Privacy Policy

Last Updated: July 6, 2026

Rope Drop Plan™ — ropedropplan.ai/privacy

This Privacy Policy describes how Series& I, LLC ("Rope Drop," "we," "us," or "our") collects, uses, shares, and protects information about you when you use the Rope Drop Plan™ application, website, and related services. By using the Service, you agree to the collection and use of your information as described in this Policy.

Rope Drop Plan™ is not affiliated with, endorsed by, or sponsored by The Walt Disney Company or any of its subsidiaries. All park names and related marks are the property of their respective owners.

1. Who We Are

Rope Drop Plan™ is an AI-powered theme park trip planning application operated by Series& I, LLC, a Delaware limited liability company. We are the data controller for personal information collected through the Service.

Company: Series& I, LLC (operating as Rope Drop Plan™) Contact: legal@ropedropplan.ai Website: ropedropplan.ai Registered Agent: 8 The Green, Suite B, Dover, DE 19901

2. What We Collect

We collect information in three ways: information you give us directly, information we collect automatically, and information from third parties.

Account information — Email address, password (hashed), account creation date. Collected when you create an account.

Mailing list & promotions — Email address. Collected when you join our mailing list or waitlist, or sign up for a promotional offer (such as an early-access discount), including before you create an account.

Profile & preferences — Family size, children's ages, trip dates, park preferences, accessibility needs, dining preferences. Collected when you complete your planning profile.

Trip data — Saved itineraries, AI-generated plans, trip history, notes and modifications. Collected as you use planning features.

Usage data — Features used, screens viewed, session duration, search queries within the app. Collected automatically during each session.

Device information — Device type, operating system, app version, browser type. Collected automatically at app launch.

Payment information — Subscription status, billing date, payment method type (last 4 digits only). Full card data is handled exclusively by Stripe and never stored by Rope Drop.

Communications — Messages you send to our support team, feedback submissions.

Location (optional) — Coarse or precise location if you grant permission, used to surface relevant park and nearby recommendations. Only collected if you explicitly grant location permission. You may revoke this at any time in your device settings.

What we do not collect: We do not collect Social Security numbers, government ID numbers, financial account numbers, or biometric data.

3. How We Use Your Data

Providing the Service. Generating personalized AI trip plans, saving your itineraries, and delivering the core planning features of the app.

Improving the Service. Analyzing aggregate usage patterns to understand how the app is used, identify bugs, and prioritize new features. This analysis uses aggregated or anonymized data wherever possible.

Account management. Creating and maintaining your account, processing subscription billing through Stripe, sending receipts, and providing customer support.

Communications. Sending transactional emails (account confirmation, password reset, subscription receipts). If you opt in, sending marketing emails about new features and park updates. You may opt out of marketing communications at any time.

Marketing and advertising. Measuring how our advertising performs and reaching people who may be interested in Rope Drop, including through third-party advertising platforms. See "How We Share Your Data" and "Cookies & Tracking."

Safety and security. Detecting and preventing fraud, abuse, and unauthorized access.

Legal compliance. Complying with applicable laws, regulations, and legal process.

We do not sell your personal information for money. We do share limited information with advertising platforms to measure and target our own advertising, as described in "How We Share Your Data" and "Cookies & Tracking." Under some U.S. state privacy laws, this may be considered "sharing" for cross-context behavioral advertising. We do not otherwise rent or trade your personal data to third parties for their own marketing purposes.

4. How We Share Your Data

Service providers. We share data with trusted vendors who help us operate the Service — including our AI processing provider, cloud infrastructure, payment processing, analytics, and customer support platforms. These vendors are contractually required to use your data only to provide services to us.

Advertising partners. We use cookies and similar technologies provided by advertising platforms to measure our advertising and reach potential customers. Through these technologies, certain information about your activity on our site (such as pages viewed and actions taken) is shared with those platforms — including for visitors who did not arrive from them. Under California and some other state laws, this may be considered "sharing" for cross-context behavioral advertising.

AI processing. When you request a trip plan, your profile and preferences are sent to our AI processing provider. We have a data processing agreement with our AI provider. Your data is not used to train AI models.

Affiliate partners. When you click an affiliate link, the destination site may receive standard referral information. We do not share your name, email, or account data with affiliate partners.

Business transfers. If Series& I, LLC is acquired or merged, your information may be transferred as part of that transaction. We will notify you if this occurs.

Legal requirements. We may disclose your information if required by law, court order, or governmental authority.

With your consent. We may share information for any other purpose with your explicit consent.

5. Third-Party Services

Stripe — Payment processing for subscriptions. Rope Drop never stores full card data. stripe.com/privacy

AI Processing Services — Processes your trip planning inputs to generate personalized itineraries. Your data is not used for AI model training.

