This Privacy Policy describes how TourRova ("we", "us", "our") collects, uses, and protects your information when you use our travel CRM software and website.
1. Information We Collect
Information you provide
- Account registration information (name, email address, password)
- Agency/business details (name, address, phone, website)
- Customer data you enter into the CRM (names, emails, booking details)
- Payment information (processed securely by PayPal — we do not store card details)
Information collected automatically
- IP address and browser type for security purposes
- Login timestamps and usage activity within the app
- Email open and click tracking (for transactional emails only)
2. How We Use Your Information
- To provide and improve the TourRova software service
- To send transactional emails (booking confirmations, payment reminders, invoices)
- To respond to support requests and customer service enquiries
- To process subscription payments
- To send product updates and service announcements (you may opt out)
3. Data Storage & Security
Your data is stored on Hostinger shared hosting servers with SSL encryption. We implement industry-standard security measures including:
- HTTPS/SSL encryption for all data in transit
- Hashed passwords (bcrypt) — we cannot see your password
- JWT authentication tokens with expiry
- Regular database backups
For self-hosted customers, your data resides entirely on your own server — TourRova has no access to it.
4. Third-Party Services
TourRova integrates with the following third-party services:
- PayPal — payment processing. Subject to PayPal's Privacy Policy.
- Meta WhatsApp Cloud API — optional WhatsApp messaging. Each tenant uses their own Meta credentials.
- Hostinger — web hosting infrastructure.
5. Your Rights (GDPR)
If you are an EU resident, you have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to processing of your data
- Request data portability (export your data as CSV)
- Lodge a complaint with a supervisory authority
To exercise these rights, email us at dkwebart@gmail.com.
6. Data Retention
We retain your account data for as long as your subscription is active. After account cancellation, data is retained for 30 days before deletion. You may request immediate deletion by emailing us.
7. Contact
For privacy-related queries: dkwebart@gmail.com
TourRova by DKwebArt, Negombo/Minuwangoda, Western Province, Sri Lanka.