Privacy Policy

travflex Technologies ("travflex," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

1. Information We Collect

We collect information in the following categories:

a) Information you provide directly

• Account information: Agency name, your name, email address, phone number, and password when you create an account.
• Business information: Agency logo, GST/VAT numbers, business address, and payment details.
• Client data: Enquiry details, booking records, traveller names, passport information, visa documents, and contact details that you enter into the CRM.
• Communications: Messages, support requests, and feedback you send to us.

b) Information collected automatically

• Usage data: Pages viewed, features used, actions taken, timestamps, and session duration.
• Device data: Browser type, operating system, device type, screen resolution, and language preferences.
• Log data: IP address, access times, referring URLs, and error logs.

c) Information from third parties

• Integrated services: If you connect email, WhatsApp, or payment gateways, we receive data from those services in accordance with your authorisation.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process and manage your bookings, enquiries, and transactions.
• Send you transactional emails (account confirmations, booking updates, invoice receipts).
• Improve and personalise your experience on the platform.
• Monitor usage analytics to improve our product and services.
• Detect, prevent, and address technical issues and security threats.
• Comply with legal obligations and enforce our terms.

3. Data Sharing & Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• Service providers: Trusted third-party vendors who assist with hosting, payment processing, email delivery, and analytics, under strict data protection agreements.
• Legal requirements: When required by law, court order, or government regulation.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice.
• With your consent: When you explicitly authorise us to share your data with a specific third party.

4. Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular security audits and penetration testing
• Role-based access controls and multi-factor authentication
• Automated threat detection and monitoring

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and enable two-factor authentication on your account.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we will remove your personal data within 30 days, except where we are required to retain certain records for legal, tax, or compliance purposes. Anonymised, non-identifiable data may be retained indefinitely for analytics.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to the processing of your data for specific purposes.

To exercise any of these rights, please contact us at [email protected].

7. International Data Transfers

Your data may be processed in countries other than your own. We ensure that appropriate safeguards are in place for international transfers, including standard contractual clauses and data processing agreements with our service providers. For India-based users, data is primarily stored on servers within India or in jurisdictions with adequate data protection.

8. Children's Privacy

The Service is intended for use by travel agencies and their employees. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: