TripDM Privacy Policy

Welcome to TripDM ("TripDM", "we", "our", or "us").

TripDM is an online marketplace that connects travelers with independent travel agents and travel service providers through a direct messaging platform.

Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use our website, mobile application, or related services (collectively, the "Platform").

By accessing or using TripDM, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of this Policy

This Privacy Policy applies to:

• Website visitors
• Registered users
• Travelers
• Travel agents
• Tour operators
• Business partners using TripDM services

This Privacy Policy applies only to information collected through TripDM and does not apply to third-party websites or services that may be linked from our Platform.

2. Information We Collect

To provide our services, we collect different types of information.

2.1 Personal Information

Depending on how you use TripDM, we may collect:

• Full Name
• Email Address
• Mobile Number
• Profile Photograph
• Gender (optional)
• Date of Birth (optional)
• City
• State
• Country
• Postal Code
• Preferred Language

2.2 Travel Information

When searching or communicating with travel agents, you may voluntarily provide:

• Destination
• Departure City
• Travel Dates
• Number of Travelers
• Budget
• Travel Preferences
• Hotel Preferences
• Transportation Requirements
• Special Requests

This information is shared only as necessary to facilitate your inquiry with the selected travel agent.

2.3 Vendor Information

Travel agents registering on TripDM may be required to provide:

• Company Name
• Business Registration Number
• GST Number (if applicable)
• PAN Number (if required)
• Office Address
• Business Email
• Business Phone Number
• Website
• Company Logo
• Bank Details (where applicable)
• Government-issued identification (for verification, if required)

TripDM may request additional documentation to verify a vendor's identity or business.

2.4 Account Information

When creating an account, we may collect:

• Username
• Password (stored securely using industry-standard hashing techniques)
• Login History
• Device Information
• Account Preferences

2.5 Communication Information

If you use TripDM's messaging features, we may process:

• Messages exchanged through the Platform
• Time and date of communications
• Attachments shared through the Platform
• Customer support inquiries

We may access message content only where necessary for platform operations, fraud prevention, legal compliance, or when investigating reported misuse.

2.6 Payment Information

TripDM does not collect, process, receive, or facilitate payments between Travelers and Vendors through the Platform.

All payments for travel packages, bookings, accommodations, transportation, or any other travel-related services are made directly between the Traveler and the Vendor using payment methods mutually agreed upon by them.

As TripDM is not involved in the payment process:

• We do not collect or store debit card, credit card, UPI, bank account, wallet, or other payment credentials of Travelers.
• We do not process, authorize, or settle payments on behalf of Vendors.
• We do not issue invoices or receipts for transactions between Travelers and Vendors.
• We do not hold customer funds in escrow or act as an intermediary for payments.

TripDM may collect limited information related to vendor subscriptions or lead credit purchases (if applicable), such as payment confirmation, invoice details, transaction references, or billing information, solely for managing the Vendor's TripDM account and complying with applicable legal or tax obligations.

Travelers are advised to verify the Vendor's identity, payment details, and terms before making any payment. Any payment dispute, refund request, chargeback, or financial claim arising from a transaction between a Traveler and a Vendor is solely between those parties and is governed by their agreement. TripDM is not responsible for such transactions or disputes.

2.7 Automatically Collected Information

When you use TripDM, we may automatically collect:

• IP Address
• Browser Type
• Device Type
• Device Identifier
• Operating System
• Screen Resolution
• Language Settings
• Referring Website
• Pages Visited
• Search History
• Clickstream Data
• Time Spent on Pages
• Session Duration
• Crash Reports
• Error Logs
• Approximate Geographic Location (derived from IP or device settings, where permitted)

3. How We Use Your Information

We use personal information to:

• Create and manage your account.
• Connect travelers with travel agents.
• Enable messaging between users and vendors.
• Provide customer support.
• Improve our Platform and services.
• Personalize search results and recommendations.
• Detect fraud and suspicious activity.
• Protect users and the Platform.
• Process transactions (where applicable).
• Send service-related communications.
• Comply with legal obligations.
• Analyze platform performance and usage trends.

We will only use your information for purposes compatible with those described in this Privacy Policy or as otherwise permitted by law.

4. Cookies and Tracking Technologies

TripDM uses cookies and similar technologies to improve functionality and user experience.

Types of Cookies

Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of TripDM.

5. How We Share Information

TripDM does not sell personal information.

Travel Agents

To facilitate inquiries and communication initiated by you.

Service Providers

Such as cloud hosting providers, analytics providers, customer support tools, email service providers, payment processors, SMS or OTP providers.

These providers process information only on our behalf and under contractual obligations.

Legal Authorities

We may disclose information where required by law, court order, to comply with legal obligations, protect TripDM, our users, or the public, or to investigate fraud or misuse.

Business Transfers

If TripDM undergoes a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of that transaction, subject to applicable law.

6. Data Retention

We retain information only for as long as necessary to:

• Operate the Platform.
• Fulfill contractual obligations.
• Resolve disputes.
• Prevent fraud.
• Comply with legal, accounting, and regulatory requirements.

Retention periods may vary depending on the nature of the information and applicable laws.

When information is no longer required, we will delete or anonymize it where reasonably practicable.

7. Security

TripDM uses reasonable technical and organizational measures to protect personal information, including:

• HTTPS encryption
• Password hashing
• Firewalls
• Access controls
• Secure servers
• Monitoring and logging
• Periodic security updates
• Backup procedures

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. Users should also take appropriate precautions, such as safeguarding account credentials.

8. User Rights

Subject to applicable law, users may have the right to:

• Access personal information we hold.
• Correct inaccurate or incomplete information.
• Request deletion of personal information.
• Withdraw consent where processing is based on consent.
• Object to certain processing activities.
• Request restriction of processing in certain circumstances.
• Request a copy of personal information in a portable format, where applicable.

Requests may be subject to identity verification and legal limitations.

9. Account Deletion

Users may request deletion of their TripDM account by contacting us or using any available account management tools.

Please note:

• Some information may be retained where required by law or for legitimate business purposes, such as fraud prevention or dispute resolution.
• Messages or transaction records may be retained where necessary to maintain the integrity of platform records.

10. Children's Privacy

TripDM is intended for individuals who are at least 18 years of age or the age of majority in their jurisdiction. We do not knowingly collect personal information from children.

If we become aware that personal information has been collected from a child without appropriate authorization where required, we will take reasonable steps to delete that information.

Parents or guardians who believe their child has provided information to TripDM should contact us immediately.

11. International Data Transfers

TripDM may use service providers located in different countries. As a result, personal information may be processed or stored outside your country of residence.

Where required by applicable law, we will take appropriate safeguards to protect personal information transferred internationally.

By using TripDM, you acknowledge that your information may be processed in jurisdictions with data protection laws that differ from those in your country.

12. Third-Party Links

TripDM may contain links to third-party websites, payment providers, or social media platforms.

We are not responsible for the privacy practices, security, or content of third-party websites.

Users should review the privacy policies of those third parties before providing personal information.

13. Changes to this Privacy Policy

TripDM may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

The updated version will be published on our Platform with the revised "Last Updated" date.

Continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

• Email: privacy@tripdm.com
• Support: support@tripdm.com
• Website: www.tripdm.com
• Business Address: L-2808, Rustomjee Azzaino, Thane, 400601

If your jurisdiction requires the appointment of a Grievance Officer or Data Protection Contact, their details will be made available on the Platform.