Last updated: July 2026
1. Who we are
Toursby operates a marketplace connecting travelers with independent local guides and travel agencies. This policy explains how we handle personal data when you browse our site, create an account, book a tour, or partner with us as a guide or agency.
2. Information we collect
- Account data: name, email, password hash, role (traveler, partner, admin), profile photo, languages, location.
- Booking data: tour selections, dates, guest count, payment method, booking reference, notes, cancellation and dispute records.
- Payment data: transaction references, escrow status, bank transfer proof metadata, and gateway payment IDs. We do not store full card numbers on our servers when you pay via Midtrans or Xendit.
- Partner verification: KYC documents, agency registration details, interview records for approved guides.
- Communications: in-app chat messages, support emails, and notification preferences.
- Technical data: IP address, browser type, device information, and cookies required for login sessions and security.
3. How we use information
We use personal data to:
- create and manage accounts;
- process bookings and escrow-protected payments;
- connect travelers with the correct partner after a booking is confirmed;
- verify partners, prevent fraud, and resolve disputes;
- send transactional emails (booking confirmations, payment updates, payout notices);
- improve platform safety, performance, and customer support.
4. Sharing with third parties
We do not sell personal data. We share information only when necessary:
- Partners: after you book, your name, contact details, and trip information are shared with the assigned guide or agency to deliver the service.
- Payment processors: Midtrans, Xendit, and banks involved in transfers receive data required to process payments.
- Infrastructure providers: hosting, email, and analytics services under contractual confidentiality obligations.
- Legal requests: when required by applicable law or to protect the rights and safety of users.
5. Data retention
We retain booking, payment, and dispute records as long as needed for escrow settlement, tax and accounting obligations, and legal compliance. You may request account deletion; some records may be kept where retention is legally required.
6. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. Contact us to submit a request. We will respond within a reasonable timeframe.
7. Security
We use encryption in transit (HTTPS), access controls, and escrow workflows so funds are not released to partners until trips are completed according to platform rules. No online system is 100% secure; please use a strong password and keep login credentials confidential.
8. Contact
Privacy questions: [email protected] or Contact us.