Privacy and Cookies Statement

1. Introduction

TourOpero Inc. ("TourOpero", "we", "us", or "our") owns and operates the TourOpero Discover service, marketplace platform, applications, and APIs that enable users to research, compare, coordinate, and book travel experiences worldwide (collectively, our "Services").

We are committed to maintaining the highest level of trust and security. This Privacy and Cookies Statement ("Statement") outlines how we obtain, use, process, and protect your personal data when you visit our website, mobile application, or use any integrated operator widgets. By accessing or using our Services, you acknowledge that you have read and understood the terms of this Statement.

2. Information We Collect

We collect information directly from you, automatically through your interaction with our website, and from third-party partners.

Directly Provided Data

• Biographical & Contact Identifiers: Name, email address, phone number, physical address, and passenger profile details.
• Billing & Financial Information: Payment card numbers, bank account numbers (collected securely via Stripe Connect), billing address, and transaction history.
• Verification Credentials: Login accounts, passwords, and security tokens for account authentication.
• User-Generated Content: Reviews, ratings, photographs, custom ride requests, routes, and chat correspondence with customer support.

Automatically Collected Data

• Device Information: IP address, device operating system, browser type, preferred language settings, and crash logs.
• Activity Logs: Navigational behavior, search parameters, pages viewed, time spent on routes, and checkout conversion tracking.
• Geolocation Data: Precise GPS coordinates (where authorized via browser or device permissions) or estimated location inferred from IP address.

3. Cookies & Tracking Technologies

To optimize platform operations, we utilize browser storage, cookies, and local database storage. While we do not deploy external ad-tracking cookies for selling your personal profile, our technology stack requires functional storage mechanisms:

You may disable cookies and local storage through your browser settings. However, doing so may restrict your ability to log in, process transactions, or view departures.

4. How We Use Your Information

We process your personal information for specific business purposes:

• Fulfilling Bookings: To request, coordinate, and process reservations with local tour operators.
• Payment Facilitation: To process payments, handle refunds, split commissions, and verify merchant status via Stripe.
• Communication: To send email confirmations, push notifications, and dispatch alerts regarding scheduling changes.
• Network Optimization: To match custom request routes with local fleet routes, improving overall transport utilization.
• Legal Compliance: To prevent money laundering, detect billing fraud, resolve transaction disputes, and comply with tax laws.

5. Information Sharing

We do not sell your personal information to third parties for marketing purposes. We share information only under these circumstances:

• Local Tour Operators: Once a reservation is made, we share passenger names, contact numbers, and route preferences with the specific operator conducting the tour to facilitate the trip.
• Service Providers: We share details with trusted companies assisting in our operations (e.g., Stripe for payment verification, Firebase for authentication).
• B2B Logistics Partners: Where travelers cross-book routes that involve multiple transport networks, transit metadata is shared to align logistics.
• Corporate Restructuring: In connection with a merger, consolidation, sale of assets, or bankruptcy, user databases may be transferred.
• Legal Disclosures: If required by court orders, search warrants, or subpoena to defend our rights or protect customer safety.

6. International Data Transfers

TourOpero is headquartered in North America. By using our Services, you understand that your personal data will be transferred and stored in facilities located in the United States and Canada.

For transfers from the European Economic Area ("EEA") or the United Kingdom ("UK") to countries not deemed to have adequate data protections, we enforce Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring equivalent protections.

7. Canadian, EU, UK & Global Privacy Rights

We process personal information in compliance with Canadian privacy legislation, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA), as well as international frameworks (such as the GDPR):

• Right of Access & Correction: You have the right to request access to and correction of the personal information we hold about you under PIPEDA and Alberta's PIPA.
• Right to Withdraw Consent: You may withdraw your consent for data collection and processing at any time, subject to legal or contractual restrictions and reasonable notice.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where processing is no longer necessary (applicable under GDPR and modern privacy standards).
• Right to Restrict or Object: Limit how we process your information or object to processing based on our legitimate interests.
• Right to Portability: Obtain a structured, machine-readable export of your personal information to transfer to another service.

To exercise these rights or to contact our Privacy Compliance Officer regarding our compliance with Alberta's PIPA and Canadian laws, please contact us at compliance@touropero.com. We will respond within 30 days of receiving your request.

8. United States Consumer Privacy Rights

Depending on your state of residence (including California, Colorado, Virginia, and others), you may possess specific rights under state privacy statutes (e.g., CCPA/CPRA):

• Right to Know: Discover what categories of personal info we collect, the commercial source, and third-party disclosure recipients.
• Right to Opt-Out: Request that we do not "sell" or "share" your personal data for cross-context behavioral advertising. You can signal this preference using the Global Privacy Control (GPC).
• Non-Discrimination: We will never deny services, charge different rates, or degrade service quality because you exercise state privacy rights.

9. Security and Data Retention

We implement robust physical, technical, and administrative safeguards to protect personal data from unauthorized access, modification, or exposure. Data transmissions utilize Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption.

We retain your information as long as your account is active, or as necessary to fulfill bookings, comply with accounting rules, resolve chargeback disputes, and comply with state and federal legal obligations.

10. Contact Information & Policy Updates

We may revise this Privacy and Cookies Statement from time to time. If we make material changes, we will update the effective date above and post a prominent alert on our website.

If you have questions, complaints, or compliance concerns regarding this Statement, please email us or contact us at: