Privacy Policy

1.Who this policy covers

This policy applies to travel agencies, tour operators and DMCs who use the platform (our customers), their staff and B2B agents, and the travellers whose trips are managed through it.

For traveller data entered by an agency, the agency decides why and how that data is used. We process it on the agency's behalf to provide the service.

2.What we collect

Depending on how the platform is used, we handle the following:

• Account details: name, work email, agency name, city, country and role of each user.
• Business data: suppliers, contracted rates, packages, quotes, bookings, payments and supplier dues.
• Traveller data entered by agencies: names, contact numbers, travel dates, room preferences, and where needed, passport or ID details.
• Messages sent through the Traveller App on WhatsApp, and replies from travellers.
• Usage data: pages viewed, features used, device and browser type, used to keep the service reliable.

3.How we use it

We use data only to run and improve the service for the agency that owns it:

• Drafting itineraries and quotes from the agency's own suppliers and rates.
• Producing vouchers, payment records, reports and traveller updates.
• Providing support, security monitoring and service announcements.
• Improving features using aggregated and de-identified usage patterns.

4.AI drafting and your data

The AI Itinerary Builder uses the request text and the agency's own Supplier Book to produce drafts. One agency's rates, suppliers and traveller data are never used to draft trips for another agency.

Traveller passport and ID details are not used for AI drafting.

5.Passports, IDs and sensitive details

Passport and ID details are stored encrypted, visible only to staff the agency has authorised, and are never shown on quote links or trip pages. We never sell traveller data or use it for advertising.

6.Sharing

We share data only where needed to provide the service:

• With service providers who host, secure and deliver the platform, under confidentiality obligations.
• With WhatsApp Business services when an agency sends traveller updates.
• With suppliers or B2B agents only when the agency chooses to send them booking details.
• Where required by law or to protect the safety of travellers and users.

7.Retention and deletion

Agency data is kept while the account is active. After an account closes, agencies can export their data, and it is deleted within 90 days unless the law requires longer retention. Agencies can delete individual traveller records at any time.

8.Security

Data is encrypted in transit and at rest, access is role-based, and administrative access is logged. No system is perfectly secure, so we also ask agencies to use strong passwords and remove users who leave.

9.Your choices and rights

Users can access and correct their account details from their profile. Travellers who want to access, correct or delete their data should contact the agency that booked their trip; we will help that agency respond.

10.Cookies

We use essential cookies to keep you signed in and to protect forms against spam, and limited analytics to understand how the site is used. We do not use advertising cookies.

11.Contact

Questions about privacy can be sent through the Travel Desk page.