Privacy Policy

Effective 6 October 2026 RAFA ("we") keeps this policy under Article 30 of the Personal Information Protection Act of Korea to protect your personal information and to handle any concern about it promptly.

1. What we collect

Sign-in: when you sign in with a Google or Kakao account, we receive the name, email address and account identifier that service passes to us. When you sign in with a passkey we store only the public key your device created and its identifier; we never collect a password. Conversations: we store the text you type, the files you attach, the voice you record and its transcript. Details you give us in a conversation so we can act on a request, such as a name, a contact number or a date, are stored as part of that conversation. Automatically: using the service creates access records such as the time of access, the IP address and the browser, kept for security and for diagnosing faults. We do not store sensitive information such as passport numbers or payment card numbers. Information needed to confirm a booking is used for nothing else.

2. Why we process it

To identify you and keep you signed in; to provide the conversation service, including the AI's answers and the transcription of voice; to carry out the bookings, changes and cancellations you ask for and to tell you how they are going; to answer your enquiries; and to prevent abuse and keep the service running.

3. How long we keep it

When you delete your account or ask us to, we erase your personal information without delay. Records that Korean law requires us to keep for a set period, such as records of contracts, withdrawals and payments (five years), of consumer complaints and dispute handling (three years) and of access (three months), are kept for that period and then erased.

4. Processors and transfers abroad

To answer you and to transcribe your voice, what you write in a conversation is passed to AI model providers for processing. The service runs on Cloudflare's network and PlanetScale's database, so your personal information may be stored or processed on servers outside Korea. We hold every processor to the safe handling of your information by contract and oversight.

5. Sharing with third parties

We do not share your personal information with third parties, with two exceptions: the least a venue needs to honour a booking you asked for (the name, the party size, the date and time, a contact number), and what the law requires.

6. Your rights

You may at any time ask to see, correct, erase or stop the processing of your personal information. Do it on your account page while signed in, or write to the address below, and we will act without delay.

7. How we protect it

Every connection is encrypted with TLS. The people and systems that can reach personal information are kept to the fewest needed, and access is logged.

8. Privacy officer and contact

For any question, complaint or request about your personal information, write to contact@rafa.voyage. We answer and act without delay.

9. Changes to this policy

This policy may change while the service is in beta. When it does, we update the effective date and publish the new text on this page.