Privacy Policy

1. Data we collect

• Account data — email address, password (stored hashed), contact name, company name, industry, country, website. If you sign in with Google, the email and profile name Google provides.
• Service usage — ad impression and click records, campaign activity, wallet top-ups and charges.
• Access data — country, device type, app or browser version, pages visited and time spent.
• Enquiries — company name, contact name, email, phone and message you submit through our forms.

Product recognition events generated when TravPick users photograph store shelves are shared with brands only in aggregate form (by product, brand and country) and do not identify individual users.

2. How we use it

• Providing the service, including sign-in and account management
• Running ad campaigns and usage-based billing
• Producing usage statistics and reports
• Responding to enquiries and sending service notices
• Preventing abuse and keeping the service reliable

3. Retention

We delete account data without delay when an account is closed, except where law requires retention — records of contracts and withdrawals (5 years), payment and supply records (5 years), and consumer complaint records (3 years) under Korean e-commerce law.

4. Processors

• Supabase — authentication and database hosting
• Vercel — web hosting

Data may be stored and processed outside your country. We require our processors to protect personal data to the standard set out here.

5. Sharing

We do not sell or share personal data with third parties, except where disclosure is required by law through lawful process.

6. Your rights

You may access, correct, delete or restrict processing of your personal data at any time — through the settings screen in the service, or by contacting us at the address below.

7. Cookies

We use authentication cookies to keep you signed in and collect aggregate usage statistics to improve the service. You can block cookies in your browser, but features that require sign-in will stop working.

8. Security

Passwords are stored in a form that cannot be reversed, and traffic is encrypted in transit (HTTPS). Row-level access control restricts each brand to its own data.

9. Company details and contact

• Company: RavenL
• Representative: LEE SUVIN
• Address: 1F, 13-3 Seongsui-ro 12-gil, Seongdong-gu, Seoul, Republic of Korea
• Business registration no.: 202-07-08965
• Mail-order sales registration no.: 2026-Seoul Seongdong-1241
• Filed with: Head of Seongdong-gu Office, Seoul
• Data protection officer: LEE SUVIN (CEO)
• Phone: 010-7661-4053
• Email: trav.ravenl@gmail.com

10. Changes

We announce changes in the service at least 7 days before they take effect, and at least 30 days ahead for changes that disadvantage users.