Privacy Policy

This Privacy Policy explains how Tourfecto ("we", "us") collects, uses, and protects information when you use our platform.

1. Information We Collect

Account information: company name, email address, phone number, and password (stored hashed, never in plain text).

Customer/review data you import or connect: when you connect Google Business Profile, TripAdvisor, or similar platforms, we process reviewer names, review text, ratings, and — where the source platform provides it — reviewer email or phone number. Sensitive fields such as email and phone are encrypted at rest.

CRM data: contact and lead information you or your team enter into the Platform's CRM module.

Usage data: login history, IP address, device/browser type, and general activity logs, used for account security (e.g., detecting suspicious logins) and service improvement.

Content you generate: AI prompts and generated content (articles, ad copy, replies) are processed to provide the feature and may be temporarily sent to our AI provider (Google Gemini) to generate a response.

Cookies: we use a minimal set of cookies — a session/authentication cookie, and a language-preference cookie (tf_lang) that remembers your chosen interface language. We do not use third-party advertising or tracking cookies.

2. How We Use Information

• To provide and operate the Platform's features (reputation management, CRM, analytics, AI content generation).
• To communicate with you about your account, billing, or support requests.
• To detect and prevent fraud, abuse, or security incidents.
• To improve the Platform based on aggregate, non-identifying usage patterns.

3. Third Parties We Share Data With

We share data only as needed to provide the Service, and only with your explicit connection/authorization for platform integrations:

• Google (Gemini API, Google Business Profile API): AI content generation and review syncing, when you connect a Google Business account.
• Meta (Marketing API): ad campaign data, only when you connect a Meta Ads account.
• TripAdvisor API: review syncing, when connected.
• Meta (WhatsApp Business Platform / Cloud API): to send and receive WhatsApp messages from the business's own WhatsApp Business Account, when the business connects it (see the WhatsApp section below).
• UltraMsg: an optional WhatsApp messaging provider, used only if a business chooses the QR-code connection instead of the official WhatsApp Business Platform.
• Payment processor: to process subscription payments. We do not store full payment card numbers ourselves.

We do not sell your data or your customers' data to third parties for advertising purposes.

4. Data Security

Sensitive personal fields (such as customer email and phone numbers collected via reviews) are encrypted at rest. Passwords are hashed and never stored in plain text. We restrict internal access to production data to authorized personnel only.

5. Data Retention

We retain account and customer data for as long as your account is active, or as needed to provide the Service. You may request deletion of your account and associated data at any time (see Section 6).

6. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. You can request a data export or account deletion via your account settings or by contacting us through the contact page. We aim to respond to verified requests within 30 days.

7. Children's Privacy

The Platform is intended for business use and is not directed at children. We do not knowingly collect personal data from individuals under 16.

8. International Data Transfers

Our infrastructure and some third-party processors (including our AI and hosting providers) may process data outside your country. We take reasonable steps to ensure such transfers are protected consistent with this Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will note the "Last updated" date above when changes are made; material changes will be communicated via the Platform or email.

10. Contact

For privacy questions or data requests, please use our contact page.

WhatsApp Business Platform

Tourfecto is a technology provider that lets a travel business connect its own WhatsApp Business Account through Meta's Embedded Signup. We only act on behalf of the business that connected the account.

What we access: the WhatsApp Business Account ID, phone number ID, display phone number and verified business name; message templates and their approval status; messages your customers send to the business number, messages the business sends from Tourfecto, and delivery/read statuses returned by Meta.

Why: to show conversations in the business's inbox, let the business (or its AI assistant, when the business enables it) reply, send booking reminders and review requests, and send marketing messages only to customers the business has recorded as having agreed to receive them.

Consent and opt-out: marketing messages require a recorded opt-in for each contact. A customer can stop marketing messages at any time by replying STOP (or "Cancel"); the contact is then marked as opted out and excluded from future campaigns automatically.

Storage and security: access tokens are encrypted at rest and never shown in the browser. Incoming webhook requests are accepted only with a valid Meta signature. Message data is stored for as long as the business keeps its Tourfecto account or until it is deleted.

AI replies: when the business turns on its AI assistant, message text is sent to our AI provider only to draft a reply for that conversation, and may be used to improve that same business's own reply suggestions.

What we do not do: we do not sell WhatsApp data, use it for advertising, share it with other businesses on the platform, or use it to train general-purpose AI models.

Disconnecting and deletion: the business can disconnect WhatsApp at any time from Chat Settings, which immediately removes the stored access token. To delete message history and contacts, follow our data deletion instructions.

Google User Data

Tourfecto lets a business connect its own Google accounts with Google OAuth. Each connection is optional, is requested only when the business opens the related feature, and can be revoked at any time. We only access the data needed for the feature the business connected:

• Google Sign-In (openid, email, profile): your name, email address and profile picture, to create your account and sign you in.
• Google Business Profile (business.manage): your business locations, profile information, reviews and review replies, posts and photos, to show and answer your reviews, keep your profile up to date and publish posts you approve.
• Google Ads (adwords): your Google Ads accounts, campaigns, ad groups, keywords, budgets, conversion actions and performance reports, to show your advertising results in your dashboard and, only when you approve it, create or pause campaigns and change budgets or bids. When a booking on your website comes from one of your campaigns, we send that conversion (with the guest's email or phone number hashed with SHA-256) to your own Google Ads account so your campaigns can measure and optimise bookings.
• Google Analytics (analytics.readonly): read-only reports for the property you choose (sessions, users, traffic sources, conversions), shown in your dashboard and reports. We never change your Analytics data.
• Google Search Console and Indexing (webmasters, indexing): search performance for your verified sites, and submitting your new or updated pages for indexing.
• YouTube (youtube, youtube.upload): your channel details, to publish short videos you create in Tourfecto to your own channel when you choose to.

Limited Use: Tourfecto's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features described above for the business that connected it. We do not sell it, use it for advertising, share it with other businesses on the platform, or let humans read it except with your permission, for security purposes, or to comply with the law.

AI: when you use an AI feature (for example drafting a review reply), the relevant text is sent to our AI provider only to produce that result for you. Google user data is not used to develop, improve or train generalized or non-personalized AI or machine-learning models.

Storage and security: OAuth tokens are encrypted at rest and are never shown in the browser. Data received from Google is kept while the connection is active and your account exists.

Revoking access and deletion: you can disconnect any Google service from the Integrations page in Tourfecto, or revoke access at myaccount.google.com/permissions. Disconnecting removes the stored tokens immediately. To delete the data we received from Google, follow our data deletion instructions.