NomadLab ("we," "us," or "our") operates Hey Seorak (heyseorak.com), an English-language tourism guide and AI chatbot for the Seorak region of South Korea. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.
1. Information We Collect
1.1 Information You Provide
- Partner applications: Business name, contact person, phone number, KakaoTalk ID, and menu photos submitted through the partner application form at /for-business.
- Newsletter subscriptions: Email address provided when subscribing to our newsletter.
- Chat messages: Text messages and images you send to our AI chatbot for travel recommendations.
1.2 Information Collected Automatically
- Analytics data: We use self-hosted Plausible Analytics, a privacy-friendly analytics tool that does not use cookies and does not collect personal data. It records aggregate page views, referral sources, browser type, and country of origin without tracking individual users.
- Internal event tracking: We record anonymous usage events (e.g., menu views, QR scans, guide page visits) to improve our service. These events do not contain personally identifiable information.
- Server logs: Our hosting provider (Vercel) may collect standard server logs including IP addresses, request timestamps, and user-agent strings for security and operational purposes.
1.3 Information from Third-Party Services
- Google Maps: When you use map features, Google Maps may collect data in accordance with Google's Privacy Policy.
- Google Gemini AI: Chat messages are processed by Google's Gemini API. Messages are not used to train Google's models when accessed via the API. See Google AI Terms.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our website and services
- Process partner applications and communicate with business partners
- Generate AI-powered travel recommendations based on your chat inputs
- Analyze usage patterns to improve content and user experience
- Send newsletters to subscribers who have opted in
- Detect and prevent security threats or fraud
3. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share information with:
- Service providers: Vercel (hosting), Supabase (database), Google (AI and Maps APIs), Cloudflare (image storage) — only as necessary to operate the service.
- Legal requirements: When required by law, court order, or governmental authority.
4. Data Retention
- Chat messages: Conversation history is maintained only for the duration of your browser session and is not permanently stored.
- Analytics events: Anonymous usage data is retained for up to 12 months.
- Partner applications: Business information is retained for the duration of the partnership and for a reasonable period afterward.
- Newsletter subscriptions: Email addresses are retained until you unsubscribe.
5. Cookies
Hey Seorak does not use tracking cookies. We use Plausible Analytics, which is cookie-free and fully compliant with GDPR, CCPA, and PECR without requiring cookie consent banners.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent for data processing
- Request data portability
- Lodge a complaint with a supervisory authority
To exercise any of these rights, contact us at jojorang89@gmail.com.
7. International Data Transfers
Our services are hosted on global infrastructure (Vercel, Supabase, Google Cloud). Your data may be processed in countries outside your country of residence. We ensure appropriate safeguards are in place for international transfers.
8. Children's Privacy
Hey Seorak is not directed to children under the age of 14. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
9. Security
We implement industry-standard security measures to protect your information, including HTTPS encryption, Row-Level Security on our database, and secure API authentication. However, no method of transmission over the Internet is 100% secure.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the service after changes constitutes acceptance of the revised policy.
11. Contact Us
If you have questions about this Privacy Policy, contact us:
- Company: NomadLab
- Representative: Seungrae Cho (조승래)
- Email: jojorang89@gmail.com