Privacy Policy

1. Who operates TravelEngine

TravelEngine is operated by Kirill Kopot as an individual. For questions about personal information or to exercise your rights, contact kirill.kopot.dev@gmail.com.

This draft covers the website and travel operations platform. Operator address, provider details, international transfer arrangements and retention periods must be confirmed before this notice is finalized.

2. Our role and your agency’s role

For website enquiries, account administration and our relationship with users, Kirill Kopot determines why and how personal information is used. For client, guest and supplier information entered by an agency, the agency generally determines the purposes of processing and TravelEngine processes that information to provide the workspace.

If your information was entered by a travel agency, contact that agency first about your booking or data rights. We can help identify the appropriate workspace contact. Where required, processing on an agency’s behalf must be covered by a separate data processing agreement.

3. Information we process

Information you provide can include your name, email, company, account profile, support messages and uploaded files. Agency workspaces can contain client and supplier contacts, guest details, travel dates, preferences, identity document information, bookings, services, financial records and documents.

Technical information can include IP addresses, browser and device information, session identifiers, activity records and diagnostic logs. Optional website analytics can include page visits and interactions after you allow analytics.

4. Why we use information

We use information to provide accounts and workspaces, respond to requests, deliver service communications, maintain security, diagnose problems and meet applicable legal obligations. Where applicable, the legal bases are performance of a contract or steps requested before a contract, legitimate interests in operating and protecting the service, legal obligations, and consent for optional analytics or other activities requiring consent.

Agencies are responsible for establishing an appropriate legal basis and giving notices for the personal information they upload, including any sensitive guest preferences. Only upload information needed for your work and which you are authorized to provide.

5. Service providers, sharing and AI

Providing the service involves infrastructure, authentication, file storage, email delivery and diagnostic providers. AI features can send the relevant prompts, conversation context and selected files or workspace information to AI service providers to process a request. Avoid submitting information that is unnecessary for the task.

Workspace information is available to authorized team members and can be shared through links, exports or integrations enabled by your agency. Consider who can access a guest link before sharing it. Information may also be disclosed when legally required or necessary to address fraud, abuse or security incidents.

Provider identities, processing locations and applicable safeguards for transfers outside your country will be specified in the finalized notice and any applicable data processing agreement. This draft does not claim that information stays in a particular country.

6. Cookies and local storage

The service uses cookies or browser storage for sign-in, security, preferences and remembering analytics choices. The marketing website uses Google Analytics only after you allow optional analytics. You can change that choice using Analytics settings in the footer; declining optional analytics does not prevent access requests.

7. Retention and security

Information is retained according to its purpose, workspace needs and applicable legal obligations. Deletion can be subject to backup cycles, fraud prevention, recordkeeping requirements and legal claims. Contact us to request deletion or discuss export and retention before closing a workspace; this draft does not promise a fixed deletion deadline.

Access controls and technical safeguards help protect information, but no online service can guarantee absolute security. Keep your account credentials private and notify us if you suspect unauthorized access.

8. Your rights

Depending on applicable law, you may have rights to access, correct, delete or receive a copy of your information, restrict processing, object to certain processing, and withdraw consent without affecting earlier lawful processing. You may also complain to the data protection authority competent for your situation.

Send requests to kirill.kopot.dev@gmail.com. We may need to verify your identity and, for agency-controlled information, coordinate with the agency. Available rights and exceptions depend on applicable law.

9. Updates

We will update this notice when our practices or operator details change and identify the revision date above. Material changes will be communicated as required by applicable law.