JOYNATIVO S.A.S., RUC 0691787377001, domiciliada en Riobamba, Ecuador.
Privacy contact: [email protected]
| Category | Data | Purpose |
|---|---|---|
| Identification | Name, email, password | Account creation |
| Contact | Phone (WhatsApp/Telegram) | Booking communication, verification call |
| Verification | Verification status (verified / not verified), date of the call, staff member who conducted it | Confirming the identity of hosts, tutors and, at the host's request, travelers |
| Profile | Photos, bio, interests | Public profile |
| Transactional | Booking history, dates, payment references | Record keeping |
| Technical | IP address, cookies, browser | Security, analytics |
Who is verified. All hosts and tutors must complete a verification call with the Joy Nativo team before their listing is published. Travelers are verified only when a host requests it for a specific booking. A traveler may decline; in that case the host may decline the booking.
How it works. The call takes place by video with a member of the Joy Nativo team. During the call you show a valid government-issued identity document on camera so that we can confirm that your name, appearance and age (18+) match your profile.
What we do not do. We do not record the call, take screenshots or photos, or copy or store images of your identity document or its number. No biometric data is processed, and verification does not involve automated decision-making. Joy Nativo does not conduct AML (anti-money laundering) screening.
What we store. Only the verification status, the date of the call and the staff member who conducted it.
What the host sees. When a traveler is verified at a host's request, the host receives only the verification status. Document details are never shared with hosts.
Call services. Calls are held through WhatsApp, Telegram or Google Meet, as agreed with you. These services process connection data as independent controllers under their own privacy policies.
We retain personal data only as long as necessary for the stated purpose:
| Data type | Retention period | Reason |
|---|---|---|
| Account data (name, email) | Until account deletion + 30 days | Data minimisation under LOPDP |
| Payment records (amounts, transaction references) | 7 years from transaction date | Ecuadorian Tax Code (Código Tributario) |
| Booking history (dates, host, guest) | 2 years from booking date | Disputes, fraud prevention |
| Verification status, date and verifier | 2 years after last booking | Fraud prevention, legal disputes |
| Identity documents | Not stored — shown only during the live call | Data minimisation |
| Technical logs (IP, browser) | 3 months | Security monitoring |
| Marketing consent | Until consent is withdrawn | Consent-based processing |
| User reviews | Retained indefinitely, even after account deletion | Public record of platform activity |
After the applicable retention period, data is securely deleted or anonymised.
Joy Nativo shares data with the following processors, each bound by data processing agreements:
| Processor | Purpose | Role | Location |
|---|---|---|---|
| Hetzner Online GmbH | Server infrastructure and data storage | Data processor | Germany (EU) |
| Brevo (Sendinblue SAS) | Sending platform emails: address verification, password reset, booking notifications | Data processor | France (EU) |
| Payphone | Payment processing (Ecuador) | Data processor | Ecuador |
| dLocalGo | Payment processing (Latin America) | Data processor | Uruguay |
| PayPal | Payment processing | Independent data controller | USA |
We do not sell your personal data to third parties.
Note on PayPal: When you pay via PayPal, you interact directly with PayPal Holdings, Inc. as an independent data controller. Please review PayPal's Privacy Policy at paypal.com.
Note on Payphone and dLocalGo: Your payment data is processed by these services as sub-processors of Joy Nativo under data processing agreements.
Note on call services: WhatsApp, Telegram and Google Meet, used for verification calls, act as independent controllers of connection data. Joy Nativo does not receive any recording from them.
Some of your data is processed outside Ecuador:
Contact: [email protected]. Response time: 15 business days.
Joy Nativo is intended for users aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will delete it promptly.
We use only essential cookies. For details, see our Cookie Policy.
We implement: password hashing (bcrypt), HTTPS site-wide, CSRF protection, SQL injection prevention.
Server infrastructure is hosted by Hetzner Online GmbH, certified under ISO 27001. Identity documents are never stored on our servers: they are shown only during the live verification call.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at least 14 days before the changes take effect. The updated policy will also be posted on this page with a revised "Last updated" date. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
You may lodge a complaint with Ecuador's Superintendencia de Protección de Datos Personales if you believe your rights have been violated.
This Privacy Policy is published in English, Spanish, and Russian. In the event of any discrepancy between language versions, the Spanish version shall prevail.