Privacy Policy

Effective Date: July 1, 2025
Last updated: April 27, 2026

Xploreum, Inc. ("Xploreum," "we," "us," or "our") respects your privacy and is committed to protecting the personal information of our users ("you"). This Privacy Policy explains how we collect, use, share, and protect your information when you access or use our website, mobile applications, and services (collectively, the "Platform").

This policy complies with applicable privacy legislation in the United States and Canada, including but not limited to:

• California Consumer Privacy Act (CCPA)
• Virginia Consumer Data Protection Act (VCDPA)
• Colorado Privacy Act (CPA)
• Québec's Law 25 (formerly Bill 64)
• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)

By using our Platform, you consent to the collection, use, and disclosure of your information as described in this policy.

1. Information We Collect

We collect the following categories of information:

1.1. Information You Provide to Us

• Name, email address, phone number, and profile picture
• Account credentials (hashed passwords)
• Geolocation data (e.g., addresses, meetup points)
• Identity verification or certifications (for Thrillmasters)
• Payment and billing information (processed via third-party)
• Uploaded content (photos, reviews, listings, etc.)
• Trip planning inputs and conversations with our AI companion, Xavier

1.2. Information We Collect Automatically

• IP address, browser type, device type
• Usage and interaction data (e.g., clicks, time spent, pages visited)
• Cookies and similar tracking technologies
• Approximate location derived from IP address
• Precise location, only with your permission, to power features like nearby Thrillmasters, navigation, and waypoint arrival detection

1.3. Information from Third Parties

• Identity verification services
• Social login platforms (if used)
• Payment processors (e.g., Stripe)
• AI service providers (e.g., Anthropic) that power Xavier

2. How We Use Your Information

We use your information to:

• Create and manage your account
• Facilitate Xpedition bookings, payments, and communication
• Personalize Xavier's recommendations to your stated preferences
• Display and promote listings
• Provide customer support and resolve disputes
• Analyze usage trends and improve our services
• Send transactional and promotional communications (you may opt out)
• Enforce our Terms and comply with legal obligations

We do not use the content of your private chats with Xavier to train third-party AI models.

3. Legal Basis for Processing (Canada + U.S.)

We process your personal information based on:

• Your consent (e.g., marketing, profile setup)
• Contractual necessity (e.g., bookings, payments)
• Legal obligations (e.g., fraud prevention, tax laws)
• Legitimate interest (e.g., product improvement, security)

4. Sharing of Information

We do not sell your personal data. We may share it with:

• Thrillmasters or Xplorers you transact with
• Service providers (e.g., hosting, payment processing, analytics, AI inference)
• Law enforcement or regulators where required by law
• A successor entity in the event of a business sale, merger, or acquisition

5. Your Rights and Choices

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Opt out of marketing emails or cookies
• Request data portability (where applicable)
• Object to or restrict certain processing activities
• File a complaint with a privacy authority (e.g., OPC in Canada, state AG in U.S.)

You can exercise these rights by contacting us at: privacy@xploreum.io

6. Data Retention

We retain your personal data only as long as necessary to:

• Provide our services
• Comply with legal and tax obligations
• Resolve disputes or enforce agreements

Once no longer needed, your data will be securely deleted or anonymized.

7. International Data Transfers

We may store and process your data in the United States or other countries. If you are located in Canada or elsewhere, you acknowledge that your data may be transferred to jurisdictions with different privacy protections.

8. Data Security

We implement appropriate technical and organizational safeguards, including encryption, access controls, and secure hosting practices to protect your information from unauthorized access or disclosure.

9. Children's Privacy

Our Platform is not directed to children under 13 (or under 16 in some jurisdictions), and we do not knowingly collect personal data from minors without verified parental consent.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or Platform notification. Continued use of the Platform indicates your acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns, please contact our Privacy Officer:

Email: privacy@xploreum.io

Mail:
Xploreum, Inc.
447 Sutter St Ste 405 #
San Francisco, CA 94108

By using Xploreum, you acknowledge that you have read and understood this Privacy Policy.