Privacy Policy

1. Introduction

Orkney Corp. ("we," "us," or "our"), a company registered in Singapore, operates the PrivéTag platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using PrivéTag, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Guest Information

When you use PrivéTag as a hotel guest, we collect:

• Name and nationality
• Room number and hotel information
• Check-in and check-out dates
• Language preferences
• Activity preferences and booking history

2.2 AI Interaction Data

When you interact with our AI concierge, we collect:

• Chat messages and conversation history
• AI-generated recommendations and your responses
• Feedback on recommendations

2.3 Booking Information

When you make bookings through our Service:

• Activity and tour booking details
• Date and time preferences
• Number of participants
• Special requests or requirements

2.4 Hotel Administrator Information

For hotel staff using our platform:

• Name and email address
• Hotel affiliation and role
• Authentication credentials (managed by Clerk)

3. How We Use Your Information

We use the collected information to:

• Provide personalized activity recommendations
• Process and manage your bookings
• Improve our AI recommendation algorithms
• Communicate with you about your bookings and inquiries
• Generate analytics for hotel partners (anonymized and aggregated)
• Ensure platform security and prevent fraud
• Comply with legal obligations

4. Data Sharing and Third Parties

We share your information with the following categories of third parties:

4.1 Service Providers

• Clerk - Authentication and identity management
• Supabase - Database hosting (Singapore region)
• OpenAI & Google Gemini - AI-powered recommendations and translations
• Cloudflare - Content delivery and storage
• Airwallex - Payment processing

4.2 Activity Partners

When you book activities, we share necessary booking information with our activity partners, including Klook, Viator, GetYourGuide, and KKday, to fulfill your reservations.

4.3 Hotel Partners

Your hotel may access your activity preferences and booking history to provide better service during your stay. This access is limited to the hotel where you are registered as a guest.

5. Data Retention

We retain your personal data for 2 years from your last interaction with our Service, unless a longer retention period is required by law. After this period, your data will be securely deleted or anonymized.

Guest access tokens automatically expire 30 days after check-out. However, your data may be retained for the full retention period for analytics and service improvement purposes.

6. Data Security

We implement appropriate security measures to protect your data:

• AES-256 encryption for guest access tokens
• TLS encryption for all data in transit
• Row-level security (RLS) for data isolation between hotels
• Regular security audits and monitoring
• Secure authentication through Clerk

7. Your Rights

You have the right to:

• Access - Request a copy of your personal data
• Rectification - Request correction of inaccurate data
• Erasure - Request deletion of your personal data
• Portability - Request your data in a portable format
• Objection - Object to certain processing of your data

To exercise these rights, please contact us at info@privetag.com.

8. Cookies and Tracking

We use essential cookies to maintain your session and provide core functionality. We do not use advertising or tracking cookies. Analytics data is collected in an anonymized and aggregated form.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: