This Privacy Policy explains how Tourfecto ("we", "us") collects, uses, and protects information when you use our platform.
Account information: company name, email address, phone number, and password (stored hashed, never in plain text).
Customer/review data you import or connect: when you connect Google Business Profile, TripAdvisor, or similar platforms, we process reviewer names, review text, ratings, and — where the source platform provides it — reviewer email or phone number. Sensitive fields such as email and phone are encrypted at rest.
CRM data: contact and lead information you or your team enter into the Platform's CRM module.
Usage data: login history, IP address, device/browser type, and general activity logs, used for account security (e.g., detecting suspicious logins) and service improvement.
Content you generate: AI prompts and generated content (articles, ad copy, replies) are processed to provide the feature and may be temporarily sent to our AI provider (Google Gemini) to generate a response.
Cookies: we use a minimal set of cookies — a session/authentication cookie, and a language-preference cookie (tf_lang) that remembers your chosen interface language. We do not use third-party advertising or tracking cookies.
We share data only as needed to provide the Service, and only with your explicit connection/authorization for platform integrations:
We do not sell your data or your customers' data to third parties for advertising purposes.
Sensitive personal fields (such as customer email and phone numbers collected via reviews) are encrypted at rest. Passwords are hashed and never stored in plain text. We restrict internal access to production data to authorized personnel only.
We retain account and customer data for as long as your account is active, or as needed to provide the Service. You may request deletion of your account and associated data at any time (see Section 6).
Depending on your location, you may have rights to access, correct, export, or delete your personal data. You can request a data export or account deletion via your account settings or by contacting us through the contact page. We aim to respond to verified requests within 30 days.
The Platform is intended for business use and is not directed at children. We do not knowingly collect personal data from individuals under 16.
Our infrastructure and some third-party processors (including our AI and hosting providers) may process data outside your country. We take reasonable steps to ensure such transfers are protected consistent with this Policy.
We may update this Privacy Policy from time to time. We will note the "Last updated" date above when changes are made; material changes will be communicated via the Platform or email.
For privacy questions or data requests, please use our contact page.