1. Who We Are
Empire Experience (the "Site", "Service", "we", "our", "us") is a luxury travel media brand owned and operated by eProducts Empire LLC, founded by Brittany Johnson (collectively the "Company"). The Service includes this website (empireexperience.org and any subdomains), the Empire Journal blog, the Michelin Guide directory, the Rich Off Travel digital guide, the Rich Off Travel AI application, newsletters, email campaigns, and any related mobile or web applications (collectively the "Service"). References to "you" or "your" mean any visitor, subscriber, purchaser, registered user, or authorized representative.
For all privacy inquiries, data-subject requests, or complaints, contact:
eProducts Empire LLC — Attn: Privacy Officer, Brittany Johnson
Email: privacy@empireexperience.org
2. Scope
This policy governs all personal information processed through the Service. It applies in addition to, and does not supersede, our Terms of Service, Cookie Policy, Acceptable Use Policy, Refund Policy, and Disclaimer. By using the Service you consent to the practices described here. If you do not agree, you must not use the Service.
3. Information We Collect
- Account data: name, email, password hash, OAuth provider identifiers (e.g., Google subject ID), profile photo, subscription tier, and usage credits.
- Newsletter data: name, email, phone number (optional), and any preferences you submit through subscription forms.
- Trip and content inputs: destinations, dates, budgets, companions, niche, audience descriptors, monetization goals, notes, and any free-text you submit to Rich Off Travel AI.
- AI-generated outputs: itineraries, content calendars, captions, hashtags, income strategies, and brand-pitch templates linked to your account.
- Usage data: pages viewed, features used, timestamps, referring URLs, click paths, session identifiers, and diagnostic logs.
- Device and network data: IP, browser type, OS, device model, screen size, language, and coarse geolocation derived from IP.
- Cookies and similar technologies: essential session cookies, authentication tokens in local/session storage, and analytics identifiers. See our Cookie Policy.
- Payment data: processed exclusively by Stripe, Inc. We do not store full card numbers; we retain only Stripe customer IDs, subscription IDs, brand, last four digits, and expiry as returned by Stripe.
- Communications: emails, support tickets, chat transcripts, survey responses.
- Voluntary content: reviews, testimonials, uploaded images, or social handles you choose to share.
We do not knowingly collect sensitive categories of data (health, biometric, precise geolocation, political, religious, or minors' data). Do not submit such information.
4. How We Use Your Information
- Create and secure your account, authenticate sessions.
- Generate, store, deliver, and export AI-generated plans you request.
- Process payments, subscriptions, trials, renewals, and refunds through Stripe.
- Operate, maintain, monitor, debug, and improve the Service.
- Enforce our Terms of Service and prevent fraud, abuse, or unauthorized use.
- Provide customer support and respond to inquiries.
- Send transactional emails (receipts, trial reminders, security alerts, subscription notices).
- Send marketing emails, SMS, and newsletters where permitted; you may unsubscribe at any time.
- Comply with legal obligations, tax reporting, and lawful government requests.
- Aggregate and de-identify data for analytics, benchmarking, and product research.
- Train, evaluate, and refine our prompts, retrieval systems, and product features. We do not sell your personal information and do not use identifiable personal data to train third-party foundation models without your consent.
5. Legal Bases (GDPR / UK GDPR)
Where the GDPR or UK GDPR applies we rely on: (a) performance of a contract; (b) our legitimate interests in operating and securing the Service; (c) your consent, which you may withdraw at any time; and (d) compliance with legal obligations.
6. AI Processing Notice
The Rich Off Travel AI features route prompts through third-party large-language-model providers (including Google Gemini and other providers accessed via our AI gateway). Your inputs are transmitted to those providers under their contractual data-processing terms. We select enterprise or no-training endpoints wherever feasible and do not authorize providers to use your content to train public foundation models when opt-out is available. We cannot guarantee any specific provider's internal handling and you accept residual risk.
7. How We Share Information
- Service providers / sub-processors: hosting, database, authentication, email delivery, analytics, error monitoring, payment processing (Stripe), and AI inference vendors, each bound by contractual confidentiality.
- Legal and safety: to comply with law, subpoenas, court orders, or to protect the rights, property, or safety of the Company, users, or the public.
- Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
- With your direction: when you export, share, or publish content, or connect third-party integrations.
- Aggregated / de-identified data: may be shared freely for any lawful purpose.
We do not sell your personal information. We do not engage in "sharing" for cross-context behavioral advertising as defined by the CCPA/CPRA.
8. International Data Transfers
The Service is operated from the United States. If you access it from outside the U.S., you consent to transferring your information to the U.S. and other jurisdictions. Where required we rely on Standard Contractual Clauses or equivalent mechanisms.
9. Data Retention
We retain account and content data for as long as your account is active and for a reasonable period thereafter to comply with legal, tax, accounting, dispute-resolution, and enforcement obligations. Backups may persist for up to 90 days after deletion. Aggregated / de-identified data may be retained indefinitely.
10. Security
We use commercially reasonable administrative, physical, and technical safeguards including TLS in transit, encryption at rest for stored credentials, row-level security on our database, hashed passwords, access controls, and audit logging. No system is perfectly secure. You use the Service at your own risk and are responsible for keeping your password confidential.
11. Your Rights
Depending on where you live, you may have the right to: access, correct, delete, port, restrict, or object to our processing of your personal information; withdraw consent; and lodge a complaint with a supervisory authority. California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, limit use of sensitive personal information, and not be discriminated against for exercising these rights. To exercise any right, email privacy@empireexperience.org. We will respond within the timeframe required by applicable law (generally 30–45 days). We may verify your identity before fulfilling requests.
12. Children's Privacy
The Service is not directed to children under 18 and we do not knowingly collect personal information from anyone under 18. If we learn we have collected such information we will delete it.
13. Cookies and Tracking
We use strictly necessary cookies and local storage for authentication and session continuity, and optional analytics identifiers. See our Cookie Policy for full details. You can control cookies through your browser settings; disabling essential cookies will break login and generation features.
14. Do Not Track & Global Privacy Control
We do not currently respond to browser Do Not Track signals because no uniform standard exists. We honor Global Privacy Control (GPC) signals as an opt-out of "sale" and "sharing" where applicable law requires.
15. SMS and Email Marketing
By providing your phone number and/or email in a newsletter, checkout, or account form, you consent to receive transactional and marketing messages from Empire Experience. Message frequency varies. Message and data rates may apply. Reply STOP to any SMS to unsubscribe or click the unsubscribe link in any marketing email. We comply with CAN-SPAM, TCPA, CASL, and applicable equivalents.
16. Third-Party Links, Affiliates, and Integrations
The Service and AI-generated content may include affiliate links (including Travelpayouts and its partner network), brand names, and third-party websites. We are not responsible for the privacy practices of any third party. Review their policies before providing information or transacting. See our Affiliate Disclosure.
17. Changes to This Policy
We may update this policy at any time. Material changes will be posted here with a new Effective Date and, where required, notified by email or in-app notice. Continued use of the Service after changes constitutes acceptance.
18. Contact
Questions? Contact eProducts Empire LLC — Brittany Johnson, Privacy Officer at privacy@empireexperience.org.