Privacy Policy

1. Introduction

Welcome to PERIPLOS ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our virtual tour services.

PERIPLOS is a virtual tour platform that provides 360-degree panoramic experiences of Southern Leyte's destinations. We understand the importance of privacy and are dedicated to maintaining the confidentiality of your personal information.

2. Information We Collect

2.1 Personal Information

When you create an account or use our services, we may collect:

• Email address
• Password (encrypted)
• First name, middle name, and last name
• Username
• Location information (if provided)

2.2 Usage Information

We automatically collect certain information when you use our website:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referrer information (how you found our site)
• User agent (browser/device details)

2.3 User-Generated Content

When you use our forum features, we collect:

• Forum posts and comments
• Likes and interactions
• Profile information you choose to share

3. How We Use Your Information

We use the collected information for the following purposes:

• Account Management: To create and manage your user account
• Authentication: To verify your identity and provide secure access
• Service Delivery: To provide our virtual tour services
• Analytics: To understand how users interact with our website
• View Tracking: To count destination views and prevent spam
• Communication: To respond to your inquiries and provide support
• Improvement: To enhance our website and services

4. View Tracking and Analytics

We track destination views to:

• Count total visits to destinations
• Prevent spam and abuse (1 view per hour for anonymous users, 1 view per day for authenticated users)
• Analyze popular destinations
• Improve user experience

5. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties, except:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and safety
• In connection with a business transfer (with notice)

6. Cookies and Tracking

We use:

• Session Cookies: For authentication and session management
• No Third-Party Tracking: We do not use Google Analytics or similar tracking services
• Essential Cookies: Required for website functionality

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a standard format
• Objection: Object to certain processing activities

8. Data Retention

We retain your information for:

• Account Data: Until you delete your account or request deletion
• View Data: Indefinitely for analytics purposes
• Forum Posts: Until you delete them or your account is deleted
• Session Data: 7 days maximum (NextAuth configuration)

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: mjkl.capstonegroup@gmail.com
• Address: Southern Leyte, Philippines
• Website: www.periplos.vercel.app

13. Legal Basis for Processing (GDPR)

If you are in the European Union, our legal basis for processing your personal data includes:

• Consent: When you create an account and agree to our terms
• Contract: To provide our services to you
• Legitimate Interest: For analytics and service improvement
• Legal Obligation: To comply with applicable laws