Skip to content

Legal

TripOS Privacy Policy

Last updated: 31 October 2026

This policy explains what personal information TripOS handles, why we handle it, who we share it with, and the choices you have, including how to ask us to delete it.

1. Who we are

TripOS is a software platform for travel agencies. It is operated by Golden Travels (“TripOS”, “we”, “us”, “our”), a travel business based in Bengaluru, Karnataka, India.

TripOS helps travel agencies manage their work in one place. Agencies use it to:

  • manage their agency account and team members;
  • record and follow up on leads and travel customers;
  • keep customer details and travel plans;
  • connect their WhatsApp Business account and reply to customers from a shared inbox;
  • create quotations and generate them as PDF files;
  • store documents and files related to trips.

This policy applies to the TripOS platform and to the TripOS pages at www.goldentravels.co/tripos. It does not cover the travel services Golden Travels sells to its own customers. It also does not cover how an individual travel agency uses your information outside TripOS.

2. Our role: agencies and TripOS

TripOS is used by two kinds of people, and our role differs for each.

  • Agency users. Agency owners and employees who sign up for and log in to TripOS. For their account information, TripOS decides how the information is used.
  • Travel customers. People who contact or book with an agency that uses TripOS. The agency decides what customer information to enter into TripOS and why. TripOS processes it on the agency’s behalf, under the agency’s instructions and our agreement with the agency.

If you are a travel customer, the agency you dealt with is your first point of contact for questions about your information. We will help agencies respond to such requests, and you can also contact us directly.

3. Information we collect

3.1 Agency account and employee information

When an agency signs up and adds team members, we collect:

  • agency name, business details and contact information;
  • names, email addresses, phone numbers and job roles of agency users;
  • login credentials;
  • billing and subscription details, if the agency subscribes to a paid plan;
  • settings and preferences, and records of actions users take in TripOS, such as who created or changed a quotation.

3.2 Travel customer and lead information

Agencies enter or import information about their leads and customers, or it arrives through a connected channel such as WhatsApp. This can include:

  • names, phone numbers and email addresses;
  • travel details such as destinations, dates, number of travellers, accommodation, transport and budget preferences;
  • notes the agency writes about the enquiry or booking;
  • quotations, itineraries and prices prepared for the customer;
  • documents and files the agency uploads for a trip.

Agencies should enter only the information they need to serve their customers.

3.3 WhatsApp information

When an agency connects its WhatsApp Business account to TripOS, TripOS receives and stores information through Meta’s WhatsApp Business Platform so the agency can manage conversations in TripOS. This includes:

  • Phone numbers and profile names. The customer’s WhatsApp phone number and the profile name they have set in WhatsApp.
  • Message content. Text messages, and media or files sent in the conversation, such as images, documents, audio and location, in both directions.
  • Conversation history. The messages exchanged between the agency and the customer through the connected number.
  • Message metadata. Message IDs, timestamps, and delivery and read status reported by WhatsApp.
  • Agency account identifiers. The agency’s WhatsApp Business Account ID, business phone number ID, display name and related business information.
  • Access credentials. An access token issued by Meta that lets TripOS send and receive messages for the agency.

TripOS receives only the WhatsApp information related to the business numbers an agency connects. It does not receive a customer’s other WhatsApp chats or contacts.

3.4 Information from our website

When you visit the TripOS pages or contact us, we may collect:

  • information you submit, such as your name, business name, email, phone number and message when you request early access or contact us;
  • technical information such as IP address, browser type and pages visited, collected through cookies and similar technologies.

4. How WhatsApp Embedded Signup works

TripOS uses Meta’s Embedded Signup so an agency can connect its WhatsApp Business account without leaving TripOS.

  1. An agency admin chooses to connect WhatsApp in TripOS. A window provided by Meta opens.
  2. The admin logs in with their Facebook account in Meta’s window. TripOS does not see or receive their Facebook password.
  3. In Meta’s window, the admin selects or creates a Meta business portfolio, a WhatsApp Business account and a phone number. They then review the permissions TripOS is asking for and approve them.
  4. Meta gives TripOS the identifiers of the selected WhatsApp Business account and phone number, and a way to get an access token. With that token, TripOS can manage the account and send and receive messages for the agency.
  5. After that, Meta delivers messages and status updates for that number to TripOS, and TripOS sends the agency’s replies through Meta.

The permissions TripOS requests allow it to manage the connected WhatsApp Business account and to send and receive messages. TripOS uses them only to provide WhatsApp messaging inside TripOS for the agency that granted them.

An agency can disconnect at any time by removing TripOS from its Meta Business settings or from Facebook Settings > Business Integrations, or by asking us to disconnect it. Disconnecting stops new WhatsApp information reaching TripOS. Information already stored in TripOS stays there until it is deleted as described in section 10 and section 11.

