Privacy Policy
Last updated June 20, 2026
MerryGo helps a group plan a Walt Disney World trip together. This policy explains what we collect, why, who helps us run the service, and the choices you have. We try to collect as little as possible and never sell your data. Questions? Email hello@merrygo.app.
Who we are
MerryGo is an independent trip-planning service operated by Jeff Surette, a sole proprietor based in Massachusetts, USA (“MerryGo,” “we,” “us”). We are the controller of the personal information described here. MerryGo is not affiliated with, endorsed by, or sponsored by The Walt Disney Company, and it never books anything on your behalf — it tells you what is worth booking and when the booking windows open, and you book through Disney's official channels.
Information we collect
We collect only what we need to build and coordinate your plan:
- Your account (organizers). Your email address, and an optional display name. We use email-based magic links to sign you in — we never ask for or store a password.
- Trip details you enter.Things like your trip name and dates, where you're staying, ticket type, and any private notes you add to plan around.
- Group members. The people on your trip, which you add: names and, optionally, a birthdate, height, thrill tolerance, dietary needs, and accessibility notes. This can include information about children, entered by the organizing adult — see Children's privacy below.
- Group responses. When you invite people, they can weigh in without creating an account. We record the name they give, an optional email, and their votes on the shortlist.
- Waitlist. If you join the waitlist — or, as an invited guest, leave your email to hear when MerryGo opens up — we store your email address so we can let you in and tell you when spots open. You can unsubscribe at any time.
- Technical basics. A secure sign-in cookie to keep you logged in, plus standard server logs (such as IP address and browser type) used to operate and protect the service.
How we use your information
- To build, show, and coordinate your trip plan and the group's input.
- To email you sign-in links, a waitlist confirmation, and a note when a spot opens for you.
- To operate, secure, debug, and improve the service.
- To respond to you when you contact us.
We do not sell your personal information, and we do not use it for third-party advertising.
Sensitive details (dietary & accessibility)
Dietary needs and accessibility notes are optional. They're stored with the trip and shown to the trip's organizer so the group can plan around them — MerryGo doesn't feed them directly into its recommendations today. Share only what you're comfortable with; you can edit or remove these at any time.
Children's privacy
MerryGo is an adults-only product (intended for users 18+). Children do not create accounts, cannot sign in, and never interact with MerryGo directly. A child only appears as a group member that an organizing adult chooses to add.
The only information that may be associated with a child is what that adult enters to tailor the plan: a name, and optionally a birthdate (used to derive age), a height, a thrill-comfort level, and any dietary needs or accessibility notes. We use these solely to check ride height minimums, derive ages for age-based dining prices, and show the details to the trip's organizer. We never collect a child's contact information, and we do not collect anything directly from children.
If you add information about another person — including a child — you confirm you have permission to do so, and you can edit or remove it at any time. If you believe a child has provided us information directly, contact us and we will delete it.
How information is shared
Within a trip, the details you enter are visible to you (the organizer) and, through your invite link, to the group you invite. Beyond that, we share data only with the service providers that help us run MerryGo, under their own security and privacy commitments:
- Vercel — application hosting.
- Neon — managed database.
- Resend — sending sign-in and notification emails.
- Cloudflare — domain and email routing.
We expect to add an AI service providerto help generate and tailor trip plans. When we do, we'll list it here and only share what's needed to produce your plan, under terms that prohibit using your data to train their models.
We may also disclose information if required by law, or to protect the rights, safety, and security of MerryGo and its users.
Cookies
We use a single essential cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.
Keeping & deleting your data
We keep your information for as long as your account or trip is active, and as needed to operate the service. You're in control:
- Deleting a trip removes its details, group members, and group responses.
- You can ask us to delete your account and associated data by emailing hello@merrygo.app.
- Guest invite links can be revoked at any time, which cuts off further access through that link.
- To leave the waitlist, email us and we'll remove your address.
Security
We protect your data with encryption in transit, passwordless sign-in, invite-only access, and reputable infrastructure providers. See our Security overview for details. No service can promise perfect security, but we work to keep your data safe.
Your choices & rights
You can access, correct, or delete the information in your account and trips at any time, or by emailing us. Depending on where you live, you may have additional rights over your personal data (see below); contact us and we'll honor applicable requests. We won't discriminate against you for exercising any of them.
California privacy rights (CCPA/CPRA)
If you're a California resident, you have the right to know what personal information we collect and how we use it (described above), to request access to or a copy of it, to request correction or deletion, and to not be discriminated against for exercising these rights.
We do not sell your personal information, and we do not shareit for cross-context behavioral advertising — so there's nothing to opt out of on that front. To make a request, email hello@merrygo.app; we may need to verify your identity before acting.
UK & EU rights (GDPR)
If you're in the UK or EEA, you have the rights to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. Our lawful bases are: performing the service you asked for (contract), your consent (e.g. joining the waitlist), and our legitimate interest in operating and securing MerryGo. The data controller is Jeff Surette (contact below).
To exercise any right, email hello@merrygo.app. You also have the right to lodge a complaint with your local data-protection authority.
Changes to this policy
We'll update this page if our practices change, and we'll revise the “last updated” date above. Significant changes will be communicated where appropriate.
Contact
Questions about privacy? Email hello@merrygo.app.