Privacy Policy

Last Updated: 7 July 2026

This Privacy Policy explains how TRAVCO LLC, a company registered in Sharjah Media City, United Arab Emirates, with its registered address at Sharjah Media City, UAE (“TRAVCO”, “we”, “us”, or “our”), collects, uses, discloses and protects personal information in connection with our website, partner dashboard, partner onboarding, commercial communications and related business services.

You can contact us about this Privacy Policy or any privacy request at:

TRAVCO LLC

Sharjah Media City, UAE

Email: legal@travco.ai

This Privacy Policy is intended for visitors to travco.ai, prospective partners, business contacts, partner account users and other individuals interacting with TRAVCO in a business context. Separate privacy terms may apply to traveller-facing services, including CheckVisa websites, hosted flows, widgets, subdomains or end-user lookup services.

1. Scope of this Privacy Policy

This Privacy Policy applies to:

our public website at travco.ai and any TRAVCO-controlled pages that link to this Privacy Policy;

our partner dashboard, onboarding flows, demo environments and partner account areas;

communications with prospective and existing travel providers, partners, agencies, operators, suppliers and business users;

marketing, analytics, advertising and retargeting activities carried out by or on behalf of TRAVCO;

support, billing, commercial, legal and administrative processing related to our partner services.

This Privacy Policy does not replace any data processing agreement, order form, partner agreement or separate privacy notice that applies to a specific TRAVCO or CheckVisa product. If there is a conflict between this Privacy Policy and a signed agreement with TRAVCO, the signed agreement will apply to the extent of the conflict.

2. Key Definitions

For this Privacy Policy:

“Dashboard” means the TRAVCO partner dashboard or administrative interface used by partners and authorised users.

“Partner” means a travel provider, cruise line, tour operator, airline, travel agency, education provider, government-related travel unit, employer mobility provider or other business customer using TRAVCO services.

“Platform” means the TRAVCO software, dashboard, widgets, partner tools, hosted flows, APIs, reporting tools, integrations and related services.

“Widget” means a branded or configurable travel-requirement interface that may be embedded on a partner website, app, campaign page or hosted flow.

“CheckVisa Hosted Flow” means a traveller-facing lookup, requirement-check, form or hosted experience made available through checkvisa.io or related domains or subdomains.

“End User” or “Traveller” means an individual who interacts with a Widget, CheckVisa Hosted Flow or partner travel-requirement experience.

“Personal Information” or “Personal Data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identified or identifiable person.

“Usage Data” means technical, device, event, interaction, analytics, performance, log, diagnostic and similar data generated through use of the Website, Dashboard, Platform, Widget or related services.

3. Our Role as Controller or Processor

For personal information collected through travco.ai, partner onboarding, billing, account administration, website analytics, marketing, commercial communications and partner relationship management, TRAVCO generally acts as a controller or equivalent business under applicable privacy laws.

For personal information that a Partner submits to the Platform, or that TRAVCO processes on behalf of a Partner through a Widget, CheckVisa Hosted Flow or partner-configured workflow, TRAVCO may act as a processor or service provider, and the Partner may act as the controller or business. In that case, the Partner is responsible for providing appropriate privacy notices, obtaining required consents, identifying the lawful basis for processing and responding to End User privacy requests, unless otherwise agreed in writing.

Where TRAVCO determines the purposes and means of processing certain Platform data, including account security, fraud prevention, service improvement, billing, aggregated analytics or compliance processing, TRAVCO may act as an independent controller for those limited purposes.

4. Information We Collect

We may collect the following categories of information.

4.1 Information You Provide Directly

We may collect information you provide when you contact us, book a demo, request pricing, sign up, access the Dashboard, complete onboarding, use support, submit forms or communicate with us. This may include:

name;

business email address;

phone number;

company name;

job title;

country, region and business address;

login credentials and account identifiers;

billing details, tax details and commercial contact details;

partner onboarding information;

brand, widget, domain, campaign and integration preferences;

support messages, meeting notes, feedback and correspondence;

any files, documents, screenshots or information you choose to provide.

4.2 Partner Account and Dashboard Data

When a Partner uses the Dashboard or Platform, we may collect:

authorised user details;

workspace, organisation and role permissions;

partner configuration settings;

widget settings and branding assets;

integration details;

API usage and technical logs;

billing plan, subscription, metered usage and credit balance information;

audit logs, user activity and security events;

reports, exports and dashboard interactions.

4.3 Traveller, Intent and Requirement Data Processed Through Partner Services

Depending on the Partner configuration and the service used, the Platform may process information relating to End Users or Travellers, including:

nationality or passport country;

origin, destination, transit, stopover and itinerary information;

trip dates, package, route, cruise, flight or travel-product interest;

party size and traveller category;

requirement-check inputs and outcomes;

contact details, where captured before or during a lookup;

language, locale, country and currency preferences;

event and interaction data, including lookup start, progress, completion, abandonment and conversion events;

marketing attribution and campaign source data.

TRAVCO does not intend for Partners to submit unnecessary sensitive personal information through the Platform. Partners must not submit health status, biometric data, children’s data, government identification numbers, financial account credentials, criminal records or other sensitive data unless expressly supported by the service, lawful, necessary and covered by appropriate written terms.

4.4 Automatically Collected Information

When you visit our Website or use the Dashboard or Platform, we may automatically collect:

IP address;

device identifiers;

browser type and version;

operating system;

device type;

pages viewed;

referring and exit pages;

clickstream and navigation paths;

timestamps;

approximate location derived from IP address;

session identifiers;

authentication logs;

error, performance and diagnostic data;

cookie, pixel, tag and similar technology data;

advertising identifiers and campaign attribution data where applicable.

4.5 Payment and Billing Information

Payments may be processed through Stripe or other payment providers. We may collect billing contact details, invoice information, tax information, payment status, subscription status, usage records and limited payment metadata. We generally do not store full card numbers directly on our systems. Payment providers may process payment information under their own terms and privacy policies.

4.6 Information from Third Parties

We may receive information from:

Partners and authorised users;

payment processors;

CRM and sales tools;

analytics and advertising platforms;

social media and professional networks;

event, webinar or demo-booking tools;

identity, fraud prevention and security providers;

public business registers and public company sources;

data enrichment providers, where lawful;

integration partners and service providers.

5. Cookies, Pixels, Tags and Similar Technologies

We may use cookies, pixels, tags, SDKs, server-side events, APIs, web beacons, device identifiers, local storage, log files and similar technologies for:

website and Dashboard functionality;

authentication and security;

remembering preferences;

analytics and performance measurement;

attribution and conversion tracking;

advertising and retargeting;

audience creation and lookalike modelling;

fraud prevention and abuse detection;

service improvement and debugging.

5.1 Categories of Cookies and Tracking Technologies

We may use:

Strictly necessary technologies required for login, security, routing, fraud prevention, load balancing, account access and core service delivery.

Functional technologies used to remember settings, language, region, interface preferences and saved choices.

Analytics technologies used to understand usage, performance, engagement, page views, conversion paths and product improvement opportunities.

Advertising and retargeting technologies used to measure campaigns, build audiences, retarget visitors, attribute conversions and deliver relevant advertising.

Personalisation technologies used to adapt content, messaging or offers based on interactions and inferred interests.

5.2 Advertising, Analytics and Pixel Providers

We may use or integrate technologies from advertising, analytics, marketing, AI, infrastructure and business-service providers, including Google, Meta, LinkedIn, TikTok, Microsoft, X / Twitter, Snapchat, Reddit, Pinterest, Quora, Taboola, Outbrain, Criteo, AdRoll, HubSpot, Salesforce, Segment, RudderStack, Hotjar, FullStory, PostHog, Mixpanel, Amplitude, Cloudflare, Vercel, DigitalOcean, AWS, Google Cloud, Azure, Stripe, Calendly, Google Workspace, Slack, WhatsApp Business, OpenAI, Anthropic or similar providers where used.

This list is intentionally broad to allow TRAVCO to operate, test and update its technology stack. We do not necessarily use every provider listed at all times.

5.3 Consent and Cookie Controls

Where required by law, we will request consent before placing or accessing non-essential cookies, pixels or similar technologies. Where consent is not legally required, we may rely on legitimate interests, notice-based consent, contractual necessity or another lawful basis, depending on the jurisdiction and purpose.

Where our Website, Dashboard or Platform presents a cookie banner, consent management platform or preference centre, you may manage your choices through that tool. Where no such tool is available, you may use browser settings, device settings, platform opt-outs, Global Privacy Control signals where legally recognised, or contact us at legal@travco.ai.

If you disable or reject certain technologies, some features may not work correctly, and our ability to measure performance, prevent fraud, personalise content or improve services may be limited.

5.4 “Do Not Sell or Share” and Targeted Advertising

Certain US privacy laws may define the disclosure of identifiers, cookie IDs, advertising IDs, internet activity or similar information to advertising partners as a “sale”, “sharing” or use for “targeted advertising”, even if no money is exchanged.

To the extent applicable, you may opt out of sale, sharing or targeted advertising by contacting legal@travco.ai with the subject line: Privacy Opt-Out Request. Where required by law, we will also honour legally recognised browser-based opt-out signals, such as Global Privacy Control, in a commercially reasonable manner.

6. How We Use Information

We may use personal information for the following purposes: to operate, provide and improve the Website, Dashboard, Platform, Widget and related services; create and manage partner accounts; onboard Partners; provide demos, proposals, support and commercial communications; process payments and billing; track usage and performance; generate analytics and reports; support traveller requirement checks; measure conversion and campaign performance; operate advertising and attribution tools; secure the Platform; debug and improve reliability; train staff and improve operations; use AI-assisted tools subject to safeguards; comply with law; enforce agreements; protect rights and safety; and evaluate or complete corporate transactions.

7. Legal Bases Under GDPR and Similar Laws

Where GDPR, UK GDPR or similar laws apply, we rely on contract, legitimate interests, consent, legal obligation, vital interests or public interest where applicable.

Where TRAVCO processes End User personal data on behalf of a Partner, the Partner is responsible for identifying and documenting the lawful basis for that processing, unless otherwise agreed in writing.

8. Disclosure of Information

We may disclose personal information to hosting, infrastructure, security and cloud providers; payment processors; analytics, advertising, attribution and marketing platforms; CRM, sales, support and communication providers; AI and automation providers; data enrichment and business intelligence providers; professional advisers; integration partners and subcontractors; affiliated companies, contractors and team members; authorities or regulators; corporate transaction parties; and Partners where information relates to their workspace, users, Widget, hosted flow, End Users or account.

We do not sell personal information in the ordinary meaning of selling a customer list for money. However, some US privacy laws may treat advertising pixels, retargeting, cross-context behavioural advertising or audience sharing as “sale” or “sharing”. Where applicable, we provide opt-out rights as described above.

9. International Transfers

TRAVCO is based in the United Arab Emirates and may process information in the UAE, United States, European Economic Area, United Kingdom and other countries where we, our service providers or partners operate.

Where required, we use appropriate safeguards for international transfers, which may include contractual commitments, data processing agreements, Standard Contractual Clauses, transfer risk assessments, adequacy mechanisms or other lawful transfer tools.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain accounts, meet legal obligations, resolve disputes, enforce agreements, prevent fraud and protect legitimate business interests.

We may retain aggregated, anonymised or de-identified data indefinitely where it cannot reasonably identify an individual.

11. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These may include access controls, authentication, encryption, monitoring, logging, vendor controls, least-privilege access and operational security measures.

No system is completely secure. We cannot guarantee that unauthorised access, cyber incidents, service interruptions or data loss will never occur.

12. Partner Responsibilities

Partners are responsible for ensuring they have the legal right to provide data to TRAVCO; providing required notices to End Users; obtaining required consents; ensuring their own sites and campaigns comply with law; presenting Widgets or hosted flows accurately and lawfully; responding to End User privacy requests where applicable; not submitting unnecessary sensitive data; and ensuring authorised users use the Dashboard lawfully and securely.

13. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent, request portability, opt out of sale, sharing or targeted advertising, limit use of sensitive personal information, appeal decisions, or lodge a complaint with a supervisory authority.

To exercise rights, contact legal@travco.ai. We may need to verify your identity and authority before processing a request. If your request relates to data controlled by a Partner, we may direct you to that Partner or assist the Partner in responding.

14. California and US State Privacy Notice

If applicable US state privacy laws apply to TRAVCO, this section supplements the rest of this Privacy Policy. We may collect identifiers, commercial information, internet or network activity, approximate geolocation, professional or employment-related information, inferences, and limited sensitive personal information where necessary.

We may use or disclose personal information for targeted advertising, cross-context behavioural advertising, analytics, attribution and retargeting. Under some laws, this may be considered “selling” or “sharing”. You may opt out by contacting legal@travco.ai.

15. Children

The TRAVCO Website, Dashboard and partner services are intended for business users and are not directed to children. We do not knowingly collect personal information from children under 13, or under the applicable age of consent in relevant jurisdictions. Partners must not use the Platform to knowingly collect children’s data unless expressly authorised in writing and legally compliant.

16. AI-Assisted Processing

We may use AI-assisted tools, including providers such as OpenAI, Anthropic or similar services, for limited business and operational purposes. These may include support, summarisation, classification, abuse detection, workflow assistance, data quality review, internal productivity and product improvement.

We do not intend to submit unnecessary sensitive personal information to AI providers. Where AI providers are used, we seek to apply appropriate confidentiality, security and data-processing safeguards. AI outputs may be inaccurate and are not used as the sole basis for decisions with legal or similarly significant effects unless permitted by law and subject to appropriate safeguards.

17. Third-Party Websites and Services

Our Website, Dashboard or Platform may link to third-party websites, platforms, payment processors, scheduling tools, social networks, advertising platforms or partner sites. We are not responsible for the privacy practices of third parties. You should review the privacy notices of those third parties before using them.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a revised “Last Updated” date. Where required by law or where changes are material, we may provide additional notice by email, Dashboard notice, website notice or other appropriate means.

Your continued use of the Website, Dashboard or Platform after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy, except where separate consent is required by law.

19. Contact Us

For privacy questions, rights requests, opt-outs or complaints, contact:

TRAVCO LLC

Sharjah Media City, UAE

Email: legal@travco.ai

Please include sufficient information for us to understand and verify your request.