Privacy Policy

This policy explains what My TM Buddy (run by Incline DMA LLC) collects, why, and what we do with it.

What we collect

• Account details: your name, email and password (stored hashed).
• Tour data you enter: tour runs, stops, flights, hotels, trains and cars, show days, costs, expenses, notes, uploaded receipts and documents.
• Crew travel details you enter: legal names, dates of birth, Known Traveler / TSA PreCheck numbers, Global Entry or CLEAR numbers, airline loyalty numbers, seat preferences.
• Usage: which features you use and how many fare or hotel searches each artist runs (we meter searches). Basic technical logs (IP address, browser, timestamps) for security and troubleshooting.
• Payment: handled entirely by our payment processor (Stripe). We never see or store full card numbers.

How we use it

To run the Service: show your data to the people you've given access to, search fares and hotel rates, generate PDFs, bill the plan, and support you. We don't sell your data and we don't use it for advertising.

Who can see what

Within an artist, the manager can see everything. Members and viewers can see tour data but not other people's travel identifiers (legal name, DOB, KTN, Global Entry); each person can see their own. Travel identifiers are encrypted in the database with a key the app controls. Access rules are enforced in the database itself, not just in the app.

Third parties we rely on

• Supabase — database, authentication and file storage (US region).
• SerpAPI — fare and hotel searches; we send the route, dates and passenger count, never names.
• Stripe — payments.
• Apple — if you install the iOS or Mac app, Apple's own terms apply to the download.

Receipt reading happens on your device; receipt images are stored for you but aren't sent to any AI service unless a manager turns on an optional AI reading feature for that artist.

Keeping and deleting data

We keep your data while your account exists. Delete an artist or your account from the app and it's removed from our live systems right away and from backups within 30 days. Managers can remove any person's access instantly.

Security

Encrypted in transit (TLS) and at rest; travel identifiers additionally encrypted at the field level; row-level access rules in the database; least-privilege API keys. No system is perfect — if we learn of a breach affecting you we'll tell you promptly.

Your rights

You can export, correct or delete your data from the app, or email us. If you're in the EU/UK or California you have additional rights under GDPR/CCPA; email us and we'll honor them.

Children

My TM Buddy isn't for anyone under 18.

Changes and contact

We'll post changes here and note the date at the top. Questions: mytmbuddy@inclinedma.com. Incline DMA LLC, Phoenix, Arizona.