Privacy Policy

Effective: September 16, 2026

X by Z is an experience design studio run by Zach Strohmeyer in Atlanta, Georgia. Designing a trip means knowing a lot about you—where you want to go, what you eat, who you're traveling with, and the passport details an airline needs to ticket a seat. This policy explains what we hold, why we hold it, and what you can ask us to do with it.

Two things are true of everything below: we don't sell your information, and we don't use it for advertising. We're a studio, not a platform. Your information is here to plan your trip.

What we collect

What you tell us

How to reach you—name, email, mobile number, mailing address when we're sending you something, and the social handles you message us from.
What you want from the trip—destinations, dates, who's coming, and the preferences that shape a plan: how you like to travel, what you eat, what you'd rather avoid.
Health and accessibility needs—allergies, dietary requirements, and any accommodation an activity or venue needs to know about. We collect these so a kitchen can keep you safe and a plan can fit you. They're treated as sensitive and shared only with the people serving you.
Who's in your party—a record for each traveler, including children. It holds what a booking or an activity requires: a name, a date of birth, and occasionally a physical detail like height where a ride sets a limit. We keep the date each detail was recorded so last year's measurement isn't mistaken for this year's.
Travel documents—legal name, date of birth, gender, place of birth, passport number and dates, nationality, Known Traveler or Redress numbers, and loyalty numbers. Airlines require most of this to issue a ticket. Send us a photo of the passport page and we'll read the details off it rather than make you type them.
An emergency contact—a name, number, and relationship.
Payment details—handled by Stripe, or by Fora when a supplier needs a card on file to hold a booking. We keep the last four digits so we can tell one card from another, never the full number.
What you send us—messages, notes, quiz answers, votes and song picks from your trip page; inquiries; email to our desk address; supplier email we're copied on; and Instagram messages, including links you share.

What we notice while you plan

How you use your trip page—which parts of the plan you spend time with: the hotels you come back to, the days you open most, the options you react to. We use it for one thing, which is making your plan better. It is never sold, never used for advertising, and never shared.
Calls—when we call you from our planning tools, we can transcribe the call so we capture what you asked for instead of typing while you talk. We ask before the first one. If you'd rather we didn't, say so any time and we'll stop.
When something breaks—if a page errors, we record what happened and where so we can fix it.

What your browser sends

Device and usage data—browser, operating system, screen size, IP address, and pages visited, used to debug and improve.
Cookies and local storage—to remember that you're signed in and what you prefer. No third-party advertising cookies, here or anywhere.
Email links—some links in our emails pass through our server first, so we can tell whether a message reached you.

What others on your trip see

A trip page is shared, so some of what you do there is visible to the people you're traveling with. When you rate a restaurant, they see your name next to your rating. When someone makes a choice for the group, the page shows who made it.

They do not see your allergies, your dietary needs, or your individual quiz answers. Group summaries—the kind of hotel you're all after—draw on everyone's answers without attributing them.

How we use it

To plan, book, and run the experience you hired us to create.
To talk to you about your trip, and to text you a sign-in code when you ask for one.
To confirm it's you before opening your trip page.
To take payment.
To meet the requirements airlines and governments impose before a ticket can be issued.
To understand what's landing on your trip page, so the plan gets sharper.
To fix what breaks and improve how the whole thing works.

How we use AI

We use AI to do the parts of planning that would otherwise be typing: drafting itineraries and packing lists, reading a document or an email you've sent, organizing what you told us in a quiz or on a call, and summarizing what a traveler seems to be responding to.

That means your trip details go to our AI provider, including the health and children's information above where it matters to the plan—an allergy has to reach a restaurant brief to be useful. Your information is not used to train anyone's models. Nothing AI suggests about you is added to your record until Zach has read it and agreed.

Who we share it with

We don't sell, rent, or trade your information, and we don't share it with advertising networks. We share it in four situations:

Travel suppliers—hotels, transport, restaurants and venues, to hold and run your reservations. This includes the dietary needs and allergies a venue needs in order to keep you safe.
Fora—the host agency we book through. Fora holds a client record for you, and the card if you've put one on file.
The services that run our studio—hosting, storage, email and messaging, maps, payments, AI, and the tools that read a passport page or transcribe a call. They act on our instructions and may only use your information to do the job we've given them. We keep the current list, and what each one receives, on our service providers page.
When the law requires it—including a subpoena or other legal process, or to protect the rights, property or safety of you, of us, or of someone else.

Text messages

The only texts we send are one-time sign-in codes, when you ask for one to open your trip page.

Frequency—only when you request a code.
Cost—message and data rates may apply per your carrier plan.
Opt out—reply STOP to any message at any time. Reply HELP for help.
No marketing—we don't use SMS for promotion, and we don't give your number to anyone for theirs.

How long we keep it

We keep your information on file so we can look after this trip and plan the next one without asking you everything twice. Travel documents stay so you don't re-enter a passport number every year.

Ask us to delete it and we will—all of it, or one part, like your documents. A parent or guardian can do the same for a child. We keep only what the law requires us to, such as accounting records.

Keeping it safe

Connections are encrypted. Passport, Known Traveler and Redress numbers are encrypted where they're stored and shown only to a session authorized to see them.

One thing worth knowing: some links we email sign you straight in, so you don't need a password. That also means anyone you forward that email to can open your trip page. A link like that can't reveal a travel document you've already given us, but treat it like a key. Sessions last up to 90 days on the device you used.

No system is perfect. Tell us promptly if you think someone reached your trip who shouldn't have.

Your rights

See it—ask for a copy of what we hold about you.
Fix it—ask us to correct anything wrong.
Delete it—ask us to erase it, subject to records the law makes us keep.
Stop texts—reply STOP to any message.
Stop email—reply to any email and ask.

A parent or guardian can do all of this for a child in the party. Write to zach@xbyzexperience.com and we'll take care of it.

Children

A family trip means we hold information about the children coming along: a name, a date of birth, a height where a ride requires one, what they can't eat, and what they'd love or would rather skip.

We hold it to plan around them, and for no other reason. A parent or guardian can ask for a copy, a correction, or a deletion at any time.

Changes to this policy

We update this from time to time. When we do, the new version goes up here and the date at the top changes, so you can always see which version applies to you.

Contact

Questions about this policy, or about what we hold:

Zach Strohmeyer
X by Z
Atlanta, Georgia
zach@xbyzexperience.com