NewEcom AI operates the TravelSmart web platform at app.travelsmart.travel. This policy explains how we collect, use, and protect your information.
| Data Type | Purpose | Storage |
|---|---|---|
| Account Information | Email, name, password (hashed) | Encrypted in cloud database |
| Business Information | Agency name, IATA/ARC numbers, branding (logo, colors) | Stored securely on our servers |
| Client Information | Names, contact details, travel preferences, loyalty programs, travel documents | Stored securely on our servers |
| Travel Requests & Itineraries | Trip details, destinations, dates, budgets | Stored securely on our servers |
| Proposals & Commission Data | Client proposals, pricing, commission rates, payment status | Stored securely on our servers |
| Data Type | Purpose | Retention |
|---|---|---|
| Usage Analytics | Platform improvement (anonymized) | 90 days |
| Session Data | Authentication and security | Duration of session |
| Browser & Device Info | Compatibility and performance optimization | 90 days (anonymized) |
| Voice Input (if used) | Transcription of travel requests | Processed in real-time, not stored |
| Image Uploads (if used) | Analyze travel inspiration images | Processed in real-time, not stored |
We integrate with the following services to provide travel search and AI functionality:
TravelSmart is a web-based platform. All personal and client data is stored securely on our cloud servers, encrypted at rest and in transit.
| Measure | Implementation |
|---|---|
| Password Hashing | PBKDF2 with 100,000 iterations + random salt |
| Encryption at Rest | AES-256 on all stored data |
| Network Security | All connections over HTTPS / TLS 1.3 |
| Input Validation | Sanitization against XSS and injection attacks |
| Session Management | Secure, httpOnly, SameSite cookies; server-side invalidation |
| Data Type | Retention Period |
|---|---|
| Account Information | Until you delete your account |
| Client Profiles | Until you delete them |
| Itineraries & Proposals | Until you delete them |
| GEO-Optimized Pages | Until you unpublish or delete them |
| Voice / Image Input | Processed immediately, not stored |
| API Usage Logs | 90 days (anonymized) |
| Session Data | Duration of session |
Revoke voice input permission anytime: Browser Settings → Site Permissions → Microphone → Block for app.travelsmart.travel
We use cookies for session management, platform functionality, and anonymized analytics only. We do not use cookies for cross-site advertising or sell cookie data to third parties.
TravelSmart is designed for professional travel agents and is not intended for individuals under 18. We do not knowingly collect personal information from children.
If you use TravelSmart outside the United States, your information may be transferred to and processed in the United States. By using the platform, you consent to this transfer.
To exercise these rights, contact [email protected].
We may update this Privacy Policy from time to time. We will notify you by posting the updated policy on the platform, updating the "Last Updated" date, and emailing you for material changes.