Home About Terms of Service

Privacy Policy

Effective Date: March 22, 2026 · Last Updated: May 1, 2026

This Privacy Policy explains how Rexplore Inc. ("Rexplore," "we," "us," or "our") collects, uses, discloses, stores, and otherwise processes personal data in connection with the Rexplore family of services, including Rextaurant, Rextrip, and Rexhotel (collectively, the "Platform"). This Policy is intended to serve as our public privacy notice and, where required, our notice at collection.

1. Controller, Scope, and Contact

1.1 Rexplore Inc. ("Rexplore"), a corporation registered in the Republic of Korea with its registered office in Seoul, is the controller for personal data processed through the Platform unless a separate notice states otherwise.

1.2 This Policy applies to our websites, applications, support interactions, waitlists, account creation, review and content features, analytics, and operational activities related to the Platform.

1.3 This Policy does not apply to third-party services, including Google sign-in, app stores, map providers, booking partners, payment providers, and other websites or services linked from the Platform. Those third parties have their own privacy practices.

1.4 For privacy questions, contact privacy@rexplore.xyz. For data protection matters, contact our Data Protection Officer at dpo@rexplore.xyz.

1.5 Lead Supervisory Authority and Statutory Channels

For complaints about how we handle personal data, you may contact the following authorities:

1.6 Lawful Bases for Processing (GDPR Art 6 / UK GDPR)

For users located in the EEA or UK, we process personal data on the following lawful bases:

2. Personal Data We Collect

2.1 Information You Provide to Us

2.2 Information We Collect Automatically

2.3 Information from Third Parties

2.4 Sensitive Personal Data

We do not intentionally ask for special-category data such as health, religion, or biometric data. If you voluntarily include sensitive information in reviews, captions, messages, or profile fields, you choose to make that information available to us and, where applicable, to other users. We ask that you avoid doing so unless necessary.

3. How We Use Personal Data and Our Legal Bases

Depending on the context, we process personal data for the following purposes:

If the laws of your jurisdiction require a more specific legal basis, we rely on performance of a contract, legitimate interests, consent, and legal obligations as applicable. Where we rely on legitimate interests, we balance those interests against your rights and expectations.

4. How We Disclose Personal Data

4.1 Publicly Available Information

Your username, profile image, nationality flag, reviews, ratings, comments, itineraries, and photos may be visible to other users and may be indexed or cached by search engines or other third parties.

If you choose to post content in public areas of the Platform, you direct us to display and distribute that content publicly. Public content may be featured, ranked, quoted, summarized, translated, recommended, promoted, copied, archived, or cached by us, search engines, partners, and other third parties, and complete removal from all external locations is not guaranteed.

4.2 Disclosure Categories

We may disclose personal data to:

4.3 What We Do Not Do

4.4 Deidentified and Aggregated Information

We may aggregate, deidentify, or anonymize information so that it can no longer reasonably identify you. We may use and disclose such information for analytics, benchmarking, business planning, safety, product improvement, research, and reporting.

Where permitted by law, we may retain and use deidentified, aggregated, anonymized, and derived information indefinitely, provided that it no longer reasonably identifies you.

5. International Transfers

We may process or store personal data in the Republic of Korea, the United States, and other countries where our providers or partners operate. Where required, we use appropriate transfer safeguards such as contractual protections, adequacy decisions, or other lawful transfer mechanisms recognized under applicable law.

6. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Platform, comply with law, resolve disputes, enforce agreements, maintain security records, and preserve platform integrity. Typical retention periods include:

7. Cookies and Similar Technologies

We use cookies, local storage, SDKs, and similar technologies for the following purposes:

Our website gives you clear controls to accept, reject, or customize non-essential cookies. You can reopen your cookie settings at any time using the cookie settings control on the site. If you decline analytics cookies, core site functions remain available.

Where analytics are enabled, we configure our analytics implementation to reduce unnecessary data use, including disabling advertising features and applying IP anonymization where available. If your browser sends a Global Privacy Control signal, we treat non-essential cookies as off by default unless you opt in.

8. Your Rights and Choices

Depending on where you live, you may have the right to request access to personal data, correction, deletion, portability, restriction, objection to certain processing, withdrawal of consent, or review of certain processing decisions. You may also have the right to complain to a supervisory authority or regulator.

To submit a rights request, contact privacy@rexplore.xyz. We may need to verify your identity and may decline or limit a request where an exemption applies, where the request would adversely affect the rights of others, or where we are permitted or required by law to retain the information.

You can also manage some data directly in the Platform, such as editing profile information, deleting content, revoking permissions, and adjusting cookie preferences.

