Privacy Policy

TravelTidy provides travel advisors with booking information organization, itinerary generation and client delivery. We process uploaded emails, attachments, client names, dates, addresses, confirmation numbers and contact details only as needed to provide the service.

All data is transmitted over HTTPS, and databases and file storage are encrypted at rest. Workspace data is isolated through accounts and server-side permissions; original attachments are accessible only through controlled links.

Users can export workspace data and request deletion. Original emails are retained for 12 months by default. After workspace deletion, related data is removed or anonymized within the stated period, and backup data expires according to its lifecycle.

We do not sell customer or traveler personal information. LLM providers are not permitted to use customer content for model training under the commercial configuration and are bound by confidentiality and data processing obligations.

For requests related to data access, correction, deletion or processing records, contact us through the in-product support channel. The commercial version provides complete data-subject rights under applicable laws such as GDPR, CCPA and PIPL.