Privacy Policy

Luxury ETA (“we,” “us,” or “our”) is committed to protecting the privacy of our clients. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Luxury ETA client portal (“Platform”).

By accessing or using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

We collect the following categories of information:

We use the information we collect to:

• Provide, operate, and maintain the Platform and the services you have engaged us for
• Communicate with you about your events, trips, documents, and account activity
• Send transactional emails (invitations, document notifications, signing confirmations)
• Process and track invoices and payment records
• Improve and personalize your experience on the Platform
• Comply with legal obligations and enforce our Terms of Service
• Detect, prevent, and address technical issues, fraud, or abuse

Your data is stored using Supabase, a cloud-hosted PostgreSQL database and authentication platform. Supabase stores data in secure, encrypted infrastructure hosted on Amazon Web Services (AWS). All data in transit is encrypted using TLS, and data at rest is encrypted using AES-256.

Files and documents you upload are stored in Supabase Storage with access controlled by Row Level Security (RLS) policies, ensuring that each client can only access their own data unless explicitly shared by an administrator.

The Platform is deployed on Vercel, a cloud hosting platform. Vercel may process request logs and edge network data in accordance with their own privacy policy.

We do not sell your personal information. We do not sell, trade, rent, or otherwise transfer your personal information to third parties for marketing purposes.

We may share information with third parties only in the following circumstances:

• Service providers who assist us in operating the Platform (e.g., Supabase, Resend, Vercel, QuickBooks) under strict confidentiality obligations
• When required by law, court order, or other legal process
• To protect the rights, property, or safety of Luxury ETA, our clients, or others
• With your explicit consent

We use Resend to send transactional emails, including account invitations, document notifications, and message digests. We may also use Resend to send service updates or announcements relevant to your account.

You can opt out of non-essential communications by contacting us at info@luxuryeta.com. Transactional emails related to your account and services cannot be opted out of while your account is active.

The Platform uses cookies and similar session storage mechanisms to maintain your authenticated session. These are strictly necessary for the Platform to function.

We do not use advertising cookies, cross-site tracking, or third-party analytics cookies. We do not participate in advertising networks or behavioral tracking systems.

You have the right to:

• Access the personal information we hold about you
• Request correction of any inaccurate or incomplete information
• Request deletion of your account and associated personal data
• Receive a copy of your personal data in a portable format
• Withdraw consent for optional data uses at any time

To exercise any of these rights, please contact us at info@luxuryeta.com. We will respond to all requests within 30 days.

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you request account deletion, we will delete or anonymize your data within a reasonable time, except where we are required to retain it for legal, compliance, or accounting purposes.

Executed documents may be retained for a period consistent with applicable legal requirements and legitimate business record-keeping obligations.

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encrypted data storage and transmission, access controls, Row Level Security (RLS) database policies, and invite-only account creation.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date at the top of this page and, where appropriate, by sending an email notification to the address on your account.

Your continued use of the Platform following any changes constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: