1. Introduction
Voyasia Destination Management Company ("Voyasia", "we", "us", or "our") provides a customer relationship management (CRM) platform — accessible via our website and mobile applications (collectively, the "Service") — that travel agencies and destination management staff use to manage agents, hotels, itineraries, and travel quotations.
This Privacy Policy explains what information we collect when you use the Service, how we use and share it, and the choices available to you. By creating an account or otherwise using the Service, you agree to the collection and use of information described here.
2. Information We Collect
2.1 Account information
When your organization creates an admin or staff account for you, we collect: full name, email address, phone number, and — optionally — gender, date of birth, address, and a profile photo you choose to upload.
2.2 Travel & business data
To operate the Service, we store the business records your organization creates, which may include:
- Travel agent and agency contact details (name, agency name, email, mobile number, address)
- Destination, hotel, and room-rate information entered by your organization
- Quotations, itineraries, pricing, discounts, and internal notes/comments
- Payment records you manually log against a quotation (amount, mode, date, reference note) — the Service does not process card payments or store card numbers; it only records that a payment was made outside the app
2.3 Communications
When you use the Service to export or send a quotation, we process the recipient's email address or WhatsApp number solely to deliver that document, via our email and WhatsApp messaging providers.
2.4 Device & usage information
We automatically collect limited technical information needed to operate and secure the Service, such as IP address, device/browser type, access timestamps, and session identifiers used to keep your login secure.
| Category | Examples | Collected from |
|---|---|---|
| Account data | Name, email, phone, photo | You, or your admin |
| Business data | Agents, hotels, quotations, pricing | You, during normal use |
| Payment records | Amount, mode, reference (no card data) | Entered manually by staff |
| Communication metadata | Recipient email / WhatsApp number, send status | You, at send time |
| Technical data | IP address, device type, session/login logs | Automatically, on use |
3. How We Use Your Information
- To provide, operate, and maintain the Service, including authenticating your login and enforcing your assigned permissions
- To generate and deliver quotations, hotel vouchers, and travel vouchers on your behalf, in the format and channel you choose
- To compute pricing, currency conversion, margins, and payment status accurately
- To produce internal reports and dashboards summarizing your organization's own data
- To communicate with you about your account, security notices, or password resets
- To detect, prevent, and address fraud, abuse, or security incidents
- To comply with applicable legal obligations
We do not sell your personal information, and we do not use your business data to advertise to you or to third parties.
5. Data Storage & Security
Your data is stored on secured servers with access restricted to authorized personnel and authenticated application requests. Passwords are stored using industry-standard hashing (never in plain text). Access to the Service requires a valid authentication token, and every session is single-device — signing in elsewhere automatically invalidates a previous session.
While we take reasonable technical and organizational measures to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain account and business data for as long as your organization's account remains active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations. Most records (destinations, hotels, agents, quotations) are soft-deleted when removed — they are hidden from normal use immediately but may be retained in the database for audit purposes before permanent erasure.
7. Your Rights & Choices
Depending on your location and applicable law, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information, subject to legal/record-keeping exceptions
- Object to or restrict certain processing of your information
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us using the details in Section 12. If you are a staff/admin user, many of these actions (updating your name, phone, photo, or password) are available directly within your Profile screen in the app.
8. Children's Privacy
The Service is a business tool intended for use by travel agency staff and administrators, and is not directed at children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can remove it.
9. Third-Party Services
The Service integrates with the following categories of third-party providers to function:
- Email delivery — used to send quotations, vouchers, and account notices you request.
- WhatsApp Business messaging (Twilio) — used only when you choose to send a document via WhatsApp.
- Cloud hosting & database infrastructure — used to run and store the Service securely.
These providers process data solely on our instructions and only to the extent necessary to deliver the specific feature you used — they do not use your data for their own independent purposes.
10. International Data Transfers
Your information may be processed and stored in a country other than your own, including where our hosting or messaging providers operate their infrastructure. Where required, we take steps to ensure such transfers are made in compliance with applicable data protection laws.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date above when we do, and, for material changes, we will provide additional notice where appropriate. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your information, please reach out:
↑ Back to top