Privacy Notice

Effective Date: September 21, 2026

1 · Introduction

Your privacy matters to FamScapes. FamScapes helps families plan travel together, which means we may handle information not only about you, but also about family members, guests, and other Travelers you plan for. Some of that information may be personal or sensitive, such as age ranges, dietary needs, mobility or accessibility information, or details you choose to share with Winston. Winston is FamScapes' AI travel planner, an AI-assisted tool within the Service.

This Privacy Notice explains what personal information FamScapes collects, where it comes from, how and why we use it, when we disclose it, how Winston processes information, what choices and rights may be available to you, and how to contact us with questions or requests.

FamScapes is designed around a simple privacy principle: collect and use information reasonably needed to provide the planning experience, limit sensitive processing to appropriate purposes and permissions, protect information with reasonable safeguards, and give people meaningful information and choices about how their data is handled.

This Notice applies to FamScapes' Initial Release (Release 1.0) and the current Service described in our Terms of Service.

2 · Privacy Notice at a glance

This summary is provided for convenience. Please read the full Privacy Notice below for complete information.

3 · How this Notice relates to other FamScapes legal pages

FamScapes uses separate legal pages so that detailed rules can be explained where they belong rather than repeated throughout every document. These pages should be read together where applicable.

If a specialized policy expressly states that it governs a particular category of information or subject matter, that specialized policy controls for that subject matter to the extent required by applicable law.

4 · Who we are and who is responsible for your information

FamScapes is operated by FamScapes, LLC, a U.S.-based limited liability company (referred to in this Notice as "FamScapes"). FamScapes, LLC is responsible for the personal information described in this Notice. Where applicable law uses terms such as "controller" or "business," FamScapes, LLC is the entity acting in that role unless we tell you otherwise.

Privacy contact: FamScapes, LLC · 10 Glenlake Parkway, Suite 130, Atlanta, GA 30328, USA · privacy@famscapes.com

5 · Personal information we collect and why

The information we process depends on the FamScapes features you use and the information you or an authorized Planner choose to provide. "Personal information" in this Notice includes "personal data" where that term is used by applicable law.

Legal bases where required. Where applicable law requires us to identify a legal basis for processing personal information, we rely on the basis appropriate to the particular activity, which may include providing a service you requested, your consent, compliance with legal obligations, or our legitimate interests in operating, improving, and protecting FamScapes.

6 · How we collect information

We collect personal information from the following general sources, depending on how you use FamScapes:

• Directly from you — when you create or manage an account, provide Traveler or trip information, use Winston, subscribe to a membership plan, change settings, or contact us.
• From other FamScapes users — when another authorized user adds you as a Traveler, invites you to a trip, collaborates with you, or provides information about you for a planning purpose.
• Automatically when you use the Service — through device information, logs, cookies, local storage, security signals, and similar technologies used to operate, protect, and understand the Service.
• From service providers and other third parties — in limited circumstances, when needed to operate a feature, administer a membership, protect the Service, or support an interaction you choose to have with a linked or affiliated third-party service.

7 · Planning for other people and multi-party information

FamScapes is built for family travel, so the person using the Service is often not the only Traveler. A Planner may provide ordinary information about other Travelers so that a family or trip can be organized. Providing information about another person does not automatically give the Planner authority to make every privacy choice for that person.

We distinguish ordinary trip-profile information from sensitive information. Ordinary profile and logistics information may include a Traveler's name, age band, relationship to the family, rooming needs, timing, or other non-sensitive trip details. Sensitive information may include health, disability, mobility, allergies, health-related dietary needs, or an assistance-animal role that can identify or imply a health status.

For another adult's sensitive information, FamScapes may require that adult to confirm or authorize the relevant processing. For a minor's sensitive information, FamScapes may require authorization from a parent, legal guardian, or other person legally authorized to act for the minor. A family relationship label alone - such as grandparent, aunt, uncle, or sibling - does not by itself establish legal guardianship.

