Who we are
TULÓY operates TULÓY, an accommodation marketplace and host management service, starting in Baguio with plans to serve other Philippine destinations. This notice covers our website, booking service, host workspace and connected Facebook Page features.
Information we process
- Guests: name, email, phone number, travel dates, guest count, property selection, booking references and requests you submit.
- Hosts: account and business details, property addresses and map coordinates, listings, availability, rates, customer records and payout details you provide.
- Google or Facebook login: provider account ID, name and email returned with your authorization. We do not receive your Google or Facebook password.
- Facebook Page connections: authorized Page ID, name and Page access token. During connection we temporarily process a user access token to retrieve eligible Pages. Messenger events may include Page-scoped sender IDs, message text, postbacks and delivery identifiers needed to respond. Feed notifications may reach our webhook; a feed inbox and comment automation are not currently provided.
- Payments: booking amount, checkout/payment identifiers, payment status and commission/payout records. Payment details entered at PayMongo checkout are handled by PayMongo; TULÓY does not ask for full card details in its forms.
- Service use: session cookies, security tokens, request information such as IP address and browser information, and operational logs used for service delivery and abuse prevention.
How and why we use information
We use information to create accounts, display accommodation, check availability, manage bookings, confirm payments, calculate host earnings, provide requested Messenger replies, resolve support requests and protect the service. We process information as needed to provide requested services and contracts, meet legal obligations, protect legitimate service and security interests, or with consent where required. Optional provider connections can be withdrawn.
Who receives information
Booking details are shared with the host responsible for your stay. Authorized platform staff can access records needed for support, payment review and service administration. Service providers may process information for hosting, payment processing (PayMongo), authorized login or messaging (Google and Meta), maps and fonts (Google), and other services actually enabled for the platform. Hosts must use guest information only for legitimate booking and accommodation purposes. We do not sell personal information or Google user data.
Provider data and permissions
Facebook Page permissions are used to discover authorized Pages, connect the selected Page, subscribe to approved events and send requested booking-related replies. Google login data is used for authentication and account creation, not advertising. TULÓY’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.
Retention, security and overseas processing
We retain information only for the service purposes described here and applicable accounting, dispute, fraud-prevention and legal obligations. Removing a provider connection and closing an account are different actions. Some booking and financial records may need to be retained even when account or provider data is deleted; we will explain relevant exceptions when handling your request. Access tokens and payout details are encrypted at rest, access is restricted by role and host, and provider webhooks are signature-checked. No system is completely secure. Providers may process information outside the Philippines under their own infrastructure and applicable safeguards.
Your choices and rights
You may request access, correction, objection, restriction, deletion or portability where applicable, and withdraw optional authorizations. Use our data deletion page or the contact form. We may verify identity before changing or disclosing records. You may also raise privacy concerns with the Philippine National Privacy Commission. The service is intended for adults arranging accommodation; do not submit children’s personal information unnecessarily.
Cookies and changes
See our Cookie Notice. We update this notice when our practices change and will provide additional notice for material changes when appropriate.
Contact TULÓY
TULÓY · Contact & Support