These rights are not absolute. Where permitted by law, we may retain or restrict deletion of data needed for security, fraud prevention, repeat-abuse prevention, moderation history, platform integrity, legal compliance, tax and audit records, dispute resolution, or the establishment, exercise, or defense of legal claims. In some cases, we may anonymize public content rather than fully erase it.

Where permitted by law, we may refuse, defer, or charge a reasonable fee for requests that are manifestly unfounded, excessive, repetitive, technically infeasible, or that would require disproportionate effort, compromise security, or impair the rights of other users or third parties.

8.1 How to Delete Your Account

You can delete your account at any time. Two paths are available:

When you delete your account, we immediately:

The retention rules in Section 6 still apply to records we are legally required to keep (security and audit logs, moderation history, Korea §44-2 claim history, tax and dispute records). Those records are pseudonymized so they cannot be tied back to a usable identity.

9. GDPR / EEA / UK Supplemental Information

If you are in the EEA or UK, you have rights under the GDPR or UK GDPR, including the right to access, rectify, erase, restrict, object, withdraw consent, and receive a portable copy of certain personal data. You also have the right to lodge a complaint with your local supervisory authority.

We process personal data based on contractual necessity, legitimate interests, legal obligations, and consent as described above. If you object to processing based on legitimate interests, we will assess your objection in accordance with applicable law.

10. California (CCPA / CPRA) Supplemental Notice

This section applies to California residents and describes our personal information practices during the preceding 12 months.

10.1 Categories of Personal Information Collected

10.2 Sources of Personal Information

We collect personal information directly from you, automatically from your device and use of the Platform, from identity providers, from app and infrastructure providers, from partners you choose to interact with, and from other users or public sources in connection with moderation, safety, or listing quality.

10.3 Business and Commercial Purposes

We use personal information to operate and administer the Platform, authenticate accounts, publish and rank content, improve features, prevent abuse, communicate with users, analyze performance, comply with legal obligations, and protect the rights and safety of Rexplore, users, establishments, and the public.

10.4 Categories Disclosed for Business Purposes

We may disclose the categories listed above to service providers, contractors, corporate affiliates, advisors, infrastructure providers, analytics providers, support providers, fraud and moderation providers, regulators, courts, counterparties to corporate transactions, and other parties as described in Section 4.

10.5 Sale / Sharing / Sensitive Personal Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes other than permitted business purposes and limited service-delivery purposes.

10.6 California Rights

California residents may request to know, access, correct, delete, or obtain a portable copy of personal information, and may appeal or complain where permitted by law. You may also use an authorized agent. We will not discriminate against you for exercising your rights. To make a California privacy request, contact privacy@rexplore.xyz.

11. Moderation Data Processing

11.1 When you submit a report, the following data is collected and processed: your account identifier, the identifier of the reported content, the report category, any optional note you provide, and metadata including the timestamp and your approximate IP address region. This data is used to evaluate the report, apply thresholds, and audit moderation decisions.

11.2 Report identifiers are pseudonymized when they are counted toward automated thresholds. The reporter's identity is not disclosed to the author of the reported content, except where required by a court order or legal process.

11.3 When you submit an appeal, the content of your appeal note and your account identifier are processed by our moderation team to evaluate the appeal. We may also use AI-assisted tools to provide a second-opinion assessment. AI-assisted assessment inputs are limited to structured fields (report category codes, content status, and appeal note) and do not include unstructured prompts that could affect system behavior.

11.4 When you submit a Korea §44-2 Rights Infringement Claim, the personal data in your claim (name, email, harm description, and any supporting documentation) is processed solely to evaluate and act on your claim. This data is not used for advertising, profiling, or any other purpose unrelated to the claim.

11.5 Moderation audit logs, which record moderation actions and their outcomes, are stored in a tamper-resistant format and are accessible only to authorized personnel. These logs may be provided to law enforcement or courts pursuant to valid legal process.

11.6 For further details on how moderation actions affect content visibility and what rights you have when your content is hidden, see our Moderation Policy.

12. Security and Minors

We use reasonable technical, organizational, and contractual safeguards designed to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.

The Platform is not directed to children under 14. If you believe a child provided personal data to us in violation of applicable law, contact privacy@rexplore.xyz.

For security incidents, vulnerability reports, or abuse affecting the confidentiality, integrity, or availability of the Platform, contact security@rexplore.xyz.

13. Changes to This Policy

We may revise this Policy from time to time. If we make material changes, we will update the date above and provide additional notice where required by law. Your continued use of the Platform after the updated Policy takes effect is subject to the updated Policy.

14. Contact

Privacy: privacy@rexplore.xyz

Data Protection Officer (DPO): dpo@rexplore.xyz

Security: security@rexplore.xyz