Privacy Policy
Last updated: 4 October 2026
1. Who we are
ExperienceRelay is tour booking software for tour operators: availability, reservations, channel listings and calendar sync in one dashboard. This policy covers experiencerelay.com (marketing site and operator dashboard) and the booking site operated with the same software at osakacastletours.com. Questions: admin@experiencerelay.com.
2. Information we collect
- Account information — when you sign in with Google, we receive your name and email address from Google. We store your display name, email address and account status.
- Content you enter — tours, availability, bookings, pricing and settings you create in the dashboard.
-
Google Calendar data — if you connect Google Calendar, we read and write
calendar events on your own Google Calendar to block busy tour times, and may create
per-tour calendars for you. The scopes we request are
calendar.eventsandcalendar.app.created. - Booking-site data — if you book a tour, we collect the details needed to run the booking (name, contact details, date, party size) and process payment through PayPal.
- Technical logs — security and error logs used to keep the service reliable.
3. How we use your information
- To provide the dashboard: availability, reservations and channel listings.
- To sync your calendar — keep your Google Calendar and tour schedule consistent, and to prevent double-booking. Google data is used only for these purposes.
- To send operational email (booking confirmations, cancellations, account notices).
- To protect the service against abuse and to fix errors.
4. Sharing
We share data only where a feature requires it:
- Channels you connect — when you link GetYourGuide, Viator or another channel, booking and availability data needed for that connection is sent to that channel.
- PayPal — payment processing for bookings and purchases.
- Service providers — hosting and infrastructure (Cloudflare), database (Supabase) and transactional email (Resend), under their respective terms.
We do not sell your data.
5. Storage and security
Google tokens are stored encrypted (AES-256-GCM). All traffic is served over HTTPS. Access to production data is restricted to the operators of the service.
6. Your choices
- Disconnect Google Calendar at any time in Settings — this deletes the tokens we hold for Google and stops all calendar access.
- Delete your account data — email admin@experiencerelay.com and we will remove your account and content, except records we must keep for legal or accounting reasons.
7. Retention
We keep account and content data while your account is active, and delete or anonymize it after a deletion request subject to the exception above. Google tokens are removed when you disconnect.
8. Google API data
Use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
9. Cookies
We use essential cookies for sign-in sessions only. There are no advertising or cross-site tracking cookies.
10. Changes
We may update this policy; the “Last updated” date above changes when we do. Material changes will be announced in the dashboard or by email.