Privacy Policy
Last updated: June 17, 2026
1. Introduction
This Privacy Policy describes how Suiteplan LLC (“Suiteplan,” “we,” “us”) collects, uses, and shares information when you use the Suiteplan website, services, and applications (the “Service”). By using the Service, you consent to the practices described here.
2. Information we collect
Account information
Your name (the first name you provide when you sign up, or that you later set on the Account page), your email address, and a hashed copy of your password (password hashing is performed by our authentication provider, Supabase — we never store plain-text passwords). If you sign in with Google, we also receive your Google account’s email address, name, and profile picture from Google. We use your name to personalize the Service, such as the greeting on your dashboard. We normalize the email address you provide to a canonical form (lower-casing it, and for Gmail addresses removing dots and any “+tag”) to prevent duplicate accounts, and we do not accept plus-addressed sign-ups for the same reason.
Information you provide
Information about the credit cards you add to your wallet (card product, account-open date, optional nickname, optional last four digits — we do not store full card numbers); the plans you create (property name, location, intended check-in and check-out dates, occupancy, estimated values, notes, confirmation numbers, booked-on date; and, for paid members, an estimated stay price we fetch from a hotel-pricing provider for that planned stay, along with the time we fetched it); the usage records you log (amount used, date, property name, confirmation number, the cash you paid out of pocket, optional notes about additional value received); and the trips you create to organize your stays (a trip name, optional start and end dates, notes, and which of your stays belong to each trip), including any self-booked lodging you add to a trip (a property name, optional location, dates, cost, and notes).
You may also create “cardholders” — labels (names) that identify whose card each one is, including members of your household. Only enter names for people whose information you are authorized to provide.
Trip sharing
If you share a trip, we store the email addresses of the people you invite so we can deliver and manage your trip invitations. The trip content you share becomes visible to the people you invite: invited viewers and collaborators can see the trip’s itinerary, including stays added by other members. If you create a public trip link, anyone who has the URL can see a view-only itinerary (property names, locations, dates, and traveler names as you and your members have entered them, or, if no name is set, a short label derived from the account email); the public page never shows card, benefit, or value details. You can rotate or disable the public link, and remove invited members, at any time from the trip’s sharing settings. Only invite people, and only share a public link with people, you are comfortable seeing the trip’s contents.
Billing identifiers
If you subscribe to a paid plan, we store identifiers issued by our payment processor, Stripe: your Stripe customer ID, subscription ID, status, billing interval, current-period-end date, and cancellation flag. We never see your credit card number. Stripe processes payments and stores card details on its own systems.
Email preferences and reminder state
For paid subscribers, we store your email notification preferences (whether per-event reminders and the weekly digest are enabled or disabled). We also record idempotency timestamps — the last time we sent an unlock reminder or an expiry-warning reminder for each benefit instance, and the last time we sent the weekly digest to your account — so that reminders are never sent twice for the same event. We additionally store an opaque, randomly-generated unsubscribe token associated with your account, used solely to authenticate one-click unsubscribe requests without requiring you to be signed in.
Automatic information
Your IP address, user agent, browser/device information, and request logs — collected by our hosting provider for security, abuse prevention, and routine operations.
Analytics and product usage
We use third-party analytics tools to understand how the Service is found and used so we can improve it. These tools collect usage and device information such as the pages you view, the actions you take (for example, signing up or adding a card), your approximate location derived from your IP address, your browser and device type, and the site or channel that referred you. Microsoft Clarity additionally records anonymized session activity (such as clicks, scrolling, and navigation) and aggregates it into heatmaps and session replays; by default it masks the text you type and the contents of form fields. We use this information in aggregate to measure traffic and improve the Service, not to identify you individually. These tools set cookies and use similar storage, as described in Section 5.
We also use the Reddit advertising pixel, which records limited activity such as that you visited the Service or completed a key action (for example, signing up), so we can measure how our Reddit ads perform and show them to similar audiences. This is considered “sharing” for cross-context behavioral advertising under some U.S. state privacy laws. We honor the Global Privacy Control (GPC) browser signal: if your browser sends GPC, we do not load this pixel. See Sections 4, 5, and 8 for more, including how to opt out.
3. How we use your information
We use information to:
- provide and improve the Service, including generating benefit instances and forecasts from the data you enter;
- bill paid subscriptions (if applicable);
- send transactional emails (account verification, password reset, billing receipts, benefit reminders);
- respond to your support requests;
- measure and improve our advertising (see Sections 4 and 8 for your choices);
- comply with legal obligations;
- detect, prevent, or investigate fraud or abuse.
6. Data retention
We retain your account information and the data you create in the Service for as long as your account is active. When you delete your account (Account page → Delete account), your account and associated data are permanently removed from our active systems. Backup copies may persist for a limited period (typically up to 30 days) before being overwritten in the normal course of backup rotation. Aggregated, de-identified information may be retained indefinitely.
7. Security
We use industry-standard measures to protect your information, including encryption in transit (HTTPS), hashed passwords, and access controls within our hosting and database providers. No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security.
To the fullest extent permitted by applicable law, and except to the extent a loss results from our gross negligence or willful misconduct, we are not responsible for unauthorized access to or loss of your information that occurs despite these measures. Any liability is subject to the limitations in our Terms of Service.
8. Your rights
You can:
- Access and update your account information and the data you have entered from the Account page.
- Delete your account and all associated data from the Account page (Delete account section).
- Manage your subscription from the Account page using the Manage subscription button.
- Unsubscribe from reminder emails at any time — either via the one-click unsubscribe link included in every reminder email, or by adjusting the per-event and weekly-digest toggles on the Account page. Opting out of emails does not affect your in-app reminders or any other part of the Service.
- Export your data — email us at privacy@suiteplan.app and we will provide a copy within a reasonable time.
California residents (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we have collected about you, the right to correct inaccurate information, the right to delete your information, the right to opt out of the “sharing” of your personal information for cross-context behavioral advertising, and the right not to be discriminated against for exercising these rights. We do not sell your personal information for money, but our Reddit advertising pixel involves “sharing” under California law. You can opt out of that sharing by (1) using a browser or extension that sends the Global Privacy Control (GPC) signal, which we automatically honor; (2) emailing privacy@suiteplan.app; or (3) blocking third-party cookies in your browser. To exercise any of your other rights, email the same address.
Users outside the United States
Your information will be processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.
9. Children
The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a person under 18, please contact us at privacy@suiteplan.app and we will delete it.
10. Dispute resolution and arbitration
Any dispute, claim, or controversy arising out of or relating to this Privacy Policy or to our handling of your information is subject to the binding individual arbitration agreement and the class-action and jury-trial waiver set out in Sections 13 and 14 of our Terms of Service, including the requirement to attempt informal resolution first and your right to opt out within 30 days. Those provisions are incorporated into this Policy by reference and govern privacy-related disputes to the same extent.
11. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or by posting a notice in the Service, and we will update the “Last updated” date at the top of this page. The updated Policy takes effect on that date.
Your continued use of the Service after the updated Policy takes effect means you accept it. If you do not agree, you should stop using the Service and may close your account at any time from the Account page (Delete account section).
12. Contact
Questions about this Policy or about your information? Email us at privacy@suiteplan.app, or write to us at:
Suiteplan LLC
2108 N St #16487
Sacramento, CA 95816
USA