Privacy Policy

1. Introduction

JMD Ventures LLC, doing business as 5 Star Explorer ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our luxury travel advisory platform, mobile application, and services (collectively, "Services"). By using our Services, you consent to the practices described in this policy.

2. Information We Collect

We collect information you provide directly and information collected automatically:

Personal Information You Provide:

• Account information: Name, email address, phone number, password
• Profile details: Birthday, home address, time zone, profile photo
• Travel preferences: Airline/hotel memberships, seating preferences, dietary requirements, travel pace
• Companion information: Names, relationships, and birthdays of frequent travel companions
• Travel documents: Passport details, visa information, and other identification as needed for bookings
• Payment information: Credit card details processed securely through Stripe, our PCI-compliant payment provider
• Communications: Messages with your travel advisor, feedback, and support requests

Information Collected Automatically:

• Device information: Device type, operating system, browser type, unique device identifiers
• Usage data: Pages viewed, features used, time spent on platform
• Push notification tokens: Device tokens used to deliver push notifications when you opt in
• Cookies and tracking: Session information and preferences (see Cookie Policy below)

Information We Do Not Collect:

• Device location: We do not collect GPS, Wi-Fi-based, or IP-based location data. All destination and weather features use text-based search and string-based geocoding only.
• Advertising identifiers: We do not collect or use Advertising IDs (IDFA on iOS or AAID on Android). No data is used for advertising or ad targeting purposes.

3. How We Use Your Information

We use your personal information for the following purposes:

• Provide Services: Create and manage your account, process bookings, deliver personalized travel itineraries
• Communication: Send booking confirmations, travel updates, and respond to your inquiries
• Push notifications: Deliver real-time trip updates, messages, and reminders when you opt in
• Personalization: Customize travel recommendations based on your preferences and history
• Booking fulfillment: Share necessary information with airlines, hotels, and other travel suppliers
• Security: Protect against fraud, unauthorized access, and ensure platform security
• Improvement: Analyze usage patterns to enhance our Services and user experience
• AI trip assistance: When you use the AI trip assistant, your prompts and selected trip details are sent to Google Gemini through a secure gateway to generate recommendations. Do not include passport numbers, payment details, or other sensitive data in AI prompts.
• Legal compliance: Meet regulatory requirements and respond to legal requests

No advertising use: We do not use your personal information for advertising, ad targeting, or marketing profiling. We do not serve ads within our Services.

4. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Travel suppliers: Airlines, hotels, restaurants, tour operators, and other providers necessary to fulfill your bookings
• Hosting and email delivery: Our hosting and email delivery providers process information needed to store inquiries and deliver transactional emails, such as booking confirmations, trip updates, and account notifications. Inquiry notification emails sent to our advisors include the inquiry details, mobile number if provided, and SMS consent record.
• Payment processing (Stripe): Payment card details are processed securely by Stripe; we do not store full card numbers on our servers
• Push notifications (OneSignal): Your User ID is linked with a OneSignal player ID to deliver targeted push notifications. Device push tokens are shared with OneSignal for notification delivery
• Trip sharing: When you generate a share link, recipients who access that link can view the trip details you choose to share, without requiring an account. Share links expire based on the settings you select.
• Maps and places (Google Maps): Itinerary maps and autocomplete suggestions rely on Google Maps / Places APIs, which may process search terms you enter.
• Flight tracking (AviationStack): Flight numbers and dates are shared with AviationStack to display live status information.
• Weather forecasts (Open-Meteo): Destination names and coordinates are shared with Open-Meteo to show weather forecasts.
• Legal requirements: When required by law, court order, or government regulation
• Business transfers: In connection with a merger, acquisition, or sale of company assets
• With your consent: When you explicitly authorize sharing for specific purposes

We do not sell, rent, or share mobile information, text messaging originator opt-in data, or consent records with third parties or affiliates for marketing or promotional purposes. Service providers may process this information only as necessary to host our Services, deliver inquiry notification emails, support authentication, or deliver text messages you choose to receive where that service is available, and not for their own marketing. We may disclose information when required by law. These limited purposes do not authorize the sale or transfer of SMS consent for another party's messaging program.

