MYESCAPEPLAN LTD (company number 16395758, registered office 20 Woodcock Close, Abbeydale, Gloucester, GL4 4WT, England) is the controller for the consumer service described in this policy. Contact us at support@myescapeplan.app.
1. Information we collect
• Account information such as your email address, profile details and authentication identifiers. Authentication credentials are handled by our authentication provider; we do not need access to your plaintext password.
• Travel inputs and preferences, including origin, dates, budget, party details, destinations, saved trips and planning requests.
• Subscription and transaction records. Stripe processes payment-card details; we do not store full card numbers.
• Support, feedback and other communications you send us.
• Technical, security and usage information such as IP address, device/browser data, pages or features used, performance events and error logs.
2. Why we use it
• To provide accounts, trip planning, saved trips, provider verification, subscriptions and price-monitoring features — usually necessary to perform our contract with you.
• To secure, debug and improve the service — generally our legitimate interests, balanced against your rights.
• To meet legal, accounting and fraud-prevention obligations.
• To send optional marketing where you have consented or where another lawful basis permits it, with an opt-out in every applicable message.
3. AI and travel-data processing
Planning requests may be processed by AI services to interpret natural-language intent or help organise travel information. We also use travel and destination-data services to ground or enrich planning results. We minimise the personal data sent where practical and do not sell your personal data to these providers.
4. Service providers
We use trusted service providers to operate MyEscapePlan, including providers for authentication and data storage, payments, AI processing, travel and destination data, hosting and security, error monitoring, and analytics.
Providers with a direct role in current consumer-data processing can include Stripe for payments, Groq for AI processing, Sentry for error and performance monitoring, and Google Analytics where analytics is enabled by your settings and applicable law.
Providers and subprocessors can change as the service evolves. Where they process personal data for us, we require appropriate contractual, security and data-protection safeguards.
5. International transfers
Some providers process data outside the UK or EEA. Where required, we rely on recognised transfer mechanisms such as adequacy decisions or contractual safeguards, together with appropriate technical and organisational measures.
6. Retention
We keep data only for as long as it is needed for the purpose for which it was collected, including legal, security and accounting requirements.
• Account and trip data are generally retained while your account remains active and then deleted or anonymised subject to legal or fraud-prevention needs.
• Application logs are ordinarily short-lived; current operational defaults are around 30 days for application logs.
• Error-monitoring events can be retained for around 90 days under our current observability configuration.
• Marketing attribution records, where you opt in, expire after 90 days under the current implementation.
7. Your rights
Depending on applicable law, you may have rights to access, correct, delete or receive your data; object to or restrict some processing; withdraw consent; and complain to a supervisory authority. In the UK you can complain to the Information Commissioner's Office.
To exercise a privacy right or request account deletion, contact support@myescapeplan.app. You can also change cookie and analytics choices on the Cookies page.
8. Children
The consumer service is intended for adults aged 18 and over. We do not knowingly offer accounts to children.
9. Business service
The Business site at business.myescapeplan.app has additional privacy information for business visitors, contacts and customers. Contracted business processing may also be governed by a data-processing agreement.
10. Changes
We may update this policy as our service, providers or legal obligations change. We will update the date above and give additional notice where a change materially affects your rights.