Privacy Policy

1. Introduction

TravelVault ("we," "us," or "our") operates the TravelVault platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related services (collectively, the "Service").

We are committed to protecting the privacy of our users. This policy applies to all users of the Service, including travelers, airline partners, and security stakeholders.

2. Information We Collect

2.1 Information You Provide

• Account registration data (name, email address, organization)
• Trip information (flight details, departure and arrival airports, dates)
• Item data (photographs, descriptions, and classification results)
• Communications with our team (contact form submissions, support requests)

2.2 Information Collected Automatically

• Device information (device type, operating system, unique identifiers)
• Usage data (features accessed, actions performed, timestamps)
• Log data (IP address, browser type, access times)

2.3 Image Data

When you use the item scanning feature, photographs are processed by our AI classification service. Raw image data is retained for a maximum of 30 days for quality assurance purposes, after which it is automatically deleted. Classification metadata (item type, attributes, confidence scores) is retained separately and does not contain personally identifiable image data.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process item classifications and compliance decisions
• Generate pre-clearance passes linked to your trip
• Communicate with you about the Service
• Ensure the security and integrity of the platform
• Comply with legal obligations
• Improve the accuracy of our classification models through aggregated, anonymized data

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Airline partners: Trip and pass data necessary to facilitate pre-clearance services, only when you opt into a partner airline's program
• Service providers: Third-party vendors who assist in operating the Service (cloud hosting, AI processing), bound by confidentiality agreements
• Legal requirements: When required by law, regulation, legal process, or government request
• Security purposes: To protect the rights, safety, and security of TravelVault, our users, and the public

5. Data Retention

6. Data Security

We implement industry-standard security measures to protect your information, including:

• AES-256 encryption at rest
• TLS 1.2+ encryption in transit
• Role-based access controls
• SHA-256 hash-chained audit logs for tamper evidence
• Regular security assessments

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing activities
• Export your data in a portable format
• Withdraw consent where processing is consent-based

To exercise any of these rights, contact us at privacy@travel-vault.app.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

For questions about this Privacy Policy or our data practices, contact: