Privacy Notice
Version 1.0. Last updated 26 October 2026.
This notice explains what personal data Triplovis handles and why. Triplovis is a service for travel businesses, operated by its owner under the name "Triplovis" ("we", "us"). It follows the principles of India's Digital Personal Data Protection Act, 2023.
There are two situations. For the people who sign in to Triplovis, we decide why and how their account data is used. For the travellers, staff and suppliers whose details a travel business enters into Triplovis, that business decides why and how the data is used, and we handle it on the business's behalf.
1. What we collect
- Account details: your name, email address, an optional phone number, and your password. The password is stored in a scrambled (hashed) form, so we cannot read it.
- Organisation details: the business name, legal name, currency and time zone you enter when you set up.
- The business information you or your colleagues enter: for example suppliers, rates, quotations and notes. It may include personal data about travellers, staff and suppliers, depending on what the business chooses to enter.
- Technical records: the web server keeps ordinary access logs (such as the time, the page requested and the internet address), and the service keeps a record of important actions, such as switching modules on or off.
2. Why we use it, and the basis for it
We do not sell personal data, and we do not use it for advertising.
- To create your account and let you sign in. This is based on your consent and on the invitation you accepted.
- To provide the service to the business you work for, and to keep it secure and working.
- To answer your messages to support@triplovis.com.
- To meet legal duties, if any apply.
3. How it is protected
This is what is in place today, not a promise of more:
- The site is served over HTTPS.
- Passwords are hashed. Sign-in uses a protected cookie that web pages cannot read.
- Each organisation's data is separated from other organisations' data in the database, and this is tested.
- Access inside an organisation depends on the role a person has been given.
- The service runs on a shared server during early access. We do not yet offer encryption of stored data, scheduled backups or a guaranteed way to recover deleted data. Please keep your own copies of anything important.
4. How long we keep it
We have not set automatic deletion periods yet. We keep data while an account is active. If you ask us to close an account or delete data, we will do so, except for records the law requires us to keep.
6. Your rights and how to complain
Under Indian law you can ask what personal data we hold about you, ask us to correct or complete it, ask us to erase it, nominate a person to exercise your rights if you cannot, and complain about how it is handled.
To use any of these rights, or to make a complaint, write to support@triplovis.com. We will reply within a reasonable time. If you are not satisfied, you may approach the Data Protection Board of India as provided by the Act.
If your details were entered by a travel business, please also contact that business, because it decides how the data is used.
7. Children
The service is for businesses and is not meant for children. A travel business may record travellers who are children; that business is responsible for handling such data lawfully.
8. Changes
We may update this notice. The date at the top shows the latest version.
9. Contact
Triplovis, operated by its owner. Write to support@triplovis.com.