Privacy policy

Last updated: 2026-05-08 · Effective 2026

Plain-English summary

FindToursIn is a marketplace, not a tour operator. We collect the minimum personal data needed to run the platform: account credentials, agency contact details, billing information, and basic analytics. We don\'t sell your data and we don\'t share it with advertisers. Travellers booking a tour deal directly with the agency listed on the page; we don\'t see the booking or payment.

1. Who we are

FindToursIn is a tour-discovery marketplace operated from Greece, available at https://www.findtoursin.com. Throughout this policy, "we", "us", and "FindToursIn" refer to the operator of this website.

2. What data we collect

We collect data only where we have a clear purpose for using it. The categories below describe everything FindToursIn holds about you.

2.1 Account data (agencies)

When an agency registers, we store an email address, a hashed password, the agency name, contact phone, country, business description, optional logo, and the subscription plan selected. Travellers do not need to register to browse tours.

2.2 Listing data

Agencies upload tour information that becomes public on the site: tour title, description, price, duration, departure city, photos, category. Listings are visible to anyone who visits the page.

2.3 Payment data

Agency subscription payments are processed by Stripe. We never see or store full card numbers; we receive only a customer ID and an amount. Stripe\'s privacy policy applies to the card data they process.

2.4 Analytics

We use Google Analytics 4 to count page views and measure how the site performs. The analytics signal is pseudonymous: a visitor ID, the page visited, the referring URL, and aggregated location data (country and city only). We do not enable Google\'s advertising features and we do not use data for retargeting.

2.5 Server logs

Our hosting provider (Vercel) keeps standard request logs (IP address, request path, response status, user agent) for security and abuse-prevention purposes. Logs are retained for 30 days.

3. Why we use it

  • To operate the platform — let agencies log in, edit listings, manage subscriptions.
  • To serve listings to travellers.
  • To take subscription payments.
  • To detect and block spam, scraping, or abusive behaviour.
  • To produce aggregate, non-identifying statistics about the platform.

We do not use personal data for advertising, profiling, or sale to third parties.

4. Who we share it with

The minimum number of processors required to run the service:

  • Supabase — database and authentication. Hosted on AWS in Europe.
  • Vercel — web hosting and edge network.
  • Stripe — agency subscription payments.
  • Google Analytics 4 — analytics, with IP truncation enabled.
  • Resend — transactional email (account verification, password reset, agency notifications).

We do not sell personal data, share it with advertisers, or use it to train machine-learning models.

5. How long we keep it

  • Active agency accounts: as long as the account is active.
  • Closed agency accounts: deleted within 90 days of closure, except where legal retention applies (e.g. invoices, kept for 7 years for tax purposes).
  • Server logs: 30 days.
  • Analytics: aggregated indefinitely; per-visitor data 14 months (GA4 default).

6. Your rights (GDPR)

If you live in the EU, UK, or other GDPR-equivalent jurisdiction, you have the right to:

  • Access the personal data we hold about you.
  • Correct any inaccurate data.
  • Delete your account and associated data ("right to be forgotten").
  • Export your data in a portable format.
  • Withdraw consent for analytics at any time (clear your cookies; we will not re-track).
  • Object to processing or request restriction.
  • Lodge a complaint with your national data-protection authority.

To exercise any of these rights, email info@findtoursin.com. We respond within 30 days.

7. Cookies

See our cookie policy for the full breakdown. Briefly: we set a session cookie for logged-in agencies, an analytics cookie for GA4, and nothing else.

8. Children

FindToursIn is not directed at children under 16. We do not knowingly collect data from minors. If you believe a minor has provided personal data, contact us and we will delete it.

9. International transfers

Some of our processors (Stripe, Google) operate in the United States. They process data under Standard Contractual Clauses, the EU\'s legal mechanism for cross-border transfers.

10. Changes to this policy

We will update this page when our practices change and update the "Last updated" date at the top. Material changes are announced on the homepage for at least 30 days before they take effect.

11. Contact

Privacy questions: info@findtoursin.com.