TRAVULES Customer and Website Privacy Policy

About this policy

This policy explains how Travules LLC handles personal information when you visit the TRAVULES website, create a customer account, ask us to plan a trip, or use customer tools. Read the separate Partner Application Privacy Notice if you apply to become a partner.

1 Who is responsible

Travules LLC, a Texas domestic limited liability company in the United States, operates TRAVULES and is responsible for the personal information described here. The Privacy Team at Travules LLC handles privacy requests, retention reviews, and dispute and legal holds. Contact legal@travules.com about this policy or your information.

2 Information we collect

Account and profile information: your email address, account identifier, verification status, name, connected sign-in account details, and profile photo if you provide one. Customer profiles can also contain your phone number, home city, country, travel interests, preferred destinations, travel style, party preferences, and budget preferences.

Trip and traveller information: destinations, occasion, travel month or dates, flexibility, trip length, numbers of adults and children, budget, requested help, notes, and traveller names you add. We also keep requests, proposals, itineraries, acceptance and withdrawal records, booking status, and change or cancellation records generated through the service.

Communications: your name, email address, topic and message when you use Contact; messages exchanged about your trip; and message timestamps, sender details and read-status records.

Technical and security information: authentication and session identifiers, device and browser information, network information such as IP addresses processed by our service providers, and records of account activity, access, submissions and changes needed to operate and protect the service.

Information comes from you, a person arranging travel with your authority, your selected sign-in provider, the travel designer or partner handling your request, and activity in our tools. Required fields are identified in the relevant form. Without required information, we may be unable to create the relevant profile, respond to your inquiry or process your request.

Please provide information about another traveller only when you are authorized to do so and have shared this policy with them. Do not put passport scans, payment card details, passwords, or unnecessary health or other sensitive information into contact forms, trip notes or chat. Passport capture and online payment are not available in this website release.

3 How we use information

We use the information described above to create and maintain accounts; authenticate users; save profiles and trip requests; match requests with travel designers or partners; prepare and review proposals; manage trip communications and records; respond to inquiries; prevent misuse; troubleshoot errors; and maintain accurate records for security, disputes and applicable legal obligations.

Account creation or submission of a trip request is not consent to unrelated marketing. Business notification email and the account notification-preference controls are unavailable in this release. Authentication emails, including sign-in codes, are handled separately through our authentication service.

4 Google and Apple sign in

Clerk supplies our authentication service. When Google or Apple sign-in is available and you choose to use it, Clerk receives the identity information the provider makes available for authentication, such as an account identifier, name, email address and, where supplied, profile image. Apple may provide a private relay email address. We use these details to identify you, connect the sign-in method to your TRAVULES account, and display and maintain your account profile. Our application database keeps the account identifier, verified email address and name needed for the account.

The intended Google connection is for sign-in only. It does not provide access to your Gmail messages, Google Drive files, contacts or calendar. Your Google or Apple password is not provided to TRAVULES. Identity information is handled by Clerk and our hosting infrastructure for the account purposes described in this policy. Identity details relevant to a trip, such as your name and contact details, may also be available to the assigned travel designer as described below.

Where a connection is available, you can disconnect it in your account settings or manage access through the provider. Disconnecting sign-in does not delete your TRAVULES account or existing trip records. You can contact us to request deletion separately. Use only the sign-in methods offered on the page you are using.

5 Who receives information

Authorized TRAVULES personnel can access information needed for their support, trip operations, administration or security duties.

The assigned travel designer or approved partner can receive your trip request, relevant identity and contact details, proposals and the conversation for their assignment, so they can prepare and manage your trip. Information supplied by those people can become part of your trip record.

Clerk processes authentication, connected account and session information, profile photos and certain saved account details, including traveller names. Railway hosts the website and application database. These providers process information needed to supply their services.

Google receives technical connection information when your browser loads Google Fonts used on the website. If you select Google or Apple sign-in, that provider also processes the authentication interaction under its own privacy terms.

We may disclose relevant information when required by applicable law or when necessary to address a dispute, investigate abuse, or protect people, accounts and services.

6 Cookies and browser storage

Clerk uses cookies and similar browser mechanisms to maintain sign-in sessions and support authentication and security. Blocking these may prevent account features from working. Your browser lets you manage cookies and stored website data.

Plan My Trip stores an unfinished draft in browser session storage to carry your choices through the planning and sign-in flow. The draft includes trip choices and notes. The application rejects and clears a draft older than 24 hours when it next reads it; that is not a guarantee that every browser copy is erased at exactly 24 hours. Clearing site data also removes the browser copy.

