Carmen Privacy Policy

Long Game Ventures Inc, operating as Carmen, is responsible for the personal information described in this Policy. It covers gowithcarmen.com, app.gowithcarmen.com, membership applications and Carmen’s travel service.

For privacy and data-protection inquiries, including DPO-related inquiries, email support@gowithcarmen.com, or write to 759 Waller Street, San Francisco, CA 94117, United States.

Information we handle

We collect information you provide, information from accounts you choose to connect, information generated while using Carmen and information from people or suppliers handling an authorized request.

Travel information can reveal health, accessibility, religious dietary needs, location or other sensitive characteristics. Supply only what the request needs. Do not send payment-card numbers, identity documents or detailed health records in ordinary messaging. If a supported task needs them, Carmen will identify the collection method before requesting them. Additional consent or another applicable legal condition is needed where the law requires it.

Stripe handles membership payments when you make one through Stripe. Suppliers can collect travel payments directly. Carmen’s separate encrypted travel vault can hold a card number and expiry, credentials and supported traveler details for authorized actions; card security codes are not stored there. Provider card tokens and last-four-digit records are distinct from a saved full card number.

Why we use information

We use information to consider applications; provide and personalize travel assistance; organize authorized travel information; carry out approved actions; maintain account continuity; handle payments and support; protect the service; meet legal obligations; and resolve claims.

Optional marketing uses separate choices. Optional website analytics and advertising attribution are currently disabled. We do not use private correspondence, connected-account data, private itineraries or sensitive travel requirements for advertising.

Google and Microsoft connections

Connections are optional. Google permissions can include Gmail read and send, calendar-list read, calendar-event access and profile information (gmail.readonly, gmail.send, calendar.calendarlist.readonly, calendar.events and userinfo.profile). Contacts and Other Contacts are separately requested for an invitation feature. We use only the permissions granted for the enabled feature. Access to an account does not authorize a purchase or unrelated external action.

The Google travel scan extracts structured booking facts, short excerpts and evidence references. Carmen also uses selected email and calendar context to understand travel preferences, household arrangements, relevant purchases or activities, memberships, work context, important dates and document-expiry information. This can extend beyond travel confirmations and can reveal sensitive information. Deliberately submitted messages and task context can be retained with the request; we do not describe all processing as keeping only booking facts.

Google permissions do not permit Carmen to delete or label Gmail messages, change calendar sharing or read Google Drive. Calendar or email changes require the relevant permission and your instruction or approval. Contact lookup does not create a stored marketing address book or itself send an invitation.

Microsoft Outlook connections support the mail-reading and identity permissions presented in that connection flow. They do not, by themselves, authorize email sending or calendar changes.

You can disconnect in Settings and can separately manage access through your Google or Microsoft account. We stop using a disconnected connection and remove or revoke its tokens as appropriate; provider revocation can require retries. Disconnection does not automatically remove information already incorporated into Carmen. You can request its deletion.

Google profile access supplies your name and photo; Carmen uses them for your profile and does not replace a name or photo you selected.

Google Limited Use

Carmen’s use and transfer of Google API information follow the Google API Services User Data Policy, including Limited Use.

Google information and relevant derivatives are used only for appropriate user-facing features with the required permissions. We do not use them for advertising, advertising measurement, sale to data brokers or generalized or non-personalized model training. Permitted transfers are limited by that policy, including its feature-delivery, security, legal and business-transfer conditions.

Human access to Google-derived information requires your affirmative agreement to view the specific records, unless a stated policy exception applies, such as necessary security or legal work. General acceptance of membership terms does not substitute for that permission. Feedback or de-identification does not override Limited Use.

AI and human assistance

AI providers process relevant information to extract facts, prepare recommendations, respond and perform supported tasks. Carmen does not train generalized models on your private messages, travel information or connected-account information. Task processing, personal preference memory and appropriately limited service evaluation are different activities. Feedback does not grant a broader license to private records.

Provider processing remains subject to the applicable service terms and privacy rules. Disabling ordinary response storage is not the same as zero retention: abuse-monitoring, security, caching and other feature-specific copies can remain. See OpenAI’s data controls. This Policy does not represent that every provider holds no copies or acts solely as Carmen’s processor.

Browser-assisted tasks can process page contents, entered information, cookies, saved sign-in contexts, screenshots and diagnostic artifacts. Logging, recordings, persistent contexts and downloaded files are separate categories with separate retention rules. We limit collection to the task and use the available cleanup controls.

Authorized Carmen experts and support staff can access relevant information to help you, subject to the Google-specific rules above. You can request human assistance. Carmen does not use solely automated decisions producing legal or similarly significant effects about you.

Recipients and service providers

We disclose relevant information to people and providers supporting the requested service, to suppliers for authorized travel, at your direction, or where reasonably needed for legal compliance, security or a business transaction subject to applicable notice, consent and other requirements.

Some providers also process information for their own defined purposes, such as security, legal compliance, payment fraud prevention or de-identified service statistics, under their applicable terms. For example, Photon’s terms permit uses of de-identified usage and aggregated data that include model development. That is distinct from Carmen training a model on private content and does not expand the uses Carmen permits for Google-derived information. This Policy does not amend a provider’s agreement.

Independent travel suppliers apply their own privacy terms to reservations and records they must maintain. Giving a supplier information for a booking does not authorize unrelated supplier marketing.

Retention and deletion

We retain information for the requested service and only as long as a continuing service, security, legal or claims purpose justifies it. Account, trip, preference and communication records are generally kept during the active relationship. A narrow legal or transaction need does not justify keeping an entire inbox or conversation.

Unconverted applications are scheduled for removal after twelve calendar months without a meaningful application interaction. Carmen diagnostic journals, browser artifacts and selected performance records are generally scheduled for removal after 30 days. Supplier records, security investigations, legal holds and provider-held copies can have different retention periods; we do not promise a universal expiry for every copy.

You may deactivate or request deletion through Settings or the privacy contact details above. Deactivation suspends activity while preserving information for reactivation and disconnects sources. Deletion options include immediate processing or scheduling 30 days ahead; contact us before scheduled processing starts to cancel it.

Completed Carmen account cleanup removes the primary account records, associated private artifacts and agent diagnostics, and linked Carmen-held inquiries. A failure can leave a request pending while cleanup retries. Deleting Carmen does not delete the original Google/Microsoft records or a supplier’s independent booking records. Provider-held and recovery copies follow their applicable deletion rules and lawful exceptions.

A limited privacy-fulfillment receipt helps prevent a database restore from recreating deleted data. It contains account/contact identifiers and the request cutoff, not messages, trip contents, payment details or tokens. Its scheduled expiry is 90 days after creation; removal occurs on or after that date once cleanup and recovery checks succeed. Other legally necessary retention is limited to its specific purpose.

Rights and regional information

Where applicable law provides them, you may request access, correction, deletion, a copy or portability; object to or restrict processing; withdraw consent; and appeal a privacy decision. Withdrawal does not undo prior lawful processing. We verify identity or authority only as appropriate for the request, respond within the applicable legal period and explain a permitted extension or refusal.

For EEA/UK processing, we rely on contractual necessity for the requested service where it applies, legitimate interests in relevant service personalization and security where those interests are not overridden, legal obligations, and consent where required. Sensitive information needs an additional applicable condition. We use a separate appropriate basis for companions whose information is supplied by a member; the member’s contract does not waive their rights.

Information may be processed in the United States and other countries with different laws. Contact our data-protection contact for information about a particular transfer and the legal basis or safeguards applicable to it. We do not promise EU-only storage. You can complain to the competent supervisory authority, including the UK Information Commissioner where applicable, without first obtaining our permission.

US state rights depend on the law and its application to Carmen and the processing. Our State Privacy Rights notice summarizes the available request process without representing that every threshold-based state statute covers Carmen. We do not charge for an applicable request or discriminate unlawfully because you exercise a right.

Children and other travelers

Accounts and direct use are for adults aged 18 and over. A parent, guardian or authorized adult may provide necessary child information for family travel; that does not create a child account or permission for direct child use.

Give other travelers this Policy where appropriate and respect their choices. One person cannot authorize access to another person’s connected accounts. Parents and guardians can request access, correction or deletion subject to authority verification and applicable exceptions. If we learn of unauthorized direct collection from a child, we take steps to stop it and delete the information as required.

Security and changes

We use safeguards designed to protect information, including access restrictions and encryption where appropriate. No system is completely secure.

We update this Policy when practices or requirements change and give material-change notice as required. A new use requiring consent or another prior step begins only after that step. Contact support@gowithcarmen.com for data-protection and DPO-related inquiries, or write to Long Game Ventures Inc, 759 Waller Street, San Francisco, CA 94117, United States.