Cloud Infrastructure & Hosting — Stores account data and saved trips. Our platform provider is SOC 2 Type II and ISO 27001 certified and operates in US-based data centers.

Analytics Services — App and website usage analytics used to understand how the Service is used and to improve it.

Advertising & Measurement Providers — Advertising platforms whose cookies and similar technologies we use to measure our advertising and reach potential customers. These providers may receive information about your activity on our site.

Transactional Email Services — Delivers account confirmation, password reset, and other transactional communications.

6. Cookies & Tracking

Essential cookies. Required for the Service to function — including keeping you logged in and maintaining your session. These cannot be disabled without breaking the Service.

Analytics cookies. Used to understand how users interact with the app and website, in aggregate.

Advertising cookies. Used by us and our advertising partners to measure the performance of our advertising and to show relevant ads. Through these cookies, information about your activity on our site is shared with advertising platforms. You can limit these through your browser settings and, where available, opt-out preference signals.

Preference cookies. Store your in-app settings and preferences across sessions.

Location. If you grant location permission, we access your device's location services to provide in-park features. You may revoke location access at any time in your device settings without affecting your ability to use the core Service.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core Service.

7. Data Retention

Active accounts. We retain account data and saved trips for as long as your account is active.

Deleted accounts. When you delete your account, we delete or anonymize your personal information within 30 days, except where required for legal purposes (billing records are retained for 7 years per IRS requirements).

Usage and analytics data. Aggregated analytics data may be retained indefinitely as it does not identify individual users.

Location data. Precise location data is used in real time and is not stored beyond the active session unless you explicitly save a location-based plan.

Support communications. Messages to our support team are retained for 2 years.

8. Your Rights & Choices

To exercise any of these rights, contact us at legal@ropedropplan.ai. We will respond within 30 days.

Access — Request a copy of the personal information we hold about you.

Correction — Request that we correct inaccurate or incomplete personal information. Most profile data can be updated directly in the app.

Deletion — Request deletion of your account and personal information. You may also delete your account directly through app Settings. Deletion is processed within 30 days.

Data Access Request — Contact legal@ropedropplan.ai with the subject line "Data Request." We will provide your data in a readable format within 30 days.

Limit Use of Sensitive Personal Information — If you have granted precise location access, you may withdraw consent at any time through your device settings.

Opt Out of Marketing — Unsubscribe from marketing emails at any time using the unsubscribe link in any email.

Opt Out of Sharing for Advertising — You can limit the sharing of your information for advertising by managing cookies in your browser and, where available, by using an opt-out preference signal such as Global Privacy Control (GPC). See "Cookies & Tracking."

We do not sell your personal information for money. We do share certain information with advertising partners for cross-context behavioral advertising, which some state laws treat as "sharing." You can opt out of this sharing as described above.

9. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, you may not use the Service.

If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. Contact us at legal@ropedropplan.ai if you believe a child under 13 has provided us with personal information.

Users between 13 and 18 must have parental or guardian consent to use the Service.

10. California Residents (CCPA)

Right to Know. You may request that we disclose the categories of personal information we collect, the purposes for which we use it, and the categories of third parties with whom we share it.

Right to Delete. You may request deletion of your personal information, subject to certain exceptions.

Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.

Right to Opt Out of Sale or Sharing. We do not sell your personal information for money. We do share identifiers and internet activity with advertising partners for cross-context behavioral advertising, which California law treats as "sharing." You may opt out by managing cookies in your browser or by using an opt-out preference signal such as Global Privacy Control.

Shine the Light. California residents may request information about personal information shared with third parties for direct marketing. We do not share personal information for third-party direct marketing.

Categories collected (past 12 months): Identifiers (email, device ID); internet or network activity (usage data); commercial information (subscription status); geolocation data (only if location permission granted); inferences drawn from the above (trip preferences, family profile).

Categories shared for cross-context behavioral advertising (past 12 months): identifiers (such as device and online identifiers) and internet or network activity, shared with advertising partners.

11. International Users

The Service is operated in the United States and is intended for users located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

12. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS) and at rest; • Access controls limiting data access to authorized personnel; • Our platform infrastructure is SOC 2 Type II and ISO 27001 certified; • Passwords stored using one-way hashing — we cannot retrieve your password.

No method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated Policy with a revised "Last Updated" date and send an in-app notification or email to your account.

Your continued use of the Service after the effective date of the updated Policy constitutes your acceptance of the changes.

14. Contact & Data Requests

Privacy & Legal: legal@ropedropplan.ai (use subject "Privacy Request" or "Data Request") Support: support@ropedropplan.ai Response time: Within 30 days (45 days for California requests) Registered Agent: 8 The Green, Suite B, Dover, DE 19901 — Northwest Registered Agent Service, Inc.

© 2026 Series& I, LLC. All rights reserved. Rope Drop Plan™ is a trademark of Series& I, LLC.