Privacy Policy

​Effective December 2, 2024

Alleysa is committed to respecting and protecting your privacy. This Privacy Policy describes how we collect, use, and share your personal data when you use our services via the Alleysa platform (the "Platform") accessible through our website, mobile applications, and related services. By using our services, you consent to the practices outlined in this policy.

1. Personal Information We Collect

We collect the following types of personal information from users of the Alleysa Platform:

1.1 Information You Provide Us

• Account and Profile Information: When you create an account or use services as a guest, host, or guide, we collect your name, email address,date of birth, phone number, postal address, and profile picture. For verification purposes, you may also be asked to provide a government-issued ID, a selfie, or other identity verification details.

• Booking and Transaction Data: If you book a property, car rental, or guide service, we collect payment details, booking information, and related communication.

• Additional Information: You may provide additional details for your account or profile, such as your preferences, occupation, biography, interests, or any other details you choose to share.

1.2 Information We Collect Automatically

• Usage Data: We collect information about how you interact with the Platform, including the pages you visit, the services you use, your booking history, and your location.

• Device Data: We collect information about the devices you use to access the Platform, such as IP address, browser type, device type, and operating system.

• Location Data: We collect your approximate or precise location to enhance the services you use, such as searching for nearby listings or guide services.

1.3 Information We Collect from Third Parties

• Third-Party Integrations: If you use third-party services to log into the Platform or link your account (e.g., Google, Facebook), we may receive personal data from these services in accordance with your privacy settings.

• Verification Services: We may collect data from third-party background check services, especially for users who act as hosts or guides, to verify identity and ensure safety.

• Insurance Providers: We may receive information regarding insurance claims for vehicle rentals or accommodation services.

2. How We Use the Information We Collect

We use the information we collect for the following purposes:

2.1 Provide and Improve Our Services

• To facilitate your bookings and transactions for properties, vehicles, or guide services.

• To enhance your experience by personalizing content and recommendations.

• To provide customer support and assist with issues, disputes, and queries.

2.2 Security and Compliance

• To verify your identity and protect against fraud or unauthorized activity.

• To ensure that hosts, guests, and guides are complying with the Platform’s policies and safety standards.

• To meet legal and regulatory obligations, including background checks for certain users (hosts, guides).

2.3 Marketing and Communication

• To send promotional messages, offers, and updates, if you have opted in for such communications.

• To analyze your usage and preferences to improve marketing campaigns and tailor content relevant to you.

2.4 Payments and Transactions

• To process payments for bookings, services, or any fees associated with using the Platform.

• To manage refunds, cancellations, and booking modifications as per our cancellation policy.

3. Sharing and Disclosure of Personal Information

We may share your personal information in the following circumstances:

3.1 With Other Users

• Hosts and Guests: We may share your information (e.g., name, profile picture, booking details) with other users of the Platform as needed to facilitate bookings, guide services, and other interactions.

• Guides and Guests: We may share relevant information with local guides and guests, such as contact details, itinerary preferences, or payment details to ensure seamless bookings.

3.2 With Third-Party Service Providers

We may share your personal information with trusted third parties who help us deliver services to you, including but not limited to:

• Payment Processors: We use services like Stripe to process payments for bookings, services, or any fees associated with using the Platform. Stripe processes payment information on our behalf. Please review Stripe’s Privacy Policy for more information on how your payment data is handled. You can learn more about Stripe’s privacy practices here.

• Analytics Services: We use Google Analytics to help us understand how our users interact with the Platform. Google Analytics may collect information such as IP addresses, device information, and usage data to analyze Platform usage patterns. Please refer to Google’s Privacy Policy for more information on how your data is handled by Google Analytics. You can learn more about Google Analytics here.

• Security Services: We use Google reCAPTCHA to protect our Platform from fraud and abuse. When you interact with reCAPTCHA, Google may collect certain personal data, such as your IP address and browser information. Please review Google’s Privacy Policy for more details on how Google processes data through reCAPTCHA. You can learn more about Google reCAPTCHA here.

• Location Services: We use Google Location Services to collect your location data (either precise or approximate) in order to offer location-based features and services, such as searching for nearby listings, cars, or guides. Google may collect information about your location through your device’s GPS, Wi-Fi, or IP address. For more information on how Google processes location data, please refer to their Privacy Policy. You can learn more about Google Location Services here.

Each of these third parties has their own privacy practices. We encourage you to review their privacy policies to understand how your personal data is processed by them.

