Privacy Policy

This Privacy Policy explains how INTOURCAMS (“we”, “us”, or “our”) collects, uses, shares, and protects information when you use the INTOURCAMS website and related services (the “Service”).

INTOURCAMS is the Integrated Tourism Coordination and Monitoring System for tourism information in Sarawak. By using the Service, you acknowledge the practices described in this Privacy Policy.

If you have questions about this Privacy Policy or about how information is handled, please contact us using the details in Section 13.

We collect information that you provide directly, information published through tourism listings and related features, and limited technical information needed to operate the Service.

We use information to:

• Provide, operate, and improve the INTOURCAMS Service
• Create and manage user accounts and authentication
• Enable tourism players and administrators to manage listings, reviews, events, and related workflows
• Publish approved tourism information for public discovery
• Measure engagement with tourism listings and website visitor counts in aggregate
• Generate AI Planner recommendations when you request them
• Communicate about account setup, security, and service-related notices where applicable
• Protect the integrity, security, and proper administration of the Service
• Comply with legal obligations and respond to lawful requests

Information that is intentionally published on INTOURCAMS — such as published tourism listings, public contact details on those listings, published events, and published tourism resources — may be viewed by anyone who accesses the public website.

Please do not submit information for publication that you do not want to appear publicly. If you believe published information should be corrected or removed, contact us using the details in Section 13.

We do not sell personal information.

Information may be shared in these limited circumstances:

• With service providers that host or support the Service (see Section 6)
• When you choose to publish information that is intended to be public
• With administrators or authorised personnel who manage the Service
• When required by law, regulation, or lawful request
• To protect the rights, safety, or security of users, the public, or the Service

INTOURCAMS relies on third-party services to operate. Depending on how you use the Service, information may be processed by:

• Supabase — database hosting, authentication, and related backend infrastructure
• Google Maps — maps, location display, and related mapping features where enabled
• An external AI service — processing of planner inputs needed to generate recommendations when AI Planner is used
• Authentication and email delivery infrastructure used for account sign-in, confirmation, and password reset messages

These providers process information as needed to deliver their services. Their own privacy terms may also apply to their processing.

INTOURCAMS uses cookies and similar browser storage to operate the Service. This may include:

• Authentication and session storage used to keep you signed in and secure account sessions
• itc_as — an opaque session identifier for first-party tourism engagement analytics (retained for up to 180 days)
• itc_wv — an anonymous identifier for the website visitor counter (retained for up to 180 days)
• itc_pq — an anonymous identifier used only to apply AI Planner usage limits for guests (retained for up to 180 days)
• intourcams_locale — language preference, which may also be stored in local storage (retained for up to one year in the language cookie)

You can control cookies through your browser settings. Disabling certain cookies may affect sign-in, language preference, analytics counting, AI Planner guest limits, or related features.

We apply reasonable technical and organisational safeguards appropriate to the Service. These include authentication controls, database access controls, row-level security and related security policies, and restricted server-side operations for sensitive actions.

No method of transmission or storage is completely secure. We cannot guarantee absolute security of information.

Different categories of information may be retained for different periods. We retain information as reasonably necessary for operational, administrative, security, archival, or legal purposes.

INTOURCAMS does not currently provide a general self-service account deletion function in the user interface. If you want to request deletion or removal of information where applicable, please contact us using the details in Section 13.

Depending on your relationship with INTOURCAMS and the information involved, you may contact us to:

• Ask about access to information we hold about you
• Request correction of inaccurate account or related information
• Ask questions about how information is processed
• Request deletion or removal where applicable
• Raise concerns about published tourism information

You may also update certain profile details in your account settings where that feature is available, and you may change the website language preference in your browser session.

INTOURCAMS is a general tourism information and coordination platform. It is not directed at children. If you believe a child has provided personal information through the Service, please contact us so we can review the matter.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of the Service after an update means you acknowledge the revised Privacy Policy.

For privacy questions, requests, or concerns, contact: