Travel Workspace
Privacy Policy

1. Who this policy covers

Travel Workspace is a business-oriented mobile application published in connection with the TravBizz product family. The TravBizz website identifies Webfreeze Solution Private Limited as its operating company. The app is designed for travel agencies, tour operators, DMCs and their authorized users who connect to an organization-managed travel system.

This policy applies to data accessed or provided through the mobile app, its associated login/service endpoints and connected business workflows. A separate TravBizz website Privacy Policy also applies to visits to this website. Depending on your organization's setup, the organization may determine which customer records are entered and which team members have access.

2. Types of information the app handles

• Account and login information: agent or user code, work email, login credentials, authentication state, assigned roles, organization connection details and login history where supported.
• Business contacts: client, company and supplier names, phone numbers, email addresses, addresses and related communication details entered into the connected system.
• Trip and traveller records: travel dates, destinations, itineraries, booking/service information, traveller names and details, passenger-related information, enquiries, quotations and notes entered by authorized users.
• Financial and operational records: quotations, billing/payment status, client and supplier payment details, tasks, reminders, actions, document metadata and history.
• User-provided content: files, photos and documents selected for upload, service or cover images, attachments, itinerary instructions, AI prompts and messages initiated through app functions.
• Technical data: device/OS information, connectivity and error information or usage and security logs that may be processed by the app or connected services as needed to deliver and protect functionality.
• Notification data: notification preferences, related event details and device push tokens if push notifications are enabled and supported in the deployed app.

Travel Workspace primarily accesses the business records available to your authorized account. Exact fields depend on the features your organization enables and the data its users enter.

3. Why information is used

Information may be used to authenticate accounts, display relevant business data, manage enquiries and sales stages, create itineraries and quotations, process updates to customer or service records, maintain activities and reminders, show available payment records, support administrator controls, deliver chosen notifications and troubleshoot or secure the service.

When you choose an AI-assisted itinerary or media search feature, relevant prompts, destination keywords or selected content may be transmitted to the configured provider to return results. You should avoid entering unnecessary sensitive personal information into prompts.

4. Device permissions and local access

Some mobile features may request access to device resources when you use them:

• Camera: if a camera-based capture or upload action is available, permission may be requested to take a photo for an attachment or record.
• Photos and file picker: when you choose a file or image for a customer document, service attachment, cover image or other upload.
• Notifications: if push notifications are offered, permission may be requested to show alerts; in-app notification lists may operate separately.
• Phone and share actions: where you tap a call button or choose WhatsApp, email or the system share sheet, your device may open the corresponding app with selected details.

Availability and permission prompts depend on operating system, app version and activated features. You can review granted permissions in your device settings. The app does not need unrestricted access to your device merely to display contacts stored within your organization account.

5. Sharing and third-party services

Information you enter or access in the app is exchanged with the relevant organization-connected business service to complete your requested actions. Depending on configuration and user actions, information may be disclosed to:

• the organization and its authorized team members, subject to account permissions;
• hosting, storage, authentication, email, messaging, support or technical service providers involved in operating connected features;
• WhatsApp, an email provider or another recipient when you actively send messages, share PDF documents or use system sharing;
• configured AI generation, image search or media providers when you request AI outputs or search images;
• authorities or other parties when disclosure is legally required or necessary to investigate security incidents.

Messages, attachments or trip details sent to other applications may also be subject to those services' own privacy notices and settings. We do not describe every third-party provider as always active: connected integrations vary between organizations and releases.

6. Security and access controls

We aim to use reasonable technical and organizational safeguards appropriate to the service, including controlled account access and server-side permissions where implemented. Sensitive information should be shared only with authorized colleagues and recipients. No internet-connected service can guarantee absolute security.

Do not send passwords through ordinary email or support messages. Report suspected unauthorized access to the contact listed below and, where applicable, your organization administrator.

7. Data retention

Account, business, audit and operational data may be retained while needed to provide contracted services and to meet business, security, backup, dispute-resolution or legal obligations. Retention and deletion of records held in an organization-managed system may also depend on that organization's instructions, administrator permissions and contractual arrangements.

No fixed retention period or automatic deletion timeframe is promised here because it may differ by record type and connected organization. Where deletion is approved and feasible, it may be reflected in active systems subject to legally permitted retention and applicable backup lifecycles.

9. Access, correction and choices

Subject to applicable law and verification, users may request access to or correction of personal information, object to or withdraw consent for applicable processing, or raise a privacy concern. Business records may need to be corrected by an authorized administrator of the organization that manages them.

You can also review app permissions from your device settings. Revoking a permission can limit features that depend on it.

10. Children and intended use

Travel Workspace is intended for professional business use by authorized users and is not designed as a consumer service for children. Traveller records entered by organizations may include information about children travelling with a client; organizations should only enter information needed for a legitimate travel-service purpose.

11. Changes to this policy

We may update this policy as app features, integrations or data practices change. We will publish the updated text on this page and revise the last-updated date.

12. Privacy contact and publisher

TravBizz
Operated by Webfreeze Solution Private Limited
S-02, 2nd Floor, C-77, Sector-2, Noida, Uttar Pradesh – 201301, India
Email: info@travbizz.com
Phone: +91-9521508406

For account-related queries, please also contact your organization administrator if your login was created and managed by that organization.