Information Collection and Use
We collect several different types of information for various purposes to provide and improve our Service to you.
Types of Data Collected
Personal Data: While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personal Data may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
- Cookies and Usage Data
- Business information
- Payment and transaction data
Analytics and Session Tracking
We use Umami Analytics to collect anonymous usage data (such as pages visited, time on site, referring URL, and device type). This data is hosted on our own infrastructure for privacy and is not shared with third-party advertising networks.
To provide better customer support and a seamless experience, we may link your browsing activity across sessions using a local identifier (lighthouse_email) stored on your device. This allows us to understand your journey and provide relevant assistance if you contact us.
Google User Data: When you authorize our Service to access your Google account via Google Workspace APIs, we collect and process certain data from your Google account, such as emails, calendar events, contacts, or files, depending on the features you use and the permissions you grant. This data is used solely for the purpose of providing our Service to you, as described in this privacy policy.
- We do not use Google user data to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models.
- Our use of Google user data is subject to Google's API Services User Data Policy, and we comply with all applicable requirements.
WhatsApp Business data: When a travel business connects its WhatsApp Business account to Tripdocks, through Meta's signup flow or with its own Meta app credentials, we receive and store the following on that business's behalf: the identifiers of its WhatsApp account and phone number; the messages its customers send to and receive from that number, including photos, documents and delivery and read status; each customer's WhatsApp profile name and phone number or WhatsApp user ID; and the business's message templates and their approval status. If the business keeps using the WhatsApp Business app on the same number, Meta also shares the business's contacts, up to six months of its past one-to-one chats, and messages it sends from the app afterwards.
We use this data only to show the business's conversations in Tripdocks, link them to the right enquiry, send the replies and templates the business chooses, and keep its templates up to date. The travel business decides what is sent and controls its customers' data; Tripdocks processes that data on its behalf.
- We do not use WhatsApp data for advertising, sell it, or use it to train generalized artificial intelligence (AI) or machine learning (ML) models.
- Our use of WhatsApp data follows Meta's WhatsApp Business terms and policies.
Use of Data
We use the collected data for various purposes, including:
- To provide and maintain our Service
- To notify you about changes to our Service
- To provide customer support
- To gather analysis or valuable information so that we can improve our Service
- To monitor the usage of our Service
- To detect, prevent, and address technical issues
- To access and use Google Workspace APIs on your behalf, with your consent, to provide the features of our Service
- To connect a business's WhatsApp number and send and receive its messages through the WhatsApp Business Platform
Disclosure of Data
We share your personal data, including Google user data, only in the following circumstances:
- With Google LLC, as necessary to access and use the Google Workspace APIs.
- With Meta Platforms, as necessary to send and receive WhatsApp messages and manage a business's WhatsApp account through the WhatsApp Business Platform.
- With third-party service providers who assist us in operating our Service, such as hosting providers, analytics services, or customer support tools. These providers are contractually obligated to protect your data and only use it for the purposes we specify.
- When required by law or to protect our legal rights.
We do not sell, rent, or otherwise disclose your personal data, including Google user data, to third parties for their own marketing or other purposes.
Data Security and Protection
The security of your data is of utmost importance to us. We implement and maintain comprehensive technical, physical, and administrative safeguards to protect your personal data, including sensitive data obtained from Google Calendar and other Google Workspace APIs.
Technical Security Measures
- Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data is encrypted both in transit and at rest using AES-256 encryption.
- Secure Data Storage: Your data is stored in secure, access-controlled databases with encryption at rest. We use reputable cloud service providers with SOC 2 Type II certification.
- Access Controls: We implement strict access controls and authentication mechanisms. Only authorized personnel with a legitimate business need have access to user data.
Data Retention and Deletion
We retain your personal data only for as long as necessary to provide the Service to you or as required by applicable laws and regulations. When you delete your account or request deletion of your data, we will delete your personal data from our systems within a reasonable timeframe, typically within 30 days.
You can request deletion of your data by contacting us at [email protected]. Additionally, you can revoke our access to your Google account at any time by visiting your Google account settings.
A business can disconnect its WhatsApp number at any time, in Tripdocks or in the WhatsApp Business app. After that we stop receiving its WhatsApp data. Conversations already in Tripdocks stay part of the business's records until the business deletes them or closes its account. Our data deletion page explains how to ask for WhatsApp data to be deleted.
GDPR Compliance
If you are located in the European Union (EU), European Economic Area (EEA), or the United Kingdom (UK), the General Data Protection Regulation (GDPR) applies to the processing of your personal data. We process your data based on consent, contract performance, legitimate interests, and legal obligations.
You have rights under GDPR including the right of access, rectification, erasure, restriction of processing, data portability, and objection. To exercise any of these rights, please contact us.
Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: [email protected]