Privacy Policy

TravelersMap Co., Ltd. (hereinafter, the “Company”) complies with applicable laws and regulations, including the Personal Information Protection Act and the Framework Act on Artificial Intelligence, and establishes and discloses this Privacy Policy to safely protect customers’ personal information and protect the rights and interests of data subjects.

1. Purposes of Collecting and Using Personal Information

The Company collects and uses personal information for the following purposes. The collected personal information will not be used for purposes other than those stated below.

Provision of Services

• Membership registration and account management
• Identity verification and provision of convenient login through social login integration (Google, Kakao)
• Operation of the reservation system and payment processing
• Receipt and handling of customer inquiries
• Provision of AI-based travel consultation services (including travel information and reservation support through conversational AI)
• Automatic recognition of passport information using AI (OCR)
• Voice recognition and real-time interpretation using AI

Conclusion and Performance of Travel Product Contracts

• Reservation, consultation, and guidance for travel products
• Airline ticket, accommodation, and local service reservations, and immigration-related work
• Travel itinerary management and customer support

Enrollment in Travel Insurance and Insurance Administration

• Enrollment in, changes to, and confirmation of travel insurance

Customer Management

• Identity verification and handling customer inquiries
• Handling complaints and responding to disputes

Improving AI Service Quality

• Summarizing AI consultations and extracting key facts (for the purpose of providing customized services to customers)
• Vectorizing conversation content and searching for similar queries (for the purpose of providing fast and accurate answers)

Marketing and Notices (with Optional Consent)

• Notices of new products and events
• Statistical analysis to improve services

2. Categories of Personal Information Collected

The Company may collect the following personal information during use of the Services.

1) When Registering for Membership (Registration by Mobile Phone Number)

• Mobile phone number, password

2) When Registering for Membership (Registration by Social Login)

• Google login: Name, email address, profile photo, unique Google identifier (Google ID)
• Kakao login: Nickname, email address (optional), profile photo, unique Kakao identifier (Kakao ID)
• Mobile phone verification is additionally required for registration by social login.

3) When Reserving or Consulting About a Travel Product

• Name (in Korean/English), date of birth, gender
• Contact information (mobile phone number), email address

4) For Travel Performance and Immigration-Related Work

• Passport information (name in English, passport number, passport expiration date, nationality)

5) When Enrolling in Travel Insurance

• Resident registration number (processed solely for the purpose of enrolling in insurance)

6) Automatically Collected During Use of the Services

• Access logs, access IP address, service usage records
• Browser information (User-Agent), cookies and advertising identifiers (Meta Pixel cookies _fbp and _fbc, and the advertising click identifier fbclid), visited page URLs, and cruise planner usage records (opening the planner, first response, and itinerary completion)

7) When Using AI Consultation Services

• Conversation content (text messages)
• Voice data (when voice input is used, the original voice is deleted immediately after conversion to text)
• Passport images (the original image is deleted immediately after OCR processing; only text information is retained)

※ The Company does not collect sensitive information such as race, ideology, political views, or health information.

3. Methods of Collecting Personal Information

The Company collects personal information by the following methods:

• Directly provided by the User during membership registration, use of the Services, or customer consultations
• Automatically collected through social login integration (Google, Kakao), with the User’s consent
• Text, voice, and images entered by the User while using AI consultation services
• Information automatically generated and collected during use of the Services

4. Retention and Use Period for Personal Information

The Company destroys personal information without delay after the purposes of collection and use have been achieved.
However, if retention is required under applicable laws and regulations, the information will be retained for the period prescribed by those laws and regulations.

1) Resident Registration Number

• Processed solely for the purpose of enrolling in travel insurance
• Destroyed without delay after enrollment in and confirmation of insurance are complete and the information is no longer needed (at the time of departure)

2) Passport Information

• Retained to perform the travel contract
• Destroyed without delay after travel ends and related work (such as settlement and dispute response) is completed

3) Social Login Information

• The unique social identifier (Google ID, Kakao ID) is deleted immediately when social integration is disconnected
• All social login information is deleted immediately upon membership withdrawal

4) Data Related to AI Services

• Voice data: Destroyed immediately upon completion of conversion to text (the original voice is not retained)
• Passport images: Destroyed immediately upon completion of OCR processing (only text information is retained for the period required to perform the travel contract)
• AI conversation logs: Retained during the period of service provision and destroyed upon membership withdrawal or termination of the Services
• AI conversation summaries and vector data: Destroyed upon membership withdrawal

5) Other Personal Information

• Destroyed after the travel contract ends and any retention period required by applicable laws and regulations expires

5. Provision of Personal Information to Third Parties

As a rule, the Company does not provide customers’ personal information externally.
However, where necessary to perform a travel contract and provide the Services, it may provide the information as follows, subject to the customer’s consent or applicable laws and regulations.

