Privacy Policy

TripzoCRM is a customer-relationship-management platform for travel agencies (“TripzoCRM”, “we”, “us”, “our”).

It is available as a web application at tripzocrm.com, a mobile app for Android and iOS (com.tripzo.crm) that also runs as an installable web app, and a public page each agency can publish for its customers.

If you are a traveller whose details are held by an agency that uses TripzoCRM, please contact that agency first about your data. Section 8 explains what to do if they do not respond.

Your agency may connect its own WhatsApp Business number and Instagram professional account to TripzoCRM, so its team can manage both from one shared inbox. These channels are part of Meta’s Business Messaging Platform, and messages sent or received through them also pass through Meta’s own systems.

Our Terms of Service explain in detail how TripzoCRM uses the WhatsApp Business Platform and the Instagram Messaging API, what data we share with Meta to operate them, and Meta’s own role as the platform provider.

We collect only the data TripzoCRM needs to operate.

Account details

• Your name, email address, phone number, role and the agency you belong to. Passwords are stored in hashed form; we never see them in plain text.
• If you ask to join an agency, that agency’s administrators see your name, email and phone number so they can approve you.

What agency staff add to the CRM

• Leads and their contact details, trip requirements and follow-ups.
• Packages, itineraries, bookings, invoices, payments and trip finances.
• Tasks, notes and supplier details.
• Files and images staff upload, such as tickets or passports.

Conversations

When an agency connects WhatsApp or Instagram, we store the resulting conversations: message content, attachments, the customer’s phone number or Instagram ID, and their profile name.

Device and technical details

• Your device model, operating-system version and app version, so we can fix problems and send the right app update.
• A notification token, if you turn notifications on.
• Basic logs and error reports. These never include your password or message content.

App permissions

The app asks for access to your photos (only when you pick an image), notifications and the clipboard (only when you copy or paste). You can turn these off at any time in your device settings.

• To sign you in and show you what your role allows.
• To run the CRM: leads, chats, packages, invoices, finances, tasks and reports.
• To send and receive messages on the channels your agency connected.
• To send the notifications you have turned on.
• To fix bugs, deliver app updates and keep the service secure.
• To send important service emails, such as outage or policy notices.

We do not sell your data, show you ads, or share it with data brokers.

All data is stored on TripzoCRM’s own servers, which we own, run and manage ourselves. Messages on WhatsApp and Instagram also travel through Meta’s network, and notifications reach your phone through Google’s and Apple’s notification services.

• Everything sent between the apps and our servers is encrypted (HTTPS).
• Each agency’s data is kept separate. Staff of one agency can never see another agency’s data.
• Our servers check your role on every request, so you can only do what your role allows.
• A small number of our own team can open an agency’s account to fix problems, and change data only when the agency asks.

The app keeps your sign-in and recent chats on your phone so it opens quickly. They are cleared when you sign out. Please sign out of any device you do not own.

If there is ever a security breach that affects you, we will tell you and the authorities as the law requires.

• CRM records are kept for as long as the agency uses TripzoCRM.
• When an agency stops using TripzoCRM, we retain its data only as long as needed to wind down the account and meet our legal obligations, then delete it.
• Logs are kept only as long as needed to run the service and meet legal requirements, then deleted.

You can ask us to show, correct or delete the personal data we hold about you, or give you a copy of it. You can also withdraw any consent you have given, such as for notifications.

If you work at an agency

You can delete your own account in the app under Settings → Delete account. This signs you out, blocks further sign-in, and removes you from your agency’s team list. Leads, bookings and invoices you created belong to the agency and stay with it.

If you are a traveller

Contact the travel agency you dealt with, as it controls your record. If you cannot reach it, email us and we will help your request reach the agency.

We reply to requests within 30 days.

Our Service is a work tool for travel-agency staff and does not address anyone under the age of 18 (“Children”).

We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child without verification of parental consent, we take steps to remove that information from our servers.

A child’s details may still appear in our systems as a passenger on a family booking that agency staff create; that information is entered and controlled by the agency, not the child, and is handled like any other customer record under Section 1.

If you believe that we have collected personal information from someone under the age of 18, please contact us at support@tripzocrm.com.

We may update this policy when the product or the law changes. The date at the top shows the current version. For important changes, we will let agency administrators know in the app or by email before they take effect.

For any privacy question or request, email us at support@tripzocrm.com.

Please also read our Terms of Service. Meta’s own handling of WhatsApp and Instagram messages is described in the WhatsApp Privacy Policy and the Instagram Privacy Policy.