Trip-X customer app privacy policy

Travel X for Information Technology & Marketing LLC operates the Trip-X Travel app. This policy covers the customer app version currently operated by Travel-X for testing and its connected services. A separate company operating its own commercial deployment must present a policy for its handling of data before use.

Information we process

• Account, contact, sign-in and verification details.
• Traveller and passport details, images and attachments you choose to provide.
• Searches, requests, bookings, tickets, vouchers, changes, cancellations and refunds.
• Amounts, currencies, selected payment methods, payment status and wallet records needed for accounting and reconciliation.
• Support messages, operational and security records, and a location or address you select for transport.
• Additional details required for a visa or travel insurance request, which may include health information relevant to medical coverage during travel.

Passport image reading

When you choose to scan a passport, the app sends the image to the Trip-X server to extract fields. When Google Cloud Vision is enabled, the server may send the image to that service for processing. You review and correct the extracted fields before saving them. Scanning does not automatically attach the image to a service request.

Use and sharing

We use information to operate the account, prefill forms after your selection and review, show prices and availability, fulfil requests you confirm, handle payments and refunds, provide support and security, and meet accounting obligations. We may share what is needed with travel, payment, hosting and email providers and authorities where the service requires it. We do not sell passport or account information for independent marketing. Travel information may be transferred to the destination country, a supplier or a technical provider to fulfil the service.

Security, retention and deletion

We use encrypted connections and appropriate access controls. We keep test data while needed to verify the service. After an account-deletion request and identity verification, we review the request and explain its outcome within 30 days, and remove data from active systems where no retention reason remains. Specific booking, payment or audit records may remain for a legal or financial obligation, dispute or security reason, with restricted access and use. Backups may temporarily contain data removed from active systems until their storage cycle ends. We check the applicable period and explain the retained categories, reasons and duration when handling your request. If a backup is restored, we reapply completed deletion requests.

Request account and data deletion

Contact

For privacy inquiries and deletion requests: privacy@trip-x.online.