5. How we use information

We use the information described above to:

  • provide TripOS to agencies: create accounts, manage leads and customers, build quotations and PDFs, and store files;
  • show WhatsApp conversations in the agency’s TripOS inbox, and send the replies agency users write;
  • link WhatsApp conversations to the matching lead or customer record so the agency can see the full history;
  • keep the platform secure, prevent misuse and investigate problems;
  • provide support when an agency asks for help;
  • communicate with agency users about their account, service changes and, where permitted, product updates;
  • meet legal obligations and enforce our terms.

How we use WhatsApp information specifically. TripOS processes WhatsApp information only to provide the agency’s messaging features in TripOS, for the agency that connected the account.

  • We do not sell WhatsApp information or other personal information.
  • We do not use WhatsApp information for advertising, or to build profiles for any purpose other than providing TripOS to the agency.
  • We do not use one agency’s customer information for another agency, or for Golden Travels’ own travel business.

6. Who can access information

  • The agency. Agency users can see the leads, customers, quotations, files and WhatsApp conversations in their agency’s account, according to the access the agency sets.
  • TripOS personnel. Authorised TripOS staff can access agency account data, including WhatsApp messages, when it is needed to provide support an agency has asked for, fix technical problems, keep the platform secure, or meet legal obligations. Access is limited to what the task needs.

7. How we share information

We share personal information only as described here.

  • Meta Platforms. WhatsApp messages are sent and received through Meta’s WhatsApp Business Platform. Meta processes these messages and related data under its own terms and policies, including the WhatsApp Business terms and Meta’s Privacy Policy. TripOS is an independent software provider. It is not owned by or affiliated with Meta, and Meta does not control TripOS.
  • Service providers. We use other companies to host and run TripOS, such as cloud hosting, database and file storage, and email delivery providers. They process information only to provide their services to us.
  • At the agency’s direction. For example, when an agency user sends a quotation PDF to a customer, or exports data.
  • Legal reasons. When required by law, court order or a government request, or to protect the rights, safety or property of TripOS, our users or others.
  • Business changes. If TripOS is merged, acquired or transferred, information may move to the new owner. It would remain protected by this policy or one at least as protective.

We do not sell personal information.

8. Where information is stored

TripOS information is stored with our hosting and storage providers, whose servers may be in India or other countries. Meta may also process WhatsApp messages in other countries. Where information is transferred outside India, we take the steps required by applicable law.

9. How we protect information

We use reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse and alteration.

No system is completely secure. If we become aware of a breach affecting personal information, we will notify affected agencies and authorities as required by applicable law.

Agencies are responsible for keeping their users’ login details safe and for controlling who in their team has access.

10. How long we keep information

We keep information only as long as needed for the purposes in this policy.

  • Agency account and customer data, including WhatsApp conversations and files, is kept while the agency’s account is active. After the account closes, or when the agency asks, it is deleted or anonymised, except where we must keep it by law.
  • Backups may hold deleted information for a limited time until they are overwritten.
  • Website enquiries are kept for as long as needed to respond and follow up.
  • Information we must keep by law, such as billing records, is kept for the period the law requires.

Deleting information from TripOS does not delete messages from the customer’s or agency’s WhatsApp app, or data held by Meta under its own policies.

11. Your rights and choices

Depending on applicable law, including India’s Digital Personal Data Protection Act, 2023, you may have the right to:

  • access the personal information we hold about you;
  • correct information that is inaccurate or incomplete;
  • ask us to delete your information;
  • withdraw consent, where we rely on consent;
  • raise a grievance with us, and then with the relevant authority if it is not resolved.

Agency users can view and edit much of their information in TripOS. For anything else, contact us at naveeth@goldentravels.co.

Travel customers should contact the agency they dealt with first, since the agency controls their information in TripOS. If you cannot reach the agency, contact us. We will verify the request and work with the agency to respond.

To request deletion, follow the steps on our Data Deletion page. We may need to confirm your identity first, and we may keep some information where the law requires it. We respond within the time required by applicable law.

12. Cookies and analytics

The TripOS pages on goldentravels.co use cookies and similar technologies:

  • Essential cookies that keep the site and the TripOS platform working, such as keeping you signed in.
  • Advertising measurement. The website loads the Google Ads tag (Google’s gtag.js) to measure the results of our ads. Google may set cookies and receive information about your visit under Google’s privacy policy.

You can block or delete cookies in your browser settings. Some parts of the site may not work properly without them.

13. Children’s privacy

TripOS is a business tool for travel agencies and is not directed at children. Agency accounts may only be created by people aged 18 or over. We do not knowingly collect children’s information directly from children.

Agencies sometimes record travel details for children travelling with their families. When they do, the agency is responsible for having the parent’s or guardian’s consent as applicable law requires. A parent or guardian may contact the agency, or us, to access or delete a child’s information.

14. Changes to this policy

We may update this policy when TripOS or the law changes. We will post the new version on this page and change the “Last updated” date. If a change is significant, we will also tell agency users by email or in TripOS before it takes effect.

15. Contact us

For privacy questions, requests or complaints, including grievances: