Skip to content
COMPLIANCE & LEGALBinding Agreement

Privacy Policy

We collect only what we need to run the service, and we protect it carefully.

1. Overview

This Privacy Policy explains how we collect, use and protect personal data when you use our website, developer portal and APIs.

2. Data we collect

  • Account data: name, email, organisation and role.
  • Usage data: API request metadata such as endpoint, status, latency and timestamps.
  • Traveller data that you send through the APIs to fulfil bookings, which we process on your behalf as a processor.

3. How we use data

  • To provide, secure and bill for the service.
  • To pass traveller data to suppliers only when needed to fulfil a booking.
  • To send service and security notifications.

4. Security

API keys are stored as one-way hashes. Request logs shown in the developer portal redact authentication headers, tokens and personal data. Data is encrypted in transit and at rest.

5. Retention

Request logs are kept for the retention period of your plan. Booking records are kept for as long as accounting and legal obligations require.

6. Your rights

You can request access to, correction of or deletion of your personal data by contacting our support team. Traveller requests should go to the travel business that collected the data.