Privacy policy

GlamBrandi is a trip planning service for Las Vegas operated by Innovative Configuration International LLC ("GlamBrandi", "we", "us"). This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have.

It covers our consumer-facing services:

• glambrandi.com — our public website, including the activity catalog, deals pages, and the trip planner you can use without signing in.
• The GlamBrandi app — the signed-in experience with AI chat, saved trips and itineraries, wishlists, offers, and games.
• The GlamBrandi mobile app for iOS and Android.
• Email and in-app messages we send you about your account or your trips.

It does not cover our merchant and provider dashboards, which are governed by the separate agreements those partners sign with us, or any third-party site you reach by following a link from GlamBrandi.

Your use of GlamBrandi is also governed by our Terms of service.

Trip planner inputs

What you tell the planner about the trip you want: the vibe or interests you pick, who you are traveling with and how many people, your travel dates or the month you are flexible around, the kind of help you want, a budget tier, the city you are departing from, and the flights, hotels, and activities you select. We do not ask for passport numbers, payment card details, or traveler names in the planner — GlamBrandi does not book or take payment for travel.

Account information

When you create an account, our authentication provider Clerk collects and verifies your email address and, if you choose to add one, your phone number. Depending on the sign-in method you use, Clerk may also pass us a display name and profile picture. We store an account record linked to your Clerk user id.

Profile and onboarding answers

A first and last name, an avatar, and an address if you add them, together with the answers you give during onboarding and the preferences you set for chat, notifications, and privacy.

Chat content

The messages you send in AI chat, the trip context attached to a chat thread, any files or images you upload, and the like or dislike feedback, reason, and free-text comment you leave on an assistant reply.

Saved items and activity

Your wishlist, shopping bag, saved travel plans and generated itineraries, offers you have earned or redeemed together with their redemption codes and expiry dates, and your scores from in-app games.

Messages you send us

What you write when you contact support, report a problem, or answer a survey, including the contact details you use.

Device and log data

Your IP address, browser and device type, operating system, referring page, the pages and API endpoints you request, and the date and time of each request. We use IP addresses to apply per-visitor rate limits and to detect abuse of our public search endpoints.

Product usage

Which features and screens you open, which options you select in the planner, and events we record to understand how the product is used. In the signed-in app some of these events are recorded against your account id.

Local storage on your device

The planner keeps your in-progress trip in your own browser so you can come back and finish it. We also store your theme choice and whether you have dismissed a site announcement. Your theme and dismissed announcements stay on your device; clearing your browser storage removes them.

Unfinished trip drafts

So an unfinished trip is not lost when you create an account or switch device, the planner also saves a copy of your in-progress trip to GlamBrandi in the background, under a random identifier stored in your browser. That identifier is not linked to a name, email, or account until you create one and we attach the draft to it. It contains only what you told the planner — no passport, payment, or traveler details. Drafts that are never linked to an account are deleted after 90 days, and choosing "Start from scratch" deletes the saved copy straight away.

Location

We infer an approximate area from the departure city you type and from your IP address. We only ask your device for its location if you turn on location-based features, and you can turn them off again in Settings.

We use a small number of cookies and browser storage keys, and no third-party advertising cookies:

Strictly necessary

Session and security cookies set by Clerk to keep you signed in and to protect against forged requests. The signed-in app does not work without them.

Preferences

Local storage for your theme, dismissed announcements, your in-progress trip planner draft, and the random identifier that links that draft to the copy we hold.

Analytics

Measurement of feature usage and performance so we can find what is slow or broken. In the app you can switch usage analytics off in Settings.

Your browser lets you block or delete cookies and clear site storage. Blocking strictly necessary cookies will stop you from signing in.

We use personal information to:

• Build and show your trip — search flight, hotel, and activity options for your dates and generate a day-by-day itinerary.
• Run the signed-in experience — keep you signed in, save your chats, trips, wishlists, offers, and game scores, and show them back to you.
• Answer you in AI chat and produce the plans, summaries, and thread titles the product depends on.
• Personalize what we surface, such as activities matched to the vibe you chose or offers matched to your saved interests, subject to the choices you make in Settings.
• Send you service messages — sign-in and account emails, and notifications about your trips or offers.
• Keep GlamBrandi secure and available — rate limiting, fraud and abuse prevention, debugging, and caching.
• Measure and improve the product, usually with aggregated or de-identified data.
• Meet legal obligations, enforce our Terms, and establish or defend legal claims.

We do not use your personal information to build advertising profiles, and we do not run third-party ad targeting on GlamBrandi.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:

Performance of a contract

Creating and running your account, saving your trips and chats, and delivering the plans you ask for.

Legitimate interests

Securing the service, preventing abuse, measuring and improving the product, and sending service messages — balanced against your rights and interests.

Consent

Device location, optional personalization, and any marketing message you opt in to. You can withdraw consent at any time without affecting processing already carried out.

Legal obligation

Responding to lawful requests and meeting record-keeping duties.

Itinerary generation, chat replies, and thread titles are produced with large language models. To do that we send the relevant content — your prompt, the messages in that thread, any attachment you added, and your trip details — to the AI provider serving that request.

• We use Anthropic, OpenAI, and Google as AI providers under their commercial API terms, which do not permit them to train their models on the content we send.
• Providers may retain content briefly to deliver the response and to run abuse monitoring, under their own terms.
• GlamAI asks for your permission before your first message is sent to these providers. You can withdraw it at any time in Settings › GlamAI; GlamAI stops answering until you give it again.
• Every chat is scoped to the account that created it. Staff access to chat content is restricted and used only to investigate a problem you report or a security incident.
• Chat threads stay in your account until you delete them. Uploaded attachments carry an expiry and are removed automatically after it passes.

We share personal information only as described here:

Service providers

Companies that run parts of the service for us under contract and may only use the data to provide it. They are listed in the next section.

Travel partners you choose

When you follow a booking or listing link, you leave GlamBrandi and continue on that partner’s site under their terms and privacy policy. We pass the search context in the link — for example your dates and destination — but not your account details.

Merchants whose offers you redeem

When you redeem an offer, the issuing merchant receives what they need to honor it, such as the redemption code and the fact that it was redeemed.

Legal and safety

When we believe disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of GlamBrandi, our users, or the public.

Corporate transactions

In a merger, acquisition, financing, or sale of assets, subject to this policy continuing to apply to the transferred information.

With your direction

Anywhere else you ask us to share it.

These providers process personal information on our behalf so GlamBrandi can work:

Clerk

Account creation, sign-in, session management, and account emails.

Anthropic, OpenAI, and Google

Large language model inference for itineraries, chat replies, and thread titles.

Duffel

Flight offers and departure-city lookups.

SerpApi

Flight and hotel pricing data sourced from Google Flights and Google Hotels.

Viator, a Tripadvisor company

The activity and tour catalog, availability, and booking links.

Google Maps Platform

Maps, place search, geocoding, and travel-time estimates.

Open-Meteo and OpenStreetMap (Nominatim)

The weather and place name shown on Explore, looked up for a fixed point on the Las Vegas Strip, not for where you are. Earlier versions of our mobile app looked them up from your approximate location when you allowed location.

Vercel

Website and application hosting and delivery.

Cloud database, cache, and storage providers

Managed Postgres for account and trip data, Redis for short-lived caching of catalog results, and object storage for chat attachments.

Our Trust Center carries our current security posture and the up-to-date list of sub-processors.

GlamBrandi is operated from the United States and our providers process data there. If you use GlamBrandi from outside the United States, your information will be transferred to and processed in a country whose data protection laws may differ from your own.

Where required, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, together with additional safeguards, to protect transfers out of the EEA, the UK, and Switzerland. Write to [email protected] for details of the safeguards that apply to a specific transfer.

We keep personal information only as long as we need it for the purpose we collected it for, then delete or de-identify it.

Trip planner drafts

Held in your browser until you submit the trip, discard the draft, or clear your browser storage. We also keep a background copy under a random identifier so the draft survives creating an account: if it is never linked to an account we delete it 90 days after the last change, and discarding the draft deletes it immediately. Once you link it to an account it is kept like any other saved trip.

Submitted trips and generated itineraries

Kept so we can deliver and, for signed-in users, re-open the plan. Signed-in trips remain until you delete them or close your account.

Account data

Kept for the life of your account. When you delete your account it is erased from our live systems straight away, except records of coupons you redeemed or won, which stay with the merchant’s offer with nothing that identifies you. Copies in our backups are removed as those backups expire, and we keep anything the law requires us to.

Chat threads and messages

Kept until you delete the thread or your account. A deleted thread is hidden immediately and purged for good within seven days.

Chat attachments

Carry an expiry set at upload and are removed automatically once it passes.

Cached catalog results

Flight, hotel, and activity search results are cached for short periods — typically twenty minutes to a couple of hours — and are keyed to the search, not to you.

Security and operational logs

Kept on a short rolling window unless retained for an investigation.

We may keep information for longer where we are required to by law or where it is needed to establish or defend a legal claim.

You can:

• Turn location-based features, personalized offers, and usage analytics on or off in Settings, and change your notification preferences at any time.
• Download a copy of everything we hold about you, or delete your account and all of it, in Settings › Your data — in the app or on the web. See Delete your account for every way to do it, including without the app.
• Delete an individual chat thread, remove saved items, or discard an in-progress planner draft yourself.
• Update your email address, phone number, and profile details from your account.

Depending on where you live, you may also have the right to request access to the personal information we hold about you, correction of inaccurate information, deletion, a portable copy, and to object to or restrict certain processing or withdraw consent. Rights under the EU and UK GDPR, the California Consumer Privacy Act as amended, and comparable US state laws are all covered here.

We verify a request by matching it to the account it concerns, usually through your verified email address. An authorized agent may act for you with written permission and enough information for us to verify you.

If we decline a request, you may appeal by replying to our decision or writing to [email protected] with "Appeal" in the subject line. We will tell you the outcome and our reasons. If you are in the EEA or the UK you may also complain to your local supervisory authority.

This section supplements the rest of this policy for residents of US states with comprehensive privacy laws, including California, Colorado, Connecticut, Texas, Virginia, and Nevada.

In the last twelve months we collected the following categories of personal information, for the purposes described above, from you and from your device, and disclosed them for a business purpose to the service providers listed in this policy:

• Identifiers — name, email address, phone number, account id, IP address, device identifiers.
• Customer records — contact details and any address you add to your profile.
• Commercial information — trips you plan, activities and stays you select, offers you save or redeem, and items in your wishlist or bag.
• Internet or network activity — pages and features used, requests to our services, and interactions with the planner and chat.
• Geolocation data — approximate area from your IP address or departure city, and device location only if you enable it.
• Audio, electronic, or visual information — images and files you upload to chat, and your profile picture.
• Inferences — preferences drawn from what you tell the planner and what you save.

We do not collect Social Security numbers, driver’s license numbers, financial account credentials, precise geolocation without your consent, or information about your health, and we do not use or disclose sensitive personal information for any purpose that would give you a right to limit that use under California law. We do not knowingly collect or sell the personal information of anyone under 16.

We do not sell personal information and do not share it for targeted advertising or cross-context behavioral advertising, so there is nothing to opt out of — including under Nevada’s opt-out right for the sale of covered information. We do not use personal information for profiling that produces legal or similarly significant effects about you.

Offers, rewards, and games are open to any account holder and do not require you to give us extra personal information beyond what is needed to run them, so they are not a financial incentive program under California law.

We encrypt traffic in transit, restrict internal access on a need-to-know basis, scope every request for your data to your authenticated account, and keep credentials in a managed secrets store rather than in code.

Our current controls and certifications are published in our Trust Center. No service can promise perfect security; if a breach affects your personal information we will notify you and any regulator as required by law.

GlamBrandi is built for adults planning adult travel. You must be at least 18 to create an account, and the service is not directed to children. We do not knowingly collect personal information from anyone under 13, or under 16 in the EEA and the UK.

If you believe a child has given us personal information, write to [email protected] and we will delete it.

GlamBrandi links out to airlines, hotels, tour operators, booking platforms, and merchant sites. Once you follow a link you are on their service, governed by their privacy policy, and we have no control over what they collect. Read their policy before you enter personal or payment details.

We update this policy when our practices change. The effective and last-updated dates at the top of this page always reflect the current version. If a change materially affects how we use your personal information, we will give you notice in the product or by email before it takes effect, and where the law requires it we will ask for your consent.

For privacy questions or to exercise a right, email [email protected]. For anything else, email [email protected].

Innovative Configuration International LLC, Las Vegas, Nevada, United States. Innovative Configuration International LLC is the controller of the personal information described in this policy.