Privacy Policy

University Campus Private Tours (“UCPT,” “we,” “us”) respects your privacy. This policy explains what personal data we collect, how we use and share it, and the rights you have over it. By using the Platform, you agree to the practices described here.

1. Data we collect

• Account data: name, email, password, role (family or guide), and profile details you choose to add.
• Booking data: the tours you request, messages exchanged, schedules, and reviews.
• Payment data: processed securely by Stripe. We never store full card numbers; we receive only limited transaction details.
• Verification data (guides and counselors): enrollment documents used to confirm you are a current student, and an identity check (photo ID and a selfie) handled by Stripe Identity. See section 4 for how face data is handled.
• Usage data: device, browser, pages viewed, and similar analytics that help us improve the Platform.

2. How we use your data

• To create and manage your account and process bookings and payments.
• To verify student guides and keep the marketplace safe.
• To provide support and send service-related communications.
• To improve, personalize, and secure the Platform.
• To comply with legal obligations and enforce our Terms.

3. How we share your data

We do not sell your personal data. We share it only as needed to operate the Platform:

• With guides: a family’s contact details remain masked until a booking is confirmed; only then is the necessary information shared to coordinate the tour.
• With service providers: such as Stripe for payments and infrastructure partners, under contracts that protect your data.
• For legal reasons: when required by law or to protect rights, safety, and security.

4. Identity verification and face data

A guide or counselor applicant can verify their identity in one of two ways: an automatic check with Stripe Identity, our identity verification provider, or a manual check by our team (described at the end of this section). The check is optional. Guests who only book tours are never asked for this.

• What is collected: photos of the front and back of a government-issued photo ID, and a live photo of the applicant’s face (a selfie). Stripe uses the face in the selfie and the face on the ID to confirm they belong to the same person. This comparison uses biometric identifiers (face data). Stripe asks for consent before collecting it.
• How it is used: only to confirm the applicant’s identity for their guide or counselor application, and to prevent fraud. Face data is never used for advertising, tracking, marketing, profiling or any other purpose.
• Who receives it: with the automatic check, the photos and the selfie are captured and checked by Stripe, Inc. on Stripe’s own secure page and stored by Stripe. Our apps and servers never receive, view or store those ID images, that selfie or any face data. We receive only the result (verified or not verified), the date and, if the check failed, the reason. We never sell or share face data with anyone else.
• How long it is kept: when our team approves or declines the application, we instruct Stripe to permanently delete the ID images, the selfie and the information taken from them. If you delete your account first, we instruct Stripe to delete them at that moment. Until then they are kept only while your application is under review.
• Manual check: if you choose it instead, you send us one photo of yourself holding your ID next to your face. Only our review team looks at it, to compare your face and name with your ID and student ID. It is not processed by any face-recognition technology and is never shown publicly, sold or shared. We permanently delete the photo as soon as our team decides, when your application is approved or declined, or when you delete your account, whichever comes first.
• Your choices: you can delete your account at any time (see Delete your account), which deletes this data. You can also contact Stripe at privacy@stripe.com. Stripe’s handling of this data is described in its Privacy Policy.

5. Cookies

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Platform is used. You can control cookies through your browser settings; disabling some may affect functionality.

6. Security

We protect your data with encryption in transit and at rest, access controls, and regular review of our practices. Sensitive verification and identity documents are restricted to authorized administrators only. No method of transmission or storage is completely secure, but we work hard to safeguard your information.

7. Your rights

Depending on where you live, you may have rights under laws such as the GDPR and CCPA, including the right to:

• Access and export a copy of your personal data.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Opt out of the “sale” of personal data (we do not sell it).

To exercise any of these rights, contact us using the details below. We will not discriminate against you for doing so.

8. Children’s privacy

Accounts are for adults (18 and over). Young people aged 9 to 17 may use the Platform only through a parent’s or guardian’s account, with that parent or guardian supervising, so the personal data we hold belongs to the adult account holder. We do not let children create their own accounts, and we do not knowingly collect personal data directly from children under 13. Where a tour involves a minor, a parent or guardian must book, pay, and supervise. If you believe a child has given us personal data, contact us and we will delete it promptly.

9. Data retention

We keep personal data only as long as needed to provide the Platform, meet legal and tax obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it. Identity documents and face data from the identity check follow the shorter rule in section 4.

10. Contact us

For privacy questions or to exercise your rights, email our privacy team at Info@ivystandard.org.