Privacy Policy for CarpeDiem Search

Last updated: November 12, 2025

Welcome to CarpeDiem Search (the "Service"), available at https://carpediemsearch.app/ and operated for internal use by Carpe Diem Tours (referred to as "we", "us", or "our").

This Privacy Policy explains how we collect, use, and protect information when you use the Service, which provides access to our internal content via Vertex AI Search and requires Google login to sign in.

By using the Service, you agree to the collection and use of information in accordance with this Policy.

1. What the Service Does

CarpeDiem Search is an internal search tool used by Carpe Diem Tours employees and authorized users. It:

• Authenticates users via Google Sign-In
• Allows users to search company data via Vertex AI Search
• Logs certain technical information to ensure security, performance, and troubleshooting

The Service is not intended for public use and is typically only accessible to users with a company-approved Google account.

2. Information We Collect

2.1 Information You Provide

The Service itself does not collect any information that you manually input other than:

• Search queries you type into the search interface.

These queries may be logged for operational, debugging, security, and improvement purposes (see Section 3).

2.2 Information from Google Login

When you sign in with your Google account, we receive certain information from Google, such as:

• Your Google account ID
• Your name
• Your email address
• Your profile picture (if provided by Google)

We do not receive your password. Authentication is handled via Google's OAuth 2.0 mechanism.

We use this information to:

• Verify your identity
• Determine whether you are authorized to access the Service
• Personalize the interface (for example, showing your name or avatar)

2.3 Automatically Collected Information

When you use the Service, we may automatically collect certain technical information, including:

• IP address
• Browser type and version
• Device and operating system information
• Date and time of access
• Pages or API endpoints accessed
• Search queries (including any text you type into the search box)
• Error logs (if something goes wrong)

This information is primarily used for security, monitoring, auditing, and troubleshooting.

3. How We Use Your Information

We use the information described above for the following purposes:

• Authentication & Authorization
  • To verify that you are who you say you are and that you are allowed to use the Service.
• Provision of the Service
  • To allow you to perform searches over company content via Vertex AI Search.
• Security & Abuse Prevention
  • To monitor for suspicious activity, protect systems, and enforce access controls.
• Service Maintenance & Improvement
  • To debug issues, monitor performance, analyze usage patterns, and improve the Service.
• Compliance & Legal Obligations
  • To comply with internal policies, legal requirements, and audit obligations where applicable.

We do not sell your personal information to third parties.

4. Vertex AI Search and Company Data

CarpeDiem Search uses Google Cloud's Vertex AI Search to provide search results over internal company documents and data sources (e.g., documents, files, knowledge bases).

4.1 Data Indexed by Vertex AI Search

The documents and data indexed by Vertex AI Search are company-controlled data. They may occasionally contain personal information, but:

• This data is provided and controlled by Carpe Diem Tours, not by you via this Service directly.
• Access to search results is restricted according to your company/Google Workspace permissions where applicable.

4.2 Role of CarpeDiem Search

CarpeDiem Search primarily acts as an interface over the existing indexed data. It:

• Does not change the underlying access rights to company documents
• Only displays results that you are already permitted to see based on existing permissions

Any personal information contained in those documents is processed under Carpe Diem Tours' internal data and privacy practices.

5. Cookies and Similar Technologies

The Service may use cookies and or similar technologies for:

• Maintaining your session after login (so you don't have to re-authenticate on every page)
• Security features (such as CSRF protection or session integrity)

These cookies are typically strictly necessary for the functioning of the Service and are not used for advertising or third-party tracking.

You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.

6. Data Storage, Retention, and Security

6.1 Storage

Information collected through the Service (including logs) is generally stored in Google Cloud or similar secure infrastructure used by Carpe Diem Tours.

6.2 Retention

We retain your information for as long as necessary to:

• Provide and maintain the Service
• Meet legal, regulatory, or audit requirements
• Support security and operational needs

Log data (such as search queries and access logs) may be retained for a limited period and then deleted or anonymized, in accordance with our internal policies.

6.3 Security Measures

We implement reasonable technical and organizational measures to protect your information, including:

• Access controls and authentication
• Encryption in transit (HTTPS) and, where applicable, at rest
• Audit logging and monitoring

No system can be 100% secure, but we strive to protect your data against unauthorized access, modification, or disclosure.

7. Sharing of Information

We may share your information in the following limited circumstances:

• Within Carpe Diem Tours
  • With authorized administrators, IT staff, or other employees who need access to operate, maintain, or improve the Service.
• With Service Providers
  • With Google Cloud and related services (such as Vertex AI Search and Google Identity) that help us deliver the Service.
• For Legal or Security Reasons
  • If required by law, regulation, or legal process
  • To respond to lawful requests from public authorities
  • To investigate and protect against security threats, fraud, or abuse

We do not sell or rent your personal information to third-party marketers.

8. Your Choices and Rights

Because CarpeDiem Search is an internal company tool, most account and data management options are handled through your Google account and internal company processes.

Depending on your location and applicable law, you may have certain rights, such as:

• Access to your personal information
• Correction or update of inaccurate information
• Deletion of certain information
• Restriction or objection to certain processing activities

Requests related to these rights should generally be directed to your employer or internal administrator. You may also contact us using the details in Section 10.

9. Children's Privacy

The Service is intended for use by adult employees and authorized users of Carpe Diem Tours. It is not intended for children under the age of 16 (or the age of majority in your jurisdiction).

We do not knowingly collect personal information from children via this Service. If you believe that a child has used the Service, please contact us so we can take appropriate action.

10. Contact Information

If you have any questions about this Privacy Policy or how your data is handled, you can contact us at:

Carpe Diem Tours
Email: info@carpediemtours.com

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page.

We encourage you to review this Policy periodically to stay informed about how we are protecting your information.