Introduction & Scope
Velotrav ("we", "us", "our", or the "Platform") provides travel business technology, software-as-a-service (SaaS) ERP, CRM, itinerary building, and operations management tools tailored for travel agencies, destination management companies (DMCs), and tour operators.
This Privacy Policy outlines the types of personal and organizational data we collect, how it is stored, processed, and safeguarded when you access our marketing website (velotrav.com), create an account, schedule demonstrations, or use the Velotrav ERP platform.
Information We Collect
We collect information across several categories based on how you interact with our platform:
Account & Business Info
Company legal name, agency type, administrator names, email addresses, phone numbers, and billing addresses.
Traveler & Lead Data
Passenger names, contact details, itineraries, visa application details, and inquiries entered by your agency into your ERP database.
Usage & Technical Data
IP addresses, browser signatures, operating system, login timestamps, and audit event logs within your agency portal.
Subscription & Payments
Transaction receipts, plan tiers, and billing identifiers. Credit card data is handled exclusively by PCI-DSS certified gateways.
How We Use Information
- Platform Delivery: Provisioning your isolated agency tenant database, domain routing, user authentication, and system features.
- Customer Support & Demos: Responding to demo booking requests, troubleshooting ERP tickets, and guiding your team during onboarding.
- Security & Audit Tracking: Monitoring against unauthorized login attempts, detecting anomalies, and keeping tamper-resistant audit logs.
- Platform Enhancements: Analyzing non-identifiable usage statistics to optimize database query performance and develop requested modules.
Multi-Tenant Data Security & Isolation
Velotrav is architected with strict multi-tenant database separation. Each agency operating on the Velotrav SaaS network has dedicated tenant database credentials and isolated storage pools:
Agency data, traveler profiles, financial figures, and leads are never merged into a shared multi-tenant table. Cryptographic segregation and dynamic database connection resolution guarantee your business secrets remain strictly private.
All communications across our servers use TLS 1.3 encryption. Passwords and sensitive API keys are hashed with high-cost Bcrypt or Argon2 algorithms.
Data Retention & Backups
We retain agency data for as long as your subscription is active. Upon voluntary termination or cancellation of your account, you can request a complete export of your database and files. We preserve automated disaster-recovery backup snapshots for up to 90 days before permanent zero-overwrite deletion.
Your Rights & Controls
As an agency administrator or customer, you have the right to:
Contact Our Privacy Team
If you have questions, feedback, or requests regarding this Privacy Policy or our data protection protocols, please reach out to our privacy officer: