Salam Jeju ("we", "us") operates salamjeju.com and related services including Muslim travel information and support for existing bookings. New retreat and private tour bookings are closed. This policy describes the personal information we retain and process when you interact with us.
1. Information we collect
- Application data: name, email, phone, travel dates, dietary and prayer needs previously provided for a booking, and details you provide for existing booking support or guest intake. New booking applications are closed.
- Instagram interactions: when you interact with connected customer-support Instagram accounts, Meta delivers that content via the Instagram Graph API. We store the message text, your Instagram-scoped user ID, and timestamps for customer support, duplicate prevention, and auditing. Closing new bookings does not automatically delete existing conversations.
- Payment metadata: when you pay a deposit, our payment processor (Wise, PayPal, or bank transfer) handles card data. We retain only the reference number, amount, and status.
- Standard server logs: IP address, user agent, and request paths for security and abuse prevention.
2. How we use it
- Reply to your inquiries on Instagram and email.
- Support existing bookings, payments, cancellations, and guest arrangements.
- Send service emails (booking confirmation, payment reminders, itinerary).
- Improve our content and detect abuse.
We do not sell your personal information. We do not run third-party advertising on our site.
3. Third parties we share with
- Meta Platforms— Instagram messaging is delivered via Meta's Graph API. Meta's own privacy policy applies to the Instagram side of the interaction.
- Supabase (database/hosting), Google Cloud Run (application hosting), Resend (transactional email), Wise / PayPal (payments).
4. Retention
We keep application and booking records for 5 years for tax and accounting purposes. Instagram webhook events are retained for 12 months for support and audit. You may request earlier deletion at any time — see the Data Deletion page.
5. Your rights
You may request access, correction, or deletion of your data, or object to a specific use. Contact us at jin@regenntwrks.com. We respond within 30 days.
6. Security
Data is transmitted over HTTPS and stored in Supabase with row-level access controls. Access tokens for Instagram are stored encrypted in our database with restricted service-role access.
8. Changes
We may update this policy. The "Effective" date at the top reflects the latest revision. Material changes will be highlighted on our site.