3.3 Legal and Safety Purposes

• We may disclose personal information to comply with legal obligations or respond to lawful requests, including from governmental authorities or law enforcement agencies.

3.4 Business Transfers

• In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the new owner or entity.

4. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal data, including:

4.1 Access, Correction, and Deletion

• You can access, correct, or update your personal information through your account settings.

• You may request the deletion of your personal information, subject to applicable laws and retention policies.

4.2 Opt-Out of Marketing

• You can opt-out of receiving promotional messages from us at any time by clicking "unsubscribe" in our emails or adjusting your communication preferences in your account settings.

4.3 Data Portability and Restrictions

• You may request a copy of your personal data in a commonly used format or request that we transfer it to another service provider, where applicable.

5. Security

We implement technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, or misuse. However, no system is completely secure, and we cannot guarantee the security of your personal information.

6. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated Privacy Policy on the Platform and indicate the date it was last revised. If we make significant changes, we will notify you by email or through the Platform.

7. Contact Information

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Alleysa Support Team
Email: support@alleysa.com
Phone: +1 (604) 418-8320

8. Definitions

• Personal Data: Any information that can be used to identify an individual, including but not limited to name, contact details, payment information, and usage data.

• Platform: The online services provided by Alleysa, including the website, mobile applications, and related services.

This Privacy Policy provides an overview of the types of data we collect and how it is used, shared, and protected within the context of Alleysa’s services. Feel free to adjust the details according to your company’s specific needs or legal obligations.

9. General Data Protection Regulation (GDPR) for Users in the EU

If you are a resident of the European Union (EU), the processing of your personal data is governed by the General Data Protection Regulation (GDPR). The GDPR provides you with certain rights regarding your personal data, which are outlined below:

9.1 Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights:

• Right to Access: You have the right to request access to the personal data we hold about you, including information about the purposes of processing, the categories of personal data, and the recipients of the data.

• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

• Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent on which the processing is based.

• Right to Restrict Processing: You have the right to request the restriction of processing of your personal data in certain situations, such as when you contest the accuracy of the data or when you have objected to processing and we are considering your objection.

• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller.

• Right to Object: You have the right to object to the processing of your personal data under certain conditions, such as if the processing is based on legitimate interests or for direct marketing purposes.

• Right to Withdraw Consent: If you have given us consent to process your personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

9.2 How to Exercise Your GDPR Rights

To exercise any of the above rights, please contact us at support@alleysa.com. We will respond to your request within one month, although this period may be extended by two further months in complex cases.

9.3 Data Protection Authority

If you believe we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with a data protection authority. In the EU, this would be the relevant supervisory authority in your country of residence.

10. California Consumer Privacy Act (CCPA) for Users in the U.S.

If you are a resident of California, the processing of your personal data is governed by the California Consumer Privacy Act (CCPA). The CCPA provides you with specific rights regarding your personal information, which are outlined below:

10.1 Your Rights Under the CCPA

As a California resident, you have the following rights:

• Right to Know: You have the right to request information about the personal data we have collected about you, including the categories of personal data, the purposes for which we use the data, and the sources from which we collected the data.

• Right to Delete: You have the right to request the deletion of your personal data, subject to certain exceptions (e.g., if the data is required for legal compliance or contractual purposes).

• Right to Opt-Out of Sale of Personal Data: You have the right to opt-out of the sale of your personal data. Alleysa does not sell your personal data to third parties, but we may share information with third parties for advertising and marketing purposes. If this changes in the future, we will update our policy and give you the ability to opt-out.

• Right to Non-Discrimination: You have the right not to be discriminated against for exercising your rights under the CCPA. We will not deny you services, charge you different prices, or provide a different level of service based on your exercise of these rights.

• Right to Access: You have the right to request a copy of the personal data we have collected about you in a portable and readily usable format.

10.2 How to Exercise Your CCPA Rights

To exercise any of the above rights, please contact us at support@alleysa.com. We will verify your request and respond within 45 days, as required by the CCPA. If necessary, we may extend this period by another 45 days, and we will notify you of the extension.

10.3 Information We Collect

Under the CCPA, we are required to disclose the categories of personal data we collect. Please refer to Section 1 of this Privacy Policy for detailed information on the categories of personal data we collect.

10.4 Do Not Track Signals

The CCPA also requires us to disclose how we respond to "Do Not Track" signals. Currently, we do not honor Do Not Track signals. For more information on managing your preferences and cookies, please refer to Section 12 (Cookies, Web Beacons, and Similar Technologies).