Privacy Policy

Last Updated: January 16, 2026

Effective Date: January 16, 2026

1. INTRODUCTION & WHO WE ARE

1.1. The Operator. This Privacy Policy ("Policy") is operated by andAbout Inc., a Delaware corporation ("andAbout", "we", "us", or "our"), acting as the Data Controller.

1.2. The Ecosystem. andAbout operates a dual-sided marketplace connecting users seeking experiences ("Explorers") with experiential businesses ("Merchants").

  • Unified Policy: This Policy applies to all users, whether you are browsing for a dinner spot or claiming a business profile.
  • Independent Controller: We are an independent Data Controller regarding the Platform, the User Graph, and our AI algorithms. We are not merely a data processor for Merchants.
  • Merchant Relationship: When an Explorer books with a Merchant, that Merchant acts as a separate Data Controller for the fulfillment of the service. We are not responsible for the independent privacy practices of Merchants.

2. THE DATA WE COLLECT

2.1. Information You Give Us (All Users).

  • Account Data: Name, email, phone number, password, and profile preferences.
  • Merchant Data: If you are a Merchant, we collect business verification documents, tax IDs (e.g., EIN, VAT), and payout details (bank accounts).
  • Communications: Content of messages sent to support or directly to other users via the Platform.

2.2. Automated Technical Data. When you use our App or Website, we automatically collect:

  • Device Data: IP address, device model, OS version, unique device identifiers (UDID), and mobile network information.
  • Location Data (Foreground Only): Precise GPS location only while using the app to provide "Near Me" results.
  • Behavioral Logs: Search history, dwell time, clickstreams, and interaction with listings (used to train our AI).

2.3. Identity Verification (Merchants). To prevent fraud and ensure safety, we may require Merchants to provide government-issued ID or business registration documents ("KYC Data"). This data may be processed by third-party identity verification providers.

  • Nature of Data: Strictly limited to factual business data (Name, Address, Public Hours).
  • Claiming: Merchants may claim this data to control their profile (See Section 9).

3. HOW WE USE YOUR DATA

We use your data to:

  1. Service Delivery: Facilitate bookings, process payments, and manage accounts.
  2. AI & Personalization: Use aggregated/anonymized usage patterns to train our recommendation models and generate "Vibe" sentiment summaries.
  3. Marketing: Send you curated offers and newsletters (subject to your opt-out rights).
  4. Security: Detect bots, scrapers, and fraudulent transactions.
  5. Legal Compliance: Comply with tax, financial, and regulatory obligations (e.g., anti-money laundering).

4. AUTOMATED DECISION MAKING & PROFILING

4.1. Fraud Prevention. We use automated systems to analyze transaction patterns and device fingerprints to detect fraud. These systems may automatically block a booking or account if high-risk activity is detected. You have the right to request a manual review of such decisions by contacting support.

4.2. AI Recommendations. Our "Interest Graph" uses automated profiling to suggest venues. This profiling does not produce legal effects or significantly affect you, other than reordering the content you see.

5. DATA SHARING & DISCLOSURE

5.1. With Merchants. When an Explorer books, we share the Explorer's name and necessary transaction details with the Merchant. We do not share the Explorer’s global tracking history.

5.2. Service Providers (Processors). We disclose data to trusted third-party vendors who assist in our operations. We ensure these vendors are bound by strict confidentiality and data protection obligations. Categories of recipients include:

  • Cloud Hosting: (e.g., AWS, Google Cloud)
  • Payment Processors: (e.g., Stripe, PayPal)
  • Customer Support Tools: (e.g., Zendesk, Intercom)
  • Marketing & Analytics: (e.g., Braze, Mixpanel, Google Analytics)
  • Identity Verification: (e.g., Persona, Cheq)

5.3. Aggregated Derived Data. andAbout owns all right, title, and interest in "Derived Data" (statistical, aggregated, and de-identified data). We may share or monetize Derived Data with third parties (including Tourism Boards and Municipalities) for urban planning and trend analysis.

6. COOKIES & TRACKING TECHNOLOGIES

6.1. We use cookies, pixels, and SDKs to function and to track usage.

  • Strictly Necessary: Required for login and security.
  • Analytical: Help us understand how the app is used.
  • Marketing: Allow us to retarget you on other platforms.
  • Control: You can manage your preferences in the App Settings.

7. SOCIAL MEDIA & ADVERTISING (Joint Controllership)

7.1. Social Plugins. We use social media tools (e.g., Meta Pixel, TikTok Pixel) to measure the effectiveness of our ads.

7.2. Joint Controllership. For the collection and transmission of data to platforms like Meta (Facebook/Instagram) or TikTok, andAbout and the respective platform act as "Joint Controllers."

  • Our Responsibility: We are responsible for the lawful collection and transmission of data from our App/Site to the social platform.
  • Platform Responsibility: Once the data reaches Meta or TikTok, they are responsible for the subsequent processing and storage.
  • Opt-Out: You can opt-out of this tracking via your device settings (e.g., iOS "Ask App Not to Track").

8. INTERNATIONAL DATA TRANSFERS

8.1. Location. andAbout is headquartered in the United States. Your data is primarily processed in the US.

8.2. Transfer Mechanisms. If you are located in the EEA, UK, or Switzerland, we transfer your data to the US based on:

  • Adequacy Decisions (where applicable).
  • Standard Contractual Clauses (SCCs): We implement the European Commission's SCCs with our non-US vendors and partners to ensure your data remains protected.

9. YOUR RIGHTS & TAKEDOWNS

9.1. User Rights. Depending on your jurisdiction, you may have the right to Access, Rectify, Delete, Port, or Restrict your personal data.

  • To Exercise: Email support@andabout.com.

9.2. Merchant Takedowns (Safe Harbor). If you are a business owner and believe a profile infringes your rights:

  • Claiming: You may "Claim" the listing to verify ownership.
  • Removal: You may request permanent removal by contacting us. We process these requests promptly.

10. SECURITY

10.1. We implement industry-standard technical and organizational measures (encryption, access controls) to protect your data. However, no system is 100% secure, and we cannot guarantee absolute security.

11. CHILDREN

11.1. The Platform is for general audiences (16+). We do not knowingly collect data from children under 16. If we discover such data, we will delete it.

12. DATA RETENTION

12.1. We retain personal data only as long as necessary for our business relationship or legal obligations.

  • AI Training Data: Aggregated/Anonymized data is retained indefinitely as our intellectual property.

13. NOTICE TO U.S. RESIDENTS (CCPA/State Laws)

13.1. Scope. This section applies to residents of California, Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws.

13.2. "Sales" and "Sharing". We do not sell your personal data for money. However, we use tracking pixels (Meta, Google) which may constitute "sharing" for cross-context behavioral advertising under California law.

13.3. Right to Opt-Out: You may opt-out of this "sharing" by emailing us or adjusting your device settings.

13.4. Your Rights. You have the right to:

  • Know what categories of data we collect.
  • Delete your personal information.
  • Correct inaccurate information.
  • Non-Discrimination: We will not deny you services for exercising these rights.

13.5. Shine the Light. California residents may request a list of third parties to whom we disclosed personal data for direct marketing purposes in the preceding year.

14. CHANGES

14.1. We may update this Policy. Material changes will be notified via email or app banner. Continued use constitutes acceptance.

15. CONTACT

andAbout Inc.
Attn: Privacy Officer
Email: support@andabout.com
Address: 10401 Venice Blvd #253, Los Angeles, CA 90034