• Airlines, accommodation providers, and local partner companies: Travel reservations and provision of services
• Insurance companies: Enrollment in travel insurance and performance of insurance contracts

The personal information provided is limited to the minimum necessary scope and is destroyed after the purpose of provision is achieved.

※ Regarding social login: The Company only receives information about the User from Google and Kakao and does not provide the User’s personal information to Google or Kakao.

6. Outsourcing of Personal Information Processing

The Company outsources some personal information processing to external professional providers to ensure smooth provision of the Services. When outsourcing, the Company manages and supervises the providers so that personal information is safely managed in accordance with applicable laws and regulations.

※ The AI services of the above providers are used through APIs, and transmitted data is not used to train AI models.
※ Items transferred to Meta Platforms, Inc. are visited page URLs, cruise planner usage records (opening the planner, first response, and itinerary completion), cookies and advertising identifiers (_fbp, _fbc, and fbclid), access IP address, and browser information. For members, a one-way hashed (SHA-256) value of their mobile phone number is also transferred. Transfers take place when the Services are used, over telecommunications networks (through the web pixel script and transmissions from the Company’s server to the Conversions API). Meta retains and processes the data in accordance with the Meta Data Policy (Meta cookies are retained for up to 90 days).
※ Users may refuse the collection and use of this information by blocking cookies in their browser settings, turning off “Activity information from ad partners” in Meta Ad Preferences (facebook.com/adpreferences), or resetting or restricting their device’s advertising identifier. Refusing does not restrict use of the Services.
※ If an entrusted provider changes, advance notice will be given through this Policy.

7. Procedures and Methods for Destroying Personal Information

Destruction Procedures

Personal information for which the purposes of collection and use have been achieved is destroyed in accordance with internal policies and applicable laws and regulations.

Destruction Methods

• Electronic files: Permanently deleted by an unrecoverable method
• Paper documents: Shredded or incinerated

8. Measures to Ensure the Security of Personal Information

The Company takes the following measures to protect personal information:

• Encryption of personal information and restriction of access rights
• Access controls for personal information processing systems
• Application of the OAuth 2.0 standard protocol for social login integration (passwords are not collected directly)
• Encryption of personal information transmission channels when using AI services (TLS 1.2 or higher)
• Execution of data processing agreements (DPAs) with AI service providers
• Operation of a process to immediately delete passport images and voice data after processing
• Establishment of internal management plans and regular inspections

9. Automated Decision-Making

1) Scope of AI Use

The Company uses AI (artificial intelligence) in the following ways while providing the Services:

• Travel consultation: AI provides travel information through conversations and supports reservations. Final reservation confirmation and payment are subject to the User’s direct confirmation of intent.
• Passport information recognition: AI analyzes passport images and automatically extracts text information. The User may directly verify and correct the extracted information.
• Real-time interpretation: AI recognizes speech and provides multilingual interpretation.
• Content generation: AI generates travel-related content such as blogs and images.

2) User Rights

With respect to automated processing using AI, the User may exercise the following rights:

• The right to request an explanation of results processed by AI
• The right to object to AI processing results and request human intervention (review by a staff member)
• The right to indicate refusal of personal information processing through AI

These rights may be exercised by requesting connection to a staff member in the AI consultation screen or by writing, telephone, or email to the Personal Information Protection Officer below.

10. Rights of Data Subjects

A data subject may exercise the following rights against the Company at any time:

• Request access to, correction of, or deletion of personal information
• Request suspension of personal information processing
• Request disconnection of social login integration
• Request an explanation of, or object to, automated processing using AI
• Refuse personal information processing through AI

These rights may be exercised in writing, by telephone, by email, or by other means, and the Company shall take action without delay.

11. Personal Information Protection Officer

The Company has appointed a Personal Information Protection Officer to oversee matters related to personal information protection.

• Organization: TravelersMap Co., Ltd.
• Person in charge: 변형석 (Chief Executive Officer)
• Contact: [email protected] / 02-2068-2799

12. Changes to the Privacy Policy

This Privacy Policy may be changed due to changes in laws and regulations or Company policy. If changed, advance notice will be given through the service screen.

---

Effective date: November 4, 2026
Previous effective dates: April 12, 2026 and March 3, 2026