Privacy Policy

1. Who we are

Goroja is an international directory that connects verified companions and clients. For data protection purposes, Goroja is the controller of the personal data described in this policy.

Questions about this policy can be sent through our Contact Us page.

2. Data we collect

We collect the information you give us directly and information generated when you use the platform:

• Account data: email address, password (stored hashed), role, language and account status.
• Profile data: display name, city, age, biography, photos, rates, languages, services described and availability.
• Contact details you choose to share, such as phone, WhatsApp and Telegram, including their visibility settings.
• Content you create: messages, reviews, favorites, lists, bookings, travel plans and reports.
• Usage and device data: pages visited, search filters, IP address, browser type, timestamps and cookie identifiers.
• Verification data: information submitted to confirm your identity, handled with restricted access.

3. How we use your data

We use personal data to:

• Provide the service: accounts, search, messaging, bookings and calendars.
• Verify profiles and moderate content to keep the platform safe.
• Send transactional notifications you have requested, such as messages and booking updates.
• Process payments for optional features and prevent fraud.
• Understand how the platform is used in aggregate in order to improve it.
• Comply with legal obligations and enforce these Terms.

4. Legal bases

We process data on the following bases: performance of the contract you enter into by creating an account; your consent, for example for optional cookies or marketing messages; our legitimate interest in operating and securing the platform; and compliance with legal obligations.

Where the General Data Protection Regulation (GDPR) or similar laws apply, you may withdraw consent at any time without affecting prior processing.

5. When we share data

We do not sell your personal data. We share it only with:

• Other users, according to the visibility settings you configure on your profile and contacts.
• Service providers that help us run the platform, such as hosting, database, email delivery and analytics providers, bound by confidentiality obligations.
• Authorities, when disclosure is required by law or to protect the rights and safety of our users.
• A successor entity, in the event of a merger, acquisition or sale of assets, subject to this policy.

6. International transfers

Goroja operates internationally, so your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect it.

7. How long we keep it

We keep account and profile data while your account is active. When you delete your account, we remove or anonymise your personal data within a reasonable period, except where we must retain it to comply with the law, resolve disputes or enforce our rights.

Operational records such as logs and email delivery records are kept only for as long as they are needed for security and debugging.

8. Security

We apply technical and organisational measures to protect your data, including encrypted transport, hashed passwords, restricted access to verification data and monitoring for abuse.

No system is completely secure. If we become aware of a breach affecting your personal data, we will notify you and the competent authorities as required by law.

9. Your rights

Depending on where you live, you can:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request deletion of your data and close your account.
• Object to or restrict certain processing, and request portability of your data.
• Withdraw consent at any time and lodge a complaint with a supervisory authority.

10. Colombian data protection law

If you are in Colombia, Ley 1581 de 2012 and its decrees apply to the processing of your data. You may exercise your rights of access, rectification, updating and deletion (ARCO) by contacting us through the channels on our Contact Us page, and you may file a complaint before the Superintendencia de Industria y Comercio.

11. Cookies

We use cookies and similar technologies for essential operation, preferences and analytics. Our Cookie Policy explains each category and how to manage your choices.

12. Age requirement

Goroja is strictly for adults aged 18 and over. We do not knowingly collect data from minors; if we discover such data, we delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version is always published on this page with its revision date, and material changes will be highlighted within the platform.

14. Contact

To exercise your rights or ask any question about this policy, use our Contact Us page. We will respond within the deadlines required by applicable law.