Privacy

• Your account email and a securely hashed password.
• Your name (optional, what you type at signup).
• Children you add: first name and (optional) birth year. Use a nickname if you prefer.
• The weeks you plan: status (ideating / pending / confirmed), kind (camp / vacation / local with or without babysitter), camp name, link, cost, dates, and any vacation, break, or trip location.
• Ideas you save for future planning: title, category, planning stage, optional link, and notes.
• Friend connections between children you've explicitly invited or accepted.
• Calendar share URLs (iCal subscription links you've generated).
• Notification preferences and an internal log of which notification emails were sent.
• Session cookies needed to keep you signed in. We don't use advertising cookies or third-party tracking cookies.
• Anonymous page-view analytics via Vercel Web Analytics (no cookies, no personal profiles, no ad targeting).
• If you subscribe to the Postcards newsletter: your email address. We store it only after you click the confirmation link in the email we send you.

• Other parents you explicitly share with. When you accept an invitation from another family, both sides can see each other's scheduled weeks for the children involved. Linked co-parents can also see and manage the shared family ideas list. Nothing is shared until you accept.
• Anyone with your iCal share URL. Calendar subscription URLs are secret-by-link. Share them only with people you want to see the calendar. Use the "Rotate" or "Revoke" buttons in Integrations to invalidate a URL at any time.
• Us. The maintainers can read your data in order to debug issues or respond to a deletion request. We don't sell it, share it with advertisers, or use it to train anything.

• Vercel — runs the website, stores deployment logs, and provides anonymous Web Analytics (page views and performance, no cookies). Logs may contain IP addresses and the URL paths you visited.
• Neon — managed Postgres database where your data is stored.
• Resend — sends our transactional emails (password resets, invitations) and the Postcards newsletter. Resend stores newsletter email addresses only after the person confirms the subscription. Every newsletter email has an unsubscribe link.

Each of these processes data on our behalf and has its own privacy policy. We don't enable marketing or ad-targeting features on these services.

Agent Amadeus is intended for parents and guardians, not for children to use directly. We don't collect data from children themselves. Parents can record a child's first name and birth year for their own planning needs.

We retain your data for as long as your account is active. Email hello@agentamadeus.com and we'll delete your account and all associated data within a few business days. Backups roll off within 30 days of the deletion request.

Email hello@agentamadeus.com. We'll respond.