The Uppi interface currently has no connected AI service. Text entered there is kept in your browser local storage, together with the recent conversation and whether the window is open. The interface retains up to 40 entries and has no time-based expiry. Use its new-chat control or clear website data to remove that stored conversation. Closing the chat window alone does not clear it. In this release, Uppi does not send those messages to an AI provider or submit a trip request.

Browser storage may be accessible to other people using the same browser profile. Clearing browser data does not delete information already submitted to TRAVULES or held in your account.

7 Storage security and retention

Railway hosts our application and database in the United States. Clerk also uses US-hosted infrastructure. Information may be accessed or processed where TRAVULES, assigned partners and service providers operate; this is not an assurance that all processing occurs only in the United States. Contact us for information about the providers, locations and safeguards relevant to your information.

Access checks and authentication help restrict access to account and trip records. No website, transmission or storage system can be guaranteed completely secure. Protect your email and sign-in accounts and use the account controls to sign out other active sessions when needed.

We retain information according to its purpose: account and profile information while needed to maintain the relationship; inquiries and trip records while needed to respond, arrange or administer travel; and relevant history while needed for security, legal recordkeeping, complaints or disputes. Retention decisions consider whether a request remains active, whether records are needed to explain a decision or transaction, and whether a legal or dispute hold applies. The Privacy Team at Travules LLC is responsible for retention reviews and holds.

The following category defaults have been selected for the retention schedule. Active accounts are retained while used, with a review after 24 months of inactivity. Closed enquiries that did not become bookings have a 12-month retention default. Diagnostic logs have a 30-day default; minimal security logs have a six-month default; and minimal privacy-request records have a 24-month default. Terms acceptance evidence is reviewed 24 months after account closure; that checkpoint is not an automatic deletion date. Necessary records for future paid-booking accounting have a provisional seven-year default, subject to applicable accounting and recordkeeping requirements.

These are selected policy defaults, not a claim that deletion mechanisms are already operating. Category start dates, implementation and applicable exceptions must be verified before the schedule is put into operation. Retain only what remains necessary where law, an active request, a complaint, a dispute or a legal hold requires it. Encrypted database recovery copies have been created and transferred to an owner-controlled computer in the United States. Recurring scheduled backups and fixed archive expiry are not operating. A deletion request must account for relevant application, provider and recovery copies and any required holds; account closure alone does not establish that every copy has been removed.

8 Your choices and privacy requests

You can edit available profile fields and update or remove your profile photo through your account. You can also manage supported connected sign-in methods and sign out other active sessions. Some account controls are unavailable in this release.

Self-service account deletion is currently unavailable. Opening the deletion control does not submit a request. To ask for access, correction, deletion, a copy of your information, or information about retention, email legal@travules.com. Please send privacy requests to legal@travules.com rather than through the website Contact form, so they reach the team that handles them. Describe your request and the account or trip concerned; do not send identity documents or other sensitive evidence unless we arrange an appropriate way to provide it.

We may need to verify your identity or your authority to act for someone else. Depending on the law that applies to you and to TRAVULES, you may have rights to access, correct, delete or obtain a portable copy of information; object to or restrict certain processing; withdraw consent where processing relies on consent; or opt out of certain sale, targeted advertising or profiling activities. These rights can have conditions and exceptions. You may also have a right to complain to a relevant privacy regulator.

If we decline a request, you can ask the Privacy Team at Travules LLC to review the decision by emailing legal@travules.com with the subject “Privacy appeal” and identifying the request and your concern. We will handle requests and any applicable appeal within the time required by the law that applies. We will not discriminate against you for exercising privacy rights protected by applicable law. Certain information may need to be retained for legal obligations, an unresolved dispute or security purposes.

9 Children and information about companions

Customer accounts are for adults aged 18 or over arranging family travel. Trip requests can include the number of children travelling, and adult customers can add companion names. Please limit information about children to what is needed for the request and provide it only with appropriate parental or guardian authority. Do not submit a child’s identity documents or unnecessary sensitive information through these forms. If you believe a child has provided information directly through an account or form, or you have a concern about information concerning a child, contact legal@travules.com so we can review it and take appropriate steps under applicable law.

10 Changes and contact

We will update this policy when our handling of personal information changes and identify the effective date of the revised version. Where required, we will provide further notice or obtain consent before using information for a new purpose.

Privacy contact: legal@travules.com

Privacy contact team: Travules LLC — Privacy Team

Operator: Travules LLC, Texas, United States