Privacy Policy

01Who this policy covers

This policy explains how we handle personal data on this website and in our travel agency management software (the Service). It covers three groups of people: agency users who log in to the Service, travelers and customers whose details agencies store in the Service, and visitors who use this website or its forms.

For traveler and customer records, the travel agency using the Service decides what is collected and why. We process that data on the agency's behalf and only on its instructions.

02What we collect

• Account data: name, work email, agency name, city, agency type, team size and the plan selected at sign-up.
• Traveler data entered by agencies: names, contact details, dates of birth, passport and ID details, visa documents, travel preferences and payment records.
• Business data: leads, itineraries, quotes, bookings, supplier rates, supplier payments, invoices and tax details.
• Usage data: log-in times, device and browser type, IP address and actions taken in the Service, used for security and support.
• Website forms: what you submit through the sign-up and contact forms.

03How we use it

• To provide the Service: storing records, generating quotes, vouchers and invoices, and sending messages an agency user approves.
• To draft content with AI for the agency that owns the data, such as itineraries and follow-up messages. Drafts are only used inside that agency's account.
• To create your account and send login credentials after sign-up.
• To answer support requests and messages sent through the contact form.
• To keep the Service secure, detect misuse and meet legal obligations.

We do not sell personal data. We do not use traveler or customer data for advertising, and we do not use it to train public AI models.

04Passport and travel documents

Passport details and uploaded travel documents are encrypted in storage and in transit. Access is limited by role to people working on the relevant booking, and access is logged.

Visa and entry guidance shown in the Service is informational. Agencies are prompted to verify it with official sources before advising travelers.

05Who we share data with

We share data only with service providers needed to run the Service, under contracts that require them to protect it:

• Cloud hosting and storage providers.
• Email and messaging providers, including the WhatsApp Business Platform when an agency connects its number.
• Licensed payment partners, when an agency sends a payment link. Card and bank details are handled by the payment partner, not stored by us.
• AI model providers used to generate drafts, under terms that do not allow them to train on the data.

We may disclose data where required by law or to protect the rights and safety of users and travelers.

06How long we keep it

Agency data is kept while the account is active. When an agency closes its account, it can export its data, after which we delete it within 90 days, except records we must keep by law, such as invoices for tax purposes.

Contact form messages are kept as long as needed to respond and follow up, then deleted.

07Your choices and rights

You can ask to access, correct or delete your personal data, or withdraw consent where processing is based on consent. Travelers should first contact the travel agency that holds their booking, as that agency controls their records. We will help the agency respond.

To make a request, use the contact page and choose Something else. We may need to verify your identity before acting.

08Cookies

This website uses only the cookies needed to run its forms securely, such as a session cookie for the security check. The Service uses cookies to keep you signed in. We do not use advertising cookies.

09Changes to this policy

If we make material changes, we will notify account owners by email or in the Service before the changes take effect.