FamScapes may lock or suppress sensitive fields until the required authorization is recorded. Ordinary planning can continue separately where appropriate. Additional rules for qualifying consumer health data are described in the Consumer Health Data Privacy Policy.

8 · Children and minors

FamScapes is designed for multi-generational travel, so trip plans may include minors. Release 1.0 accounts are intended for adults age 18 or older unless FamScapes expressly introduces a supervised minor feature under additional age-appropriate controls.

8.1 Adult-entered information about a child

An adult Planner may create an ordinary Traveler profile for a minor and provide ordinary trip information about that child. Under federal COPPA, information entered by an adult about a child is not, on that fact alone, treated the same as personal information collected online from the child. We nevertheless limit minor information to planning and service purposes and apply additional controls where sensitive information is involved.

8.2 Children under 13

FamScapes does not knowingly permit a child under 13 to create an independent account or directly use Winston in Release 1.0. If FamScapes later introduces a feature that collects personal information directly from a child under 13, we will implement the notices, parental-consent mechanisms, and other controls required before enabling that feature.

8.3 Teens

FamScapes does not currently offer an independent teen account as part of Release 1.0. If supervised teen participation is introduced, the feature will be reviewed against applicable state youth-privacy and design requirements before launch.

8.4 Sensitive information about minors

Different rules may apply to a minor's sensitive information. FamScapes may require a parent or legal guardian to authorize processing of a minor's sensitive fields and may restrict those fields from non-guardian Planners. The exact authorization mechanics are subject to applicable law.

9 · How Winston uses information

9.1 Planning context

To create and refine plans, Winston may process relevant account, Traveler, preference, trip, and conversation context. We design the Service to send only information reasonably needed for the planning task rather than every item held in a family or account.

9.2 AI service provider

FamScapes may use a third-party AI service provider to perform model inference. Our intended Release 1.0 architecture treats that provider as a service provider/processor operating under written restrictions for FamScapes' purposes. FamScapes does not intend to permit the provider to use FamScapes prompts, outputs, or consumer health data to train or improve the provider's own models independently of providing the service to FamScapes.

9.3 Sensitive information and inferred data

A Winston interaction can contain sensitive information or can generate an inference about a Traveler. FamScapes therefore treats sensitive prompts and health-related inferences with additional care. Qualifying consumer health data is subject to the Consumer Health Data Privacy Policy where applicable. Public sharing controls are designed to avoid exposing sensitive health/disability or assistance-animal role-to-person inferences.

9.4 Human review and quality

Authorized FamScapes personnel may access limited information when reasonably necessary for support, security, abuse prevention, troubleshooting, or legal compliance. Access should be role-based and need-to-know. FamScapes does not use consumer health data for advertising or unrelated model training.

10 · Family collaboration, permissions, and Public Shares

FamScapes may allow family members and Planners to collaborate within a family or trip workspace. What another person can see depends on their role, the trip settings, the category of information, and any consent or permission controls that apply.

Sensitive information is not intended to become visible to every collaborator merely because they are part of the same family or trip. FamScapes may hide sensitive fields by default and require the data subject, or an authorized representative where appropriate, to decide which collaborators may access a sensitive category.

A Public Share is a bearer-style link intended to show selected trip information without requiring the recipient to join the family or trip workspace. Public Shares are designed to exclude consumer health data and to suppress sensitive role-to-person inferences. Anyone who receives a Public Share link may be able to forward it, so users should choose carefully what non-sensitive information they include.

Once a recipient has copied, downloaded, photographed, forwarded, or otherwise retained information outside FamScapes, FamScapes may not be able to control that recipient's copy.

11 · Third-party links, affiliate relationships, and external services

FamScapes may display or provide links to independent travel providers, government resources, or other third-party websites. If you choose to follow an external link, the third party operates its own site or service and its privacy notice and terms apply to the information it collects from you.

Some outbound links may be Affiliate Links. Depending on the program, an affiliate or referral network may receive information such as the referring page, a referral identifier, device/browser information, or other data needed to attribute a qualifying action. FamScapes may receive limited referral, conversion, or commission information in return. We do not intentionally place consumer health data or other sensitive Traveler information into outbound affiliate-link parameters.

Third-party websites may use cookies or tracking technologies under their own policies after you leave FamScapes. Our Cookie Statement explains technologies used on FamScapes itself.

12 · How we disclose personal information

We disclose personal information only as reasonably necessary for the purposes described in this Notice, as directed by you, or as permitted or required by law.

FamScapes does not sell consumer health data. FamScapes does not use personal information for cross-context behavioral advertising in Release 1.0. Whether a particular analytics or affiliate/referral data flow is legally characterized as a "sale" or "share" under a specific state privacy law depends on the implementation and applicable law; FamScapes will provide any required opt-out mechanism where legally required.

13 · Cookies and similar technologies

FamScapes uses cookies, local storage, and similar technologies for essential functionality, authentication, security, preferences, and limited analytics. We do not use advertising or cross-site targeting cookies in Release 1.0. The Cookie Statement describes the categories used, providers, available choices, and the live cookie-inventory requirements.

Where consent is required for non-essential analytics or similar technologies, FamScapes will request that consent before enabling the applicable technology. Where applicable law requires recognition of browser-based privacy signals such as Global Privacy Control, FamScapes will honor those signals as required.

14 · Consent, permissions, and legal bases

Different privacy rules use different legal concepts. Where applicable law requires a lawful basis for processing, FamScapes relies on one or more of the following, depending on the activity:

• Performance of a contract or requested service — information reasonably necessary to create an account, provide a family/trip workspace, generate requested planning, administer a membership plan, and support the Service.
• Consent — where you or the person the data is about must affirmatively agree to a specific use, including certain sensitive-data processing, optional marketing, or non-essential technologies where required.
• Legitimate interests — where permitted, to operate and secure the Service, prevent abuse, respond to users, measure performance, and improve permitted aspects of FamScapes, balanced against individual rights.
• Legal obligations — where we must retain, disclose, or process information to comply with law, tax/accounting requirements, court orders, regulatory obligations, or lawful requests.

Accepting the Terms of Service is not treated as blanket consent for every privacy purpose. Where law or FamScapes' design requires separate consent, the consent is requested in context and is intended to be specific, unbundled, and withdrawable where required. Consent and acknowledgement records may be versioned so we can identify what a user agreed to and when.

15 · Your privacy rights and choices

Your rights depend on where you live, the type of information involved, whether a particular law applies to FamScapes, and any exceptions under that law. Depending on those factors, you may have some or all of the following rights:

• Access / confirmation — ask whether we process personal information about you and request access to it.
• Correction — request correction of inaccurate personal information where the applicable law provides that right.
• Deletion — request deletion of personal information, subject to legal exceptions and any specialized rules for consumer health data.
• Portability — obtain certain information in a usable or portable format where required.
• Withdraw consent — stop future processing that depends on your consent; withdrawal does not automatically delete data already collected unless you also request deletion or the law requires it.
• Opt out — where applicable, opt out of targeted advertising, certain sales/sharing, profiling, or other uses covered by state law.
• Authorized agent — where permitted, designate an authorized agent to submit a request on your behalf, subject to verification requirements.
• Appeal — where required, appeal certain decisions we make about a privacy-rights request.
• Non-discrimination — exercise applicable privacy rights without unlawful discriminatory treatment.

To submit a privacy request, contact privacy@famscapes.com or use any privacy-request mechanism FamScapes makes available. We may need information to verify your identity or authority before completing a request. We will respond within the time required by applicable law.

Marketing choices. You may unsubscribe from optional marketing messages using the unsubscribe mechanism in the message or by contacting us. You may still receive transactional, security, membership, legal, or other service communications that are necessary to operate your account or relationship with FamScapes.

16 · Consumer health data

Certain information used to plan a trip may qualify as consumer health data under laws such as Washington's My Health My Data Act or comparable state laws. Examples may include allergies, mobility or disability information, health-related dietary needs, the legal role of a service or support animal and its pairing with an identifiable handler, and health-related inferences generated from other information.

Where applicable, the Consumer Health Data Privacy Policy provides additional information about collection, purpose-specific consent, sharing, access, withdrawal, deletion, processors, public-share restrictions, and other rights or safeguards.

The specialized Consumer Health Data Privacy Policy governs qualifying consumer health data to the extent required by applicable law.

17 · How long we keep information

FamScapes keeps personal information only for as long as reasonably necessary for the purposes described in this Notice, to provide the Service, maintain security and records, comply with law, resolve disputes, and enforce agreements. Different categories can have different retention periods.

We use retention rules that distinguish account data, trip/planning data, security logs, consent records, communications, billing records, and sensitive data. Consumer health data, where applicable, is intended to have a separate purpose-based retention treatment and deletion process. Backup deletion may take additional time where permitted by law.

Where permitted, FamScapes may retain aggregated or de-identified information that can no longer reasonably be linked to an individual. De-identification is not treated as a substitute for deletion where a specialized law requires actual deletion of the covered personal information.

18 · How we protect information

FamScapes uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. Safeguards may include access controls, encryption, authentication controls, logging, vendor restrictions, secure development practices, and incident-response procedures appropriate to the Service and information involved.

Sensitive information should be accessible only on a need-to-know basis. Consumer health data is intended to be field-classified where practical so that access, retention, sharing, and deletion controls can be applied more precisely.

No method of transmission or storage is completely secure, and FamScapes cannot guarantee absolute security. You are also responsible for protecting your login credentials and promptly telling us if you suspect unauthorized account access.

19 · International processing and transfers

FamScapes is based in the United States, and Release 1.0 is primarily intended for users in the United States. Our website and Service may nevertheless be accessible from other countries, and information about Travelers may relate to people located outside the United States. Our service providers may also process information in the United States or other countries.

When personal information is transferred across borders, it may be subject to laws that differ from those in the country where the person is located. Where applicable law requires additional safeguards or a recognized transfer mechanism, FamScapes will use appropriate measures for the relevant processing.

20 · Membership plans and feature-specific data

FamScapes may offer Free and Pro membership plans with different features and levels of functionality. The personal information we process depends on the features you actually use. FamScapes does not collect an additional category of personal information merely because you subscribe to a higher membership tier; additional information is processed only when a feature you choose to use reasonably requires it.

Paid membership billing is handled through a third-party payment processor using hosted payment functionality. FamScapes does not receive or store your full payment-card number in its core systems. The Cancellation & Refund Policy explains membership billing, renewal, cancellation, and refund terms.

21 · Third-party websites and services

This Notice applies to FamScapes, not to independent websites, applications, travel providers, government sites, or other third parties that you visit through FamScapes. We do not control their privacy practices. Before providing personal information to a third party, review that party's privacy notice and terms.

22 · Changes to this Privacy Notice

We may update this Notice as FamScapes, applicable law, or our data practices change. The "Last updated" date identifies when this version was most recently revised. If a change is material, we will take reasonable steps to notify affected users and, where applicable law requires, request a new acknowledgement or consent before the change applies to the relevant processing.

If a new feature introduces materially different data categories, sources, sharing, or purposes, FamScapes will review the Privacy Notice and any specialized policies before launch rather than relying solely on this existing Notice.

23 · Contact us

Questions, privacy requests, or concerns:

• Email: privacy@famscapes.com
• Mail: FamScapes, LLC, 10 Glenlake Parkway, Suite 130, Atlanta, GA 30328, USA

For accessibility-related help or barriers, see the Accessibility Statement or contact accessibility@famscapes.com.