StayGo Privacy Policy

At StayGo Pte. Ltd. ("StayGo", "we", "our", or "us"), we are committed to protecting the privacy of our tour operators, their customers, and visitors to our platform. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our services.

1. Information We Collect

1.1. Guest Information

When a guest books a tour through a StayGo microsite, we collect:

• Name
• Email address
• Phone number
• Booking details (selected tour, dates, price, etc.)

1.2. Tour Operator Information

When a tour operator registers with StayGo, we collect:

• Tour operator name
• Contact person name
• Email address and phone number
• Tour operator address and branding assets (logo, images)

1.3. Technical Information

• IP address and device information (for security and performance)
• No cookies or analytics tools are currently used on the StayGo platform.

2. How We Use Personal Data

We use the collected information to:

• Facilitate and manage tour bookings made through the StayGo platform
• Communicate booking confirmations, reminders, or cancellations
• Process secure online payments through Stripe
• Provide customer support and technical assistance
• Analyze aggregated, anonymized data to improve our services
• Send marketing or promotional communications (only where consent is given)

3. Legal Basis for Processing

We process data based on:

• Performance of a contract: to enable bookings and payments
• Legitimate interests: to operate and improve our platform and ensure security
• Consent: for marketing communications, where applicable
• Compliance with legal obligations: to maintain business and tax records

4. Data Sharing and Disclosure

StayGo only shares personal data with trusted third parties as necessary to provide our services:

We do not sell or rent personal data to any third parties.

5. Data Storage and Security

• StayGo's database is hosted on Supabase, which uses PostgreSQL managed on Amazon Web Services (AWS) infrastructure.
• All communication between users and the platform is encrypted using HTTPS (SSL/TLS).
• Data is protected by Row Level Security (RLS) policies in Supabase, ensuring user-specific access control.
• Access to databases and APIs is strictly limited to authorized StayGo personnel and developers.
• Supabase and AWS employ encryption at rest and in transit.
• Automated backups are managed by Supabase under AWS's secure infrastructure.

6. International Data Transfers

Because Supabase is a managed cloud service, personal data may be processed or stored on servers located outside Singapore.

In such cases, StayGo ensures that these service providers offer a level of data protection comparable to Singapore's PDPA.

7. Data Retention

Personal data is retained only as long as necessary for operational, legal, or accounting purposes, including:

• Managing bookings and customer support
• Resolving disputes and preventing fraud
• Complying with tax and record-keeping laws

When data is no longer required, it will be securely deleted or anonymized.

8. Marketing Communications

StayGo may send marketing or promotional communications about new tours, platform updates, or tour operator opportunities.

Recipients may opt out at any time by clicking the unsubscribe link in the email or contacting us directly.

9. Data Access and Rights

Under the Singapore Personal Data Protection Act (PDPA), individuals have the right to:

• Request access to their personal data
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing (subject to legal or contractual restrictions)
• Request deletion of personal data where applicable

Requests can be made via email to: contact@jaithaitravel.com

10. Data Breach and Protection

In the unlikely event of a data breach:

• StayGo will take immediate steps to contain and assess the situation.
• Affected individuals and partners will be notified promptly if there is a risk of significant harm.
• StayGo will maintain internal records of all security incidents and corrective actions taken.

11. Third-Party Links

StayGo microsites or dashboards may contain links to third-party websites (e.g., tour operator sites).

StayGo is not responsible for the privacy practices or content of these external websites.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations.

The latest version will always be published on our website. Continued use of the StayGo platform indicates acceptance of the updated policy.

13. Contact Us

For questions or requests regarding this Privacy Policy or your personal data, please contact:

StayGo Pte. Ltd.

Email: contact@jaithaitravel.com

[Insert company address in Singapore]