Privacy Policy
This Privacy Policy describes how MMEDIA CORPORATION LTD ("we", "us", "our") collects, uses, and shares information through the Book Direct service ("the Service"), accessible at app.book-direct.co and as a ChatGPT application within OpenAI's platform.
1. Service Context
Book Direct operates as a ChatGPT application (MCP-based tool) within OpenAI's platform. When users interact with the Service through ChatGPT, information flows between the user, OpenAI's platform, and our servers.
2. Information We Collect
2.1 Information from User Queries
When you use the Service, the following information is extracted from your conversation with ChatGPT:
| Data Type | Examples | Purpose |
|---|---|---|
| Search location | City, region, or property name | Finding relevant accommodations |
| Travel preferences | Check-in/out dates, guest count, bedrooms | Filtering search results |
| Amenity preferences | Pool, sea view, air conditioning | Filtering search results |
| Property type | Villa, hotel, apartment | Filtering search results |
2.2 Information from OpenAI
OpenAI may provide contextual information as part of the tool call:
- openai/userLocation: Approximate location (city and country level) derived from the user's IP address by OpenAI. We use this for search relevance. We do not receive or process IP addresses directly.
2.3 Application Configuration Data
Our system includes boolean configuration flags in tool responses:
- devMode: A boolean flag (true/false) used for engineering diagnostics. This is not user data.
- priceProposal: A boolean flag controlling whether pricing features are enabled for a given property. This is not user data.
2.4 Website Usage
When you visit our website (app.book-direct.co), we may collect:
- Email address (when you sign up or submit a form)
- Property claim information (when you claim ownership of a property)
- Standard web analytics data (via cookies)
3. Information We Return
The Service returns the following publicly available information about accommodation properties:
| Data Type | Source |
|---|---|
| Property name and address | Licensed third-party API (public business data) |
| Phone number and email | Licensed third-party API (public business data) |
| Ratings and review count | Licensed third-party API (public review aggregates) |
| Photos | Licensed third-party API (public business photos) |
| Official website URL | Licensed third-party API (public business data) |
| Geographic coordinates | Licensed third-party API (public business data) |
| Opening hours | Licensed third-party API (public business data) |
All returned property data is publicly available business information sourced through licensed commercial APIs. No private or user-generated data is returned.
4. Data Sources and Third-Party Services
We use the following third-party services:
| Provider | Purpose | Data Shared |
|---|---|---|
| Licensed Third-Party Data API | Property search, autocomplete, place details, pricing data | Search queries, location parameters |
| Google Maps JavaScript API | Interactive map rendering within widget | Map viewport coordinates (for display only) |
| Cloudflare (Workers, KV, D1, R2) | Hosting, caching, database storage | All application data processed through Cloudflare infrastructure |
| Secure Authentication Provider | User authentication for the website dashboard | Email, authentication tokens |
| Transactional Email Service | Transactional emails (verification, notifications) | Email addresses, email content |
Important clarification: All accommodation data (property names, addresses, ratings, photos, contact details) is sourced exclusively through a licensed third-party commercial API provider that aggregates publicly available business information from public directories. We do not perform any web scraping, HTML parsing, or automated data extraction from third-party websites.
5. Data Retention
| Storage | Data | Retention |
|---|---|---|
| Cloudflare KV | Search result cache, property data cache | 180 days (automatic expiration) |
| Cloudflare D1 | Property records, user accounts, claims | Indefinite (until deletion requested) |
| Cloudflare KV | Price cache | 30 days (automatic expiration) |
6. How We Use Information
- To provide accommodation search results based on your queries
- To display property information including ratings, photos, and contact details
- To cache results for faster subsequent searches
- To send verification emails when property owners claim their listings
- To improve the accuracy and relevance of search results
7. Data Security
We implement appropriate technical measures to protect your information, including:
- All data is transmitted over HTTPS
- Data is stored on Cloudflare's globally distributed infrastructure
- Authentication is handled via a secure, industry-standard authentication provider
- No payment or financial data is processed by our service
8. Your Rights
You have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent for data processing
To exercise any of these rights, contact us at hello@book-direct.co. We will respond within 30 days.
9. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
11. Contact Us
For questions about this Privacy Policy or our data practices:
MMEDIA CORPORATION LTD
Email: hello@book-direct.co
Website: https://app.book-direct.co
Last updated: March 27, 2026