How Hiddengemthailand collects, uses, and protects travel planning and schedule data.
We collect account details, booking information, favorites, messages, activity preferences, and internal scheduling details needed to operate the Hiddengemthailand travel platform.
Schedule information is used inside the platform for booking coordination, guide assignment, availability control, reminders, and internal trip operations.
We do not use scheduling data for advertising, and we do not publish private schedule details publicly.
Connecting Google Calendar is optional and always begins with the traveler pressing Connect with Google and approving the request on Google's own consent screen. Until that happens, Hiddengemthailand holds no Google data at all.
What we access. We request a single Google Calendar permission, https://www.googleapis.com/auth/calendar.events, which covers calendar events only. We also receive the name, email address, and profile picture supplied by standard Google sign-in (openid, email, profile). We do not request Gmail, Drive, Contacts, Photos, or any other Google service.
How we use it. Events read from the connected calendar are shown on that traveler's own itinerary so trips can be planned around existing commitments. Itinerary items created on Hiddengemthailand are written back to that same calendar. The data is used for no other purpose.
What we store. For each imported event we store the title, description, location, start and end time, time zone, all-day flag, and the Google event identifier used to keep the two copies in step. Google access and refresh tokens are encrypted before storage and are used only to run that traveler's own sync.
Sharing. Google Calendar data is private to the traveler's account. It is never shown to other travelers, guides, or vendors, never sold, never transferred to third parties, never used for advertising, and never used to train machine learning or artificial intelligence models. It is not read by humans except where required to resolve a support request the traveler raised, to address a security incident, or where required by law.
Retention and deletion. Pressing Disconnect on the My Plan page revokes our access token with Google and deletes every event imported from Google out of the traveler's Hiddengemthailand itinerary. Access can also be revoked at any time from the traveler's Google Account permissions page, after which the stored tokens no longer function and the imported copies are removed on the next sign-in.
Hiddengemthailand's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
A plain-language description of this integration is available on our Google Calendar Sync page.
Travel platform data is stored for service delivery, operations, customer support, and legal compliance. Chat history and attached files are retained for 365 days and then purged automatically. Sensitive integration credentials are stored in encrypted form and are used only for the connected service.
Users may request account-related changes, update their profile preferences, or contact Hiddengemthailand support about stored travel and booking data.
Read also: Terms of Service