Privacy Policy

1. Introduction

Yoyakul ("we", "our", or "the Service") is an automated appointment booking service that operates through Instagram Direct Messages. The Service is operated by SYD Co., Ltd. This Privacy Policy explains what data we collect, how we use it, and how you can request deletion of your data. By using the Service, you agree to the practices described in this policy.

2. What Data We Collect

When you interact with the Service through Instagram DM, we collect the following data:

• Instagram-scoped User ID (IGSID): A unique identifier assigned by Instagram to identify the sender of each message.
• Instagram Username: Used to record booking information.
• Conversation Messages: The text messages you send during the booking flow (e.g., menu selection numbers, time slot choices).
• Booking Details: The menu, staff, date, and time you select during the reservation process.

3. How We Use Your Data

We use the collected data solely for the following purposes:

• Processing and confirming your appointment booking via Instagram DM.
• Writing the confirmed booking as an event to Google Calendar (the shop's appointment management system).
• Sending you booking confirmation messages through Instagram DM.

We do not use your data for advertising, profiling, analytics, or any purpose unrelated to the booking service.

4. Data Sharing

We share your data only with the following third-party services, solely for the purpose of providing the booking service:

• Meta / Instagram API: To receive and respond to your Direct Messages.
• Google Calendar API: To write your confirmed booking as a calendar event.

We do not sell, rent, or share your personal data with any other third parties.

5. Data Retention and Deletion

Conversation data (your messages and conversation state) is temporary and is deleted after your booking is completed or your session expires.

Booking information written to Google Calendar is retained by the shop for appointment management purposes.

To request deletion of your data: Send an email to tripadvisor.syd@gmail.com with the subject line "Data Deletion Request" and include your Instagram username. We will delete all associated data within 30 days of receiving your request.

6. Children's Privacy

The Service is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

7. Data Security

We implement appropriate security measures to protect your data, including HTTPS encryption for all communications, database-level access controls (Row Level Security), and restricted API key management. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: tripadvisor.syd@gmail.com

SYD Co., Ltd.