PRIVACY POLICY

LAST UPDATED: MAY 31, 2026

At Cache Vibes, operated by CacheVibesEnt, Inc. ("we", "us", "our", or the "Company"), we are committed to protecting the privacy of our individual consumer users, short-term rental guests, and corporate property hosts (collectively, "Users" or "you"). This Privacy Policy explains how we collect, use, process, disclose, and protect your data across our mobile applications, group planning web interfaces, and physical interactive hardware kiosks (collectively, the "Platform").

By accessing or using the Platform, you acknowledge and agree to the data collections and processing practices described in this Privacy Policy.

1. INFORMATION WE COLLECT

To provide an AI-native concierge experience and localized venue intelligence, we process the following categories of information:

• Account and Profile Data: Names, phone numbers, email addresses, corporate employer details, and onboarding preferences provided voluntarily during account creation or via B2B onboarding Typeforms.

• Conversational Interaction Data: Natural language text strings, system chat history, and voice audio inputs processed by our conversational artificial intelligence engine ("Luna").

• Transactional and Booking Data: Card token strings, purchase summaries, itinerary variables, and transaction histories facilitated through our marketplace infrastructure.

• Ephemeral Perception Data (Kiosk Hardware): Select physical interactive kiosks leverage advanced local computer vision systems to calculate user presence, crowd scale, and immediate emotional sentiment.

2. RIGID CARRIER SMS COMPLIANCE & TEXT DATA PROTECTION

In strict compliance with telecommunications regulatory frameworks (including cellular carrier A2P 10DLC compliance gates), CacheVibesEnt, Inc. maintains an absolute firewall around consumer mobile phone numbers and text messaging permissions.

• No Data Sharing for Marketing: We do not sell, rent, trade, lease, or share mobile phone numbers, customer names, or SMS opt-in consent data with third parties, affiliates, or advertising partners for marketing, promotional, or secondary business purposes.

• Exclusion Gating: All text messaging originator data, text records, and mobile consent logs are completely excluded from third-party data sharing protocols. This information is preserved solely for internal transaction routing, automated property maintenance dispatches, and account verification (OTP) text notifications.

3. THE AI DATA FLYWHEEL & INTEGRITY ASSURANCE

We operate under a strict "Privacy-First AI" framework governing how conversational logs and analytics are utilized.

• No Third-Party Model Training: Conversations, text prompts, custom preferences, and speech profiles collected through your interactions with Luna are never utilized to train third-party foundational large language models (LLMs) or video generation models. All AI pipeline inputs are securely insulated via zero-data-retention enterprise API keys.

• Internal Preference Caching: Conversational metadata and thumbs-up/down ratings are processed strictly within our local Supabase cluster to train our own local discovery recommendation engine to personalize your subsequent itineraries over time.

4. EPHEMERAL CAMERA PERCEPTION & PRIVACY GATING

For physical counter kiosks deployed inside short-term rental properties or hotels, we protect guest privacy through hardware-enforced ephemeral processing.

• Absolute Non-Retention: The Platform does not record, stream, cache, store, or transmit any audio, video, photos, or biometric templates to any cloud infrastructure or external server.

• Local In-Memory Execution: Video frames captured via device sensors to analyze real-time customer sentiment (utilizing Tavus frameworks) are processed transiently inside volatile RAM local to that specific physical hardware unit. This data is permanently overwritten and purged within milliseconds of structural evaluation.

5. PARTNER DISCLOSURE & DATA TRANSMISSION GATING

To fulfill reservations and inquiries executed by users within the interface, we securely transmit essential Personally Identifiable Information (PII) to authorized inventory platforms:

• Core APIs: Essential reservation variables are passed to Expedia Rapid API (Hotels), Viator Partner API (Excursions/Charters), and Amadeus/Booking.com (Rental Cars).

• Hybrid Links: For dining and nightlife, basic context is passed via API deep-links to OpenTable, Eventbrite, or Discotech.

• Stripe Connect Routing: Financial credentials and payout routing details are managed securely via tokenized environments through Stripe, and are subject to the Stripe Privacy Policy. We do not store raw credit card numbers on our servers.

6. DATA RETENTION, SECURITY, & DELETION RIGHTS

• Security Architecture: We implement rigorous industry-standard administrative, physical, and technical security controls (including TLS encryption in transit and AES encryption at rest) to protect data pipelines from unauthorized access, loss, or manipulation.

• Your Deletion Rights: Users retain the absolute right to view, modify, or permanently delete their personal data. Individual consumer users can request account termination directly inside the mobile app settings. Property managers and guests can trigger comprehensive data purges by submitting an explicit written request to dev@cachevibes.com.

7. CHANGES TO THIS PRIVACY POLICY

We reserve the right to revise or update this Privacy Policy at any time to maintain alignment with regulatory carrier updates, global data governance acts, or platform upgrades. We will alert you to updates by shifting the "Last Updated" marker at the header of this document. Continued use of the platform after updates are published constitutes acceptance of the modified practices.

8. CORPORATE IDENTIFICATION & PRIVACY CONTACT

For all inquiries regarding data protection, CCPA compliance, or to execute a comprehensive data deletion request, contact the corporate operations center below:

• Legal Entity Name: CacheVibesEnt, Inc.

• State of Incorporation: Delaware

• Employer Identification Number (EIN): 41-3745304

• Corporate Address: 1700 Marietta Blvd, Suite B27, Atlanta, GA 30318

• Registered Agent Address: 131 Continental Dr, Suite 305, Newark, DE 19713

• Official Privacy Email: support@cachevibes.com

• Technical Compliance Email: dev@cachevibes.com