Privacy Policy

1. Introduction

Tour Management Made Right, Inc. ("TMMR," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, use the TMMR software platform (the "Software"), or interact with us as a tour operator, driver, or guest. This Policy is incorporated into, and should be read together with, our End User Agreement.

TMMR currently operates in, and offers the Software only to businesses located in, the United States. If we expand operations outside the United States, we will update this Policy to address any additional legal requirements that apply.

2. Information We Collect

• Personal Information: Name, email address, phone number, business information, and anything else you provide through sign-up forms, lead forms, guest bookings, or direct communication with us.
• Technical Data: Device type, browser, IP address, time zone, and similar information collected automatically as you interact with our site and Software.
• Usage Data: Pages visited, features used, time spent, and other analytics about how you use our website and Software.
• Verification Documents: Insurance certificates, licenses, permits, and similar documents you choose to upload. TMMR does not independently verify the accuracy of these documents. See Section 6 of our End User Agreement.
• Guest & Operational Data: If you are an Operator, information you enter about your Guests, drivers, vehicles, itineraries, and bookings for the purpose of running your tours.

TMMR does not store your or your guests' full payment card information outside of Stripe. Payments are processed by Stripe, our payment processor; card data is handled directly by Stripe under its own security standards (PCI DSS) and Stripe's own Privacy Policy, which governs how Stripe handles that data.

3. How We Use Your Information

• Providing and Improving Services: To operate, maintain, secure, and improve our website, products, and Software.
• Communication: To communicate with you about updates, support, and important information regarding your account or our services.
• Marketing: To send you information about products, services, and promotions we believe may interest you, which may include third-party marketing tools to deliver relevant ads. You may opt out at any time (see Section 8).
• Compliance and Protection: To comply with legal obligations, resolve disputes, enforce our agreements, and protect the rights, property, and safety of TMMR, our Users, and others.

Guest information is used only for the purpose it was collected: to provide the tour, transportation, or hospitality service booked with the Operator who entered it. We do not sell Guest information, and we do not use it for any purpose beyond operating the Software and supporting that Operator's business.

4. Information Shared Through the Operator Network

If you choose to participate in the Operator Network, certain profile and business information you provide (such as your company name, service area, contact details, and Verification Documents) may be made visible to other Operators so they can decide whether to work with you. You control what you submit to your Network profile. TMMR does not control or take responsibility for how another Operator uses information you share with them directly through the Network. See Section 6 of our End User Agreement for the full Operator Network release of liability.

5. Sharing of Information

• Third-Party Service Providers: We use vendors for data hosting, analytics, payment processing (Stripe), and marketing. These providers may access data only to perform specific tasks for us and are contractually restricted from using it for other purposes.
• Business Transfers: If TMMR is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.
• Legal Obligations: We may disclose information if required by law or in response to valid requests from public authorities.
• With Your Direction: When you use the Operator Network as described in Section 4, or otherwise direct us to share information (for example, sending a Guest itinerary by email).

We do not sell your or your Guests' personal information, and we do not share it with third parties for their own independent marketing purposes without your consent. As described in Section 3, Guest information is never used for purposes beyond what it was collected for.

6. How We Use Artificial Intelligence

We use AI-assisted tools in two ways, and we want to be specific about both:

AI used to build TMMR

Our engineering team uses AI coding assistants to help develop and maintain the Software. These tools do not have standing, automatic access to live production data containing your or your guests' personal information. Development work is done against local, staging, or de-identified environments by default.

AI-assisted access to production data

From time to time, our authorized personnel may need to access production systems to diagnose a bug, respond to a support request, or maintain the security of the Software. When that happens:

• Access is restricted to authorized personnel and, wherever the task allows, is limited to schema, metadata, or aggregate information rather than row-level personal data;
• Guest and Operator personal information is never provided to AI tools except in de-identified, aggregated, or otherwise generic form. Any sample data used to support an AI-assisted workflow is anonymized or synthetic;
• Any AI tool used to assist with that work is used as a productivity aid for our own engineers, not as an automated system with independent access to your data;
• We do not use your personal information or your guests' personal information to train third-party AI models, and we do not share that information with AI vendors or any other third party for that purpose.

If you have questions about a specific data-access event, contact us at support@tmmr.ai.

7. Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to understand how visitors use our website and to improve your experience. You can adjust your browser settings to reject cookies, though this may limit some site features.

8. Your California and Other U.S. Privacy Rights

Depending on your location, you may have the right to:

• Know what personal information we've collected about you, including the categories of information, the sources we collected it from, and the categories of third parties we've shared it with;
• Access a copy of the personal data we hold about you;
• Correct inaccuracies in your data;
• Delete your personal data, subject to certain legal exceptions;
• Opt out of the sale or sharing of your personal information. TMMR does not sell personal information, and we do not share it for cross-context behavioral advertising;
• Limit the use of sensitive personal information, to the extent we collect any;
• Non-discrimination. We won't deny you service, charge you a different price, or give you a lower level of service because you exercised any of these rights;
• Opt out of marketing communications at any time via the unsubscribe link in our emails or by contacting us directly.

California residents may submit these requests directly or through an authorized agent. We may ask you to verify your identity before completing a request. TMMR currently operates in the United States only, so GDPR/UK-GDPR language isn't needed today; we'll revisit this section if TMMR expands internationally.

To exercise any of these rights, contact us at support@tmmr.ai.

9. Data Security

We use administrative, technical, and physical safeguards designed to protect your data, including restricting production data access to authorized personnel as described in Section 6. However, no online transmission or storage system can be guaranteed 100% secure, and we cannot warrant the absolute security of your information.

10. Retention of Data

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

11. Children's Privacy

The Software is intended for business use by Operators and is not directed to children under 18. We do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this Policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Tour Management Made Right, Inc.
support@tmmr.ai
Sonoma, California