5. Push Notifications & Tracking Consent

Our mobile application uses OneSignal to deliver push notifications for trip updates, new messages, document alerts, and other service-related communications. When you enable push notifications:

• Your User ID is linked with a OneSignal player ID to enable targeted delivery
• Your device push token is registered with OneSignal
• You can disable push notifications at any time through your device settings or in-app notification preferences

Tracking consent: On iOS, we respect Apple's App Tracking Transparency (ATT) framework. On all platforms, we honor GDPR consent preferences. Your tracking consent status is recorded in your account profile so that we can consistently respect your choice across sessions. If you decline tracking, no behavioral or cross-app tracking data is collected.

Account security text messages (where available): If text message codes are available and you separately choose that method, our authentication and SMS delivery providers process the mobile number you provide to deliver one-time security codes. Inquiry SMS consent does not enroll you in security-code texts, and security-code consent does not authorize inquiry or marketing texts. Message and data rates may apply. A request to stop security texts does not by itself remove an enrolled authentication method from your account. Manage available methods in Settings or contact info@5starexplorer.com for assistance before losing access to your current method. We do not sell, rent, or share these mobile numbers or consent records for marketing or promotional purposes.

6. Text Messaging (SMS)

If you choose to receive text messages from 5 Star Explorer (JMD Ventures LLC) by checking the optional SMS consent box on our inquiry form, we collect your mobile number and your consent record (date, time, and the wording you agreed to). The form stores your inquiry and emails it to our advisors; submitting the form does not itself send a text message. Where inquiry texting is available, your consent covers replies to that inquiry and related itinerary and booking updates, not marketing or unrelated future trips. You can submit an inquiry without SMS consent or a mobile number. Consent is not a condition of any purchase. We do not use inquiry SMS consent for marketing.

Message frequency varies. Msg & data rates may apply. If you receive inquiry texts, reply STOP to cancel or HELP for help, or contact info@5starexplorer.com or +1 (561) 325-9219 to withdraw consent or request assistance. Necessary service-provider processing is described in Section 4. No mobile information or SMS opt-in data or consent is sold, rented, or shared with third parties or affiliates for marketing or promotional purposes.

7. Data Security

We implement industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission
• Encrypted storage of sensitive information
• Optional two-factor authentication for members and advisors using an authenticator app; text message codes are an option only where available
• Regular security audits and vulnerability assessments
• Strict access controls limiting employee access to personal data
• Secure payment processing through PCI-compliant providers (Stripe)
• Local device caching for offline access, with automatic clearing of sensitive documents when you sign out

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and enable two-factor authentication.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. After account closure, we may retain certain information as required for legal compliance, dispute resolution, or legitimate business purposes. Travel booking records are typically retained for 7 years for tax and regulatory purposes. You may request deletion of your data subject to legal retention requirements.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information through your profile settings
• Deletion: Request deletion of your personal information (subject to legal requirements). You can initiate an account deletion request directly from the Settings page within the app.
• Portability: Receive your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time
• Restriction: Limit how we process your information in certain circumstances
• Push notifications: Disable push notifications through device settings or in-app preferences at any time

To exercise these rights, contact us at info@5starexplorer.com or through your account settings.

10. Cookie Policy

We use cookies and similar technologies to enhance your experience:

• Essential cookies: Required for platform functionality, authentication, and security
• Preference cookies: Remember your settings, theme preferences, and language
• Analytics cookies: Help us understand how users interact with our platform

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States where our servers are located. When booking international travel, your data will be shared with suppliers in your destination countries. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

12. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately so we can delete it. Travel companion information for minors is provided and managed by their parent or guardian.

13. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information. As stated above, we do not sell personal information. To exercise your California privacy rights, contact us at info@5starexplorer.com.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes through email or a prominent notice on our platform. The "Last updated" date at the top indicates when the policy was last revised. Your continued use of our Services after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: