Privacy Policy

1. Introduction

GuideAndMe ("we", "us", or "our") is an online platform that connects travelers with local tour guides.

This Privacy Policy explains what personal data we collect, how we use it, and what rights you have.

By using the Platform, you agree to the collection and use of your information in accordance with this Policy.

2. Information We Collect

We may collect the following types of information:

(1) Information You Provide

• Name
• Email address
• Password (stored as a securely hashed value)
• Profile information (photo, bio, city, languages, etc.)
• Booking-related information (dates, meeting location, notes, preferred payment method)
• Messages exchanged between users
• Reviews and ratings

(2) Automatically Collected Information

• IP address
• Browser type and device information
• Usage logs and activity data

We use session cookies and JWTs for authentication, and analytics cookies (e.g., Google Analytics) to understand usage patterns.

3. How We Use Your Information

We use your personal data for the following purposes:

• To create and manage user accounts
• To facilitate connections, messaging, and bookings between users
• To send transactional emails (e.g., booking notifications, email verification)
• To monitor security, detect errors, and improve the Platform
• To prevent fraud or misuse
• To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (International Users)

For users in the European Economic Area (EEA) and other regions, we process personal data based on:

• Performance of a contract (providing the service)
• Legitimate interests (service improvement, security)
• Legal obligations
• Your consent (where required)

5. Third-Party Services

We use the following third-party services to operate the Platform:

• Cloudinary — image storage and delivery
• Gmail / SMTP — transactional emails (e.g., verification, booking notifications)
• Sentry — error monitoring and debugging
• Prisma Accelerate / PostgreSQL — database hosting and management
• Vercel — hosting and infrastructure
• Google Analytics (GA4) — usage analytics (e.g., page views, session duration, device/browser info). IP addresses are anonymized.

Each provider processes data only as necessary to provide their services and in accordance with their own privacy policies.

6. Data Retention

We retain personal data for as long as your account is active.

Upon account deletion:

• Your data will be deleted or anonymized within 30 days.

However, we may retain certain information where necessary for:

• Legal compliance
• Dispute resolution
• Fraud prevention and security

7. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion
• Restrict processing
• Request data portability
• Object to processing

To exercise these rights, contact: admin@guideandme.com

EEA users also have the right to lodge a complaint with their local data protection authority.

8. Public Profile Information

Information you include in your public profile (such as name, bio, city, and photos) will be visible to other users.

Please do not include sensitive personal information such as:

• Home address
• Phone number
• Financial information

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience and analyze platform usage.

You can:

• Adjust your browser settings to block cookies
• Use tools such as the Google Analytics opt-out browser add-on

10. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including:

• Secure password hashing
• Access control
• Security monitoring

However, no method of transmission over the Internet is completely secure.

11. International Data Transfers

Your data may be processed in the Republic of Korea and other countries where our service providers operate.

We take reasonable steps to ensure your data is handled securely and in accordance with this Policy.

12. Children's Privacy

The Platform is not intended for users under the age of 18.

We do not knowingly collect personal data from children. If such data is identified, it will be promptly deleted.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

If significant changes are made, we will notify users via email.

14. Contact

admin@guideandme.com

We will respond within 30 days.