Privacy policy

Last updated 16 October 2026

Two kinds of information

It matters which is which, because they are handled differently.

Your account information is what you gave us to open a workspace: your agency's name, its trade licence number, a contact address and phone number, and the names and email addresses of the people who sign in. We are responsible for this and we decide how it is used.

Your records are what you put into the system: passengers, passport and visa details, agents, employees, payments. This is your data about other people. You decide what goes in it and why; we hold it on your behalf and only do what the software does with it.

What we do with your account information

• Sign you in and keep your workspace separate from every other agency's.
• Raise and send invoices, and record payments against them.
• Email you about your account — a trial ending, an invoice, a security notice.
• Answer you when you contact support.

We do not sell it, rent it, or pass it to advertisers. We do not send marketing to your staff.

What we do with your records

We store them, show them back to the people in your workspace who have permission to see them, and print the reports and embassy documents you ask for. That is all.

Nobody at another agency can see them. Every record in the system is tied to the workspace that created it and every query is filtered by it — not hidden in the interface, but excluded from the query itself.

Our own staff do not read your records as a matter of course. Access happens only when you ask us to look at something, or when we have to investigate a fault, and it is limited to what the problem needs.

What the website itself collects

• A session cookie once you sign in. It is what keeps you signed in and nothing else; it carries no tracking identifier.
• The IP address and browser of anyone who submits the registration form, kept so we can tell a real agency from somebody opening trials in bulk.
• Cloudflare Turnstile runs on the registration form to check that a submission comes from a person. It is a bot check, not an analytics tool, and it does not follow you around the internet.

There is no advertising network on this site and no third-party analytics tracker.

Where it is kept, and for how long

Your workspace lives on our servers with regular backups. While your account is open we keep everything in it. If you close your account we keep the workspace for 90 days in case you return, then remove it. Backups age out on their own cycle shortly after.

Invoices and payment records are kept longer, because accounting records have to be.

Your choices

• Ask us for a copy of everything in your workspace, at any time.
• Correct anything wrong in your account information from inside the system.
• Ask us to delete your workspace early rather than waiting out the 90 days.

If somebody in your records asks you about their information, you are the one who answers — they are your records. We will help you find or remove what you need to.

Cookies and website analytics

We count visits, on this website and inside the application, so that we can see which pages and screens are used and which are not. It is recorded on our own servers and it is not sold, shared or sent to an advertising network.

What a visit records: the pages opened and how long each was on screen, the address the visit came from, the browser and device type, the referring site, and — once you sign in — which account and which agency. Time on a page is measured only while the tab is actually in front of you.

The one cookie we set for this is a random identifier that lets us tell a returning visitor from a new one. It contains no name, no address and nothing derived from you; on its own it identifies nobody, and clearing it makes you a new visitor as far as we are concerned. We do not fingerprint browsers.

If your browser sends a Do Not Track or Global Privacy Control signal, we honour it and record nothing. Visits are deleted automatically after the retention period the operator of this installation has set.

Security

Passwords are stored hashed and never in a readable form; nobody here can look yours up. Traffic is encrypted in transit. Workspaces are separated at the database level rather than only in the interface. We do not store card numbers, because we do not take card payments at all.

If we ever discover a breach affecting your data, we will tell you what happened and what to do about it, promptly and in plain language.

Contact

Questions about this policy, or a request about your data: write from the account you registered with, or to the address on your invoice.