VacationCEO Privacy Policy
Effective July 5, 2026
What VacationCEO is
VacationCEO (vacation.ceo) is an invite-only trip-planning and trip-memories platform. A trip organizer invites the people on their trip; participants can view the itinerary the organizer shares with them and add their own notes, photos, and videos (“memories”).
Information we store
- Account details — your email address, an optional display name, and a hashed password. There is no open signup; accounts exist only by invitation.
- Trip content — itineraries, notes, checklists, and the memories (text, photos, videos) that trip members add.
- Uploaded media — photos and videos you attach to memories. Location (GPS) and other embedded metadata are removed from every photo and video at upload, before storage.
We do not run third-party advertising or analytics trackers, and we never sell personal information.
Google user data (Google Photos import)
You can optionally import photos and videos from your Google Photos library. When you use this feature:
- You pick the items in Google’s own picker. VacationCEO can only access the specific items you select — never your whole library.
- The selected items are copied into the trip memory you attach them to, going through the same processing as any direct upload (including metadata removal). Once imported, they are governed by this policy like any other upload.
- The Google access token exists only in your browser’s memory for about an hour and is used solely to fetch your selection; it is never written to our database, logs, or any storage.
VacationCEO’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Photos data only to provide this user-facing import feature: we do not sell it, do not use it for advertising, and do not allow humans to read it except as needed for security or with your consent.
Who can see your content
Visibility is participant-controlled: each memory is shared with everyone on the trip, specific people you choose, or kept private (the trip organizer can always see content on their trip, which is disclosed in the app). A trip member can also publish a password-protected keepsake page of trip-shared memories at an unguessable link they choose to share.
Service providers
We host on Railway (application and database), store uploaded media in Amazon S3 (private bucket, access-controlled per request), send email via Resend, and serve DNS through Cloudflare. Each processes data only as needed to run the service.
Retention & deletion
Content stays until you delete it in the app or ask us to remove it. Deleting a photo or video also removes the stored file. To delete your account or any content you can’t remove yourself, email downs.business@gmail.com — we’ll act within 30 days.
Changes to this policy
If we change how VacationCEO uses your data — including data received from Google — we will update this page, revise the effective date above, and notify account holders by email before the change takes effect.
Contact
Questions about this policy: downs.business@gmail.com.