Privacy Policy
Ilya Tours CRM (tours.automations.art) — last updated 2026-08-21.
Who this covers
Ilya Tours CRM is operated by automations.art. This page describes what the CRM application itself stores and does with data, and how to reach us about it. We have not registered a formal company entity or a data protection officer for this service; the contact address below reaches the person who operates it.
Who enters the data, and whose responsibility it is
The CRM is used by independent tour guides to keep records about their own clients. A guide enters this data about the people they work with — it is not collected by us directly from those clients. The guide who enters a record is responsible for having a proper basis to hold it (for example, the client's consent or an existing business relationship) and for the accuracy of what they enter.
What the CRM stores
For each client a guide adds, the CRM can store:
- Name, email, phone, preferred language, and nationality
- Emergency contact and hotel / pickup location
- Dietary needs and birthdays
- Religion / ethnic group and religious observance
- Age group, children, interests, and professional background
- Political orientation
- Private notes the guide writes about the client
- Rates paid, gratitude amounts, and commission records
- Payment method and payment details
- Links to media (e.g. photo folders) associated with the client
We call out religion/ethnic group, religious observance, and political orientation specifically because these are sensitive categories of personal data in many privacy frameworks. They exist in this CRM because tour guides use them to plan itineraries (for example, dietary and site-visit accommodations) — not for any other purpose.
Google Drive access
The CRM offers guides the option to connect their Google Drive. When connected, the app creates one folder per client inside the guide's own Drive and stores a link to that folder against the client's record, so photos for that client have a consistent home.
This uses Google's drive.file scope, which grants the app access
only to the files and folders the app itself creates. The app cannot
see, list, or read anything else already in the guide's Drive.
Backup copy
As a backup, client data entered in the CRM is also written to a Google Sheets workbook owned by the operator of automations.art.
How the app keeps you signed in
After signing in, the CRM stores a login token (a JWT) in your browser's
localStorage so you stay signed in between visits. We do not use cookies
for tracking or analytics.
Retention and deletion
A client's record is kept until the guide who owns it deletes that record, or deletes
their own account. Deleting a guide account (DELETE /api/account) removes
the guide's account and every client record that belongs to it.
To request deletion of your data, or to ask a question about this policy, contact info@automations.art.