Uncompromising Data Sovereignty.

We recognize that the events managed on our platform by elite agencies involve some of the world's most private individuals, families, and corporations. Expedition Blanche operates on a principle of absolute data minimization and strict confidentiality. We do not sell data, we do not monetize your vendor lists, and we comply fully with global data protection frameworks including GDPR and CCPA. Your agency and client data remains your exclusive property.

Expedition Blanche operates this platform and acts as the controller of account data we collect directly from agencies, vendors, and private clients (e.g., subscription and login details). Where an agency uploads information about its own clients, events, and guests, the agency is the controller of that information and Expedition Blanche acts as the processor, handling it strictly on the agency's instructions.

Account data: name, email address, agency or firm name, role, access/invite codes, and authentication records.

Event data you enter: budgets, ledger entries, allocated expenses, guest records and dietary preferences, seating and floorplan layouts, timelines, run of show notes, documents, moodboard images, and vendor correspondence.

Transactional data: vendor contracts, payment schedules, milestone completions, payment balances, and subscription fee records.

Technical data: log and diagnostic information necessary to operate and secure the service.

We process personal data to provide the platform, authenticate users, facilitate agency workflows and budget tracking, administer subscriptions, send transactional notifications, provide support, and protect the service against abuse. We do not use your data to train general-purpose advertising or profiling systems, and we do not sell it.

Where GDPR applies, we rely on performance of a contract (delivering the platform), legitimate interests (security, service improvement, and fraud prevention), consent (for optional integrations such as calendar or mail connectors), and legal obligation (financial and tax record keeping).

Data is shared only as required to operate the service: with the planner, vendors, and clients explicitly connected to an engagement, and with infrastructure subprocessors that provide hosting, managed database and storage, transactional email delivery, and — where a user connects them — calendar and mail integrations. Subprocessors act under contract and may not use your data for their own purposes.

Connecting a Google account is entirely optional and is never required to use Expedition Blanche. If you choose to connect Google Calendar, we request only the access needed to operate the planning workspace: Google Calendar events (https://www.googleapis.com/auth/calendar.events) and read-only calendar access (https://www.googleapis.com/auth/calendar.readonly).

We use this Google Calendar data for one purpose only: to display your existing calendar entries alongside your event timeline, and to create or update the event milestones and run-of-show entries that you explicitly add inside the platform. We read event titles, dates, times, and locations solely to render them in your own workspace calendar view.

We do not use Google user data for advertising, we do not sell or transfer it, we do not use it to train generalized artificial-intelligence or machine-learning models, and no human reads it except where you have given explicit consent for support purposes, where it is necessary for security investigation or to comply with applicable law, or where the data has been aggregated and anonymized. Google Calendar data is never shared with vendors, other planners, or any third party beyond the infrastructure subprocessors that host the platform on our behalf.

Expedition Blanche’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your authorization credential is stored encrypted at rest, scoped to your individual user account, and is only ever used server-side for actions you initiate. Calendar data is retained only for as long as the connection remains active. You may disconnect at any time from the calendar module in your dashboard, which revokes and deletes the stored credential; you may also revoke access directly at myaccount.google.com/permissions. To request deletion of any Google-derived data we hold, write to admin@expeditionblanche.com.

We use strictly necessary cookies and local storage to keep you signed in and to remember interface preferences. We do not use advertising cookies or cross-site trackers.

Event and account records are retained for as long as the account is active, and thereafter only as required for financial, legal, or dispute-resolution purposes. On verified request, we delete or return your records; backups age out on a rolling schedule.

Subject to applicable law you may request access, correction, deletion, restriction, portability, or objection to processing, and — under CCPA — disclosure of the categories of data collected and the right to opt out of sale (we do not sell data). Submit requests to admin@expeditionblanche.com. Where an agency controls the data, we will refer the request to that agency and assist them in responding.

Our clients and vendors operate across regions, so data may be processed outside your country. Where required, transfers are made under appropriate safeguards such as Standard Contractual Clauses.

Platform data is encrypted in transit and at rest, access is governed by role-based controls, and privileged operations are executed server-side behind verified role checks. Further detail is available on our Security & Infrastructure page.

Material changes to this policy will be notified in-product or by email before taking effect. Questions may be directed to admin@expeditionblanche.com.