Privacy Policy

Effective: May 8, 2026

X by Z ("we," "us," or "our") is an experience design studio operated by Zach Strohmeyer in Atlanta, Georgia. This Privacy Policy explains what information we collect from clients and visitors, how we use it, how we protect it, and the choices you have. By using our services or sharing your information with us, you agree to this policy.

What we collect

Information you provide

Contact details — your name, email address, mobile phone number, and (when relevant) mailing address.
Trip and experience details — destinations, travel dates, group composition, preferences, dietary needs, accessibility requirements, and similar information you share so we can design your experience.
Payment information — handled by our third-party payment processor (Stripe). We do not store full card numbers on our servers.
Identity verification data — phone numbers used to receive one-time SMS verification codes when accessing your trip page.
Communications — messages, notes, voting selections, and feedback you submit through our trip pages or related forms.

Information collected automatically

Device and usage data — browser type, operating system, screen size, IP address (transient), and pages visited. Used to debug issues and improve the experience.
Cookies and local storage — small data files stored on your device to remember your sign-in state and preferences. We do not use third-party advertising cookies.
Diagnostic telemetry — to keep our experiences working smoothly, we collect anonymous diagnostic data on our pages—error reports and aggregate interaction signals (such as which elements are tapped). This is metadata only: we do not record the contents of forms, keystrokes, or screen recordings, and it is never sold or shared.

How we use your information

To plan, coordinate, and deliver the travel and celebration experiences you've engaged us to create.
To communicate with you about your experience, including by email and SMS (urgent updates, schedule changes, coordination details).
To verify your identity when you access your trip page.
To process payments through Stripe.
To improve our services, respond to feedback, and resolve technical issues.

SMS communications

If you provide your mobile phone number through our intake forms or trip page, you consent to receive transactional and operational SMS messages from us related to your experience. These may include trip updates, schedule changes, urgent coordination, and reminders.

Frequency: Variable — typically only when needed for your trip.
Cost: Message and data rates may apply per your carrier plan.
Opt-out: Reply STOP to any message at any time. Reply HELP for help.
No marketing SMS: We do not use SMS for marketing or promotional content.

How we share information

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not share information with advertising networks.

We share information only with the following service providers, and only as necessary to deliver our services to you:

Twilio — sending SMS messages and verifying phone numbers
Resend — sending transactional emails
Firebase (Google) — secure data storage and authentication
Netlify — website and application hosting
Stripe — payment processing
Anthropic — AI-assisted summarization of internal operational notes (no client-identifying data is sent for marketing or model training)
Travel suppliers — hotels, transportation providers, and other vendors as needed to coordinate your reservations on your behalf

We may also disclose information if required by law, subpoena, or to protect the rights, property, or safety of X by Z or others.

Data retention

We retain client information for as long as needed to deliver and support your experience, plus a reasonable period thereafter for record-keeping, accounting, and legal compliance. You may request deletion of your data at any time (see "Your rights" below).

Security

We use industry-standard practices to protect your information, including encrypted connections (HTTPS), authenticated database access, and limited internal access to personally identifying data. No system is perfectly secure; we encourage you to use strong, unique passwords and to contact us promptly if you suspect unauthorized access.

Your rights

Access — you can request a copy of the information we hold about you.
Correction — you can ask us to correct inaccurate information.
Deletion — you can ask us to delete your information, subject to legal record-keeping obligations.
SMS opt-out — reply STOP to any text message.
Email opt-out — reply to any email asking to be removed.

To exercise any of these rights, contact us at zach@xbyzexperience.com.

Children

Our services are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will promptly delete it.

Changes to this policy

We may update this policy from time to time. The "Effective" date at the top reflects the most recent version. Material changes will be communicated to active clients by email.

Contact

Questions about this policy or your data:

Zach Strohmeyer
X by Z
Atlanta, Georgia
zach@xbyzexperience.com