the circumvention of any privacy settings or security measures contained on the Services, or for the actions of any third parties.

In Short: We do not knowingly collect personal information from children under 13.

Our Services are not directed to children under 13. If you are under 13, please do not use or provide any personal information on our Services.

If you are between 13 and 18 (or the age of majority in your jurisdiction), you may only use the Services with the consent of your parent or legal guardian.

If we learn that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete such information. If you believe we may have information from or about a child under 13, please contact us at [email protected].

In Short: Depending on where you are located geographically, you may have certain rights regarding your personal information.

We aim to respect and protect the privacy rights of our users. Depending on your location, you may have the following rights:

• The right to access. You have the right to request copies of your personal information.
• The right to rectification. You have the right to request that we correct any information you believe is inaccurate or incomplete.
• The right to erasure. You have the right to request that we erase your personal information, under certain conditions.
• The right to restrict processing. You have the right to request that we restrict the processing of your personal information, under certain conditions.
• The right to data portability. You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The right to withdraw consent. You also have the right to withdraw your consent at any time where Expiv relied on your consent to process your personal information.

To exercise any of these rights, please visit https://expiv.com/en/settings or contact us using the contact details provided in this Privacy Notice. We will consider and act upon any request in accordance with applicable data protection laws.

In Short: Some web browsers and other devices allow you to set a "do-not-track" signal that we may be able to detect and respond to.

While we strive to honor the privacy preferences of our users, we cannot guarantee that we will receive or respond to all "do-not-track" signals transmitted by web browsers or other devices. To learn more about "do-not-track," please visit http://www.allaboutdnt.com.

In Short: Yes, if you are a resident of California, Virginia, Colorado, or another state with similar laws, you may have specific rights regarding your personal information.

Depending on where you reside, you may have the following rights:

• The right to know. You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
• The right to delete. You have the right to request that we delete any personal information about you that we have collected from you.
• The right to opt-out. You have the right to direct us to stop selling or sharing your personal information at any time.
• The right to non-discrimination. You have the right not to receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, please visit https://expiv.com/en/settings or contact us using the contact details provided in this Privacy Notice. We will consider and act upon any request in accordance with applicable data protection laws.

In Short: Yes, if you are located in certain regions, such as the European Union, United Kingdom, or Canada, you may have specific rights regarding your personal information.

Depending on where you are located, you may have the following rights:

• The right to access. You have the right to request copies of your personal information.
• The right to rectification. You have the right to request that we correct any information you believe is inaccurate or incomplete.
• The right to erasure. You have the right to request that we erase your personal information, under certain conditions.
• The right to restrict processing. You have the right to request that we restrict the processing of your personal information, under certain conditions.
• The right to data portability. You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The right to withdraw consent. You also have the right to withdraw your consent at any time where Expiv relied on your consent to process your personal information.

To exercise any of these rights, please visit https://expiv.com/en/settings or contact us using the contact details provided in this Privacy Notice. We will consider and act upon any request in accordance with applicable data protection laws.

In Short: Yes, we may update this Privacy Notice from time to time.

We may update this Privacy Notice periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make changes, we will notify you by revising the date at the top of this Privacy Notice and, in some cases, we may provide you with additional notice (such as sending you an email or providing a notice on our Services).

We encourage you to review this Privacy Notice frequently to be informed about how we are protecting your information.

If you have questions or comments about this Privacy Notice, please contact us:

• By email: [email protected]
• By visiting this page on our website: https://expiv.com/en/contact

In Short: You have rights regarding the personal information we hold about you. You can review, update, or delete your personal information by contacting us or by visiting your account settings.

If you would like to review, update, or delete the personal information we have about you, you can do so by:

• Logging into your account and visiting your account settings
• Contacting us using the contact details provided in this Privacy Notice

We will respond to your request in accordance with applicable data protection laws.