Privacy policy

Last updated 28 August 2026

Note for the operator of this site: this is a plain-language starting point written alongside the software, and it describes what the system actually does. Have it reviewed before you take paying customers — this product holds passport data, which is about as sensitive as ordinary business records get.

Two kinds of information

It matters which is which, because they are handled differently.

Your account information is what you gave us to open a workspace: your agency's name, its trade licence number, a contact address and phone number, and the names and email addresses of the people who sign in. We are responsible for this and we decide how it is used.

Your records are what you put into the system: passengers, passport and visa details, agents, employees, payments. This is your data about other people. You decide what goes in it and why; we hold it on your behalf and only do what the software does with it.

What we do with your account information

  • Sign you in and keep your workspace separate from every other agency's.
  • Raise and send invoices, and record payments against them.
  • Email you about your account — a trial ending, an invoice, a security notice.
  • Answer you when you contact support.

We do not sell it, rent it, or pass it to advertisers. We do not send marketing to your staff.

What we do with your records

We store them, show them back to the people in your workspace who have permission to see them, and print the reports and embassy documents you ask for. That is all.

Nobody at another agency can see them. Every record in the system is tied to the workspace that created it and every query is filtered by it — not hidden in the interface, but excluded from the query itself.

Our own staff do not read your records as a matter of course. Access happens only when you ask us to look at something, or when we have to investigate a fault, and it is limited to what the problem needs.

What the website itself collects

  • A session cookie once you sign in. It is what keeps you signed in and nothing else; it carries no tracking identifier.
  • The IP address and browser of anyone who submits the registration form, kept so we can tell a real agency from somebody opening trials in bulk.
  • Cloudflare Turnstile runs on the registration form to check that a submission comes from a person. It is a bot check, not an analytics tool, and it does not follow you around the internet.

There is no advertising network on this site and no third-party analytics tracker.

Where it is kept, and for how long

Your workspace lives on our servers with regular backups. While your account is open we keep everything in it. If you close your account we keep the workspace for 90 days in case you return, then remove it. Backups age out on their own cycle shortly after.

Invoices and payment records are kept longer, because accounting records have to be.

Your choices

  • Ask us for a copy of everything in your workspace, at any time.
  • Correct anything wrong in your account information from inside the system.
  • Ask us to delete your workspace early rather than waiting out the 90 days.

If somebody in your records asks you about their information, you are the one who answers — they are your records. We will help you find or remove what you need to.

Security

Passwords are stored hashed and never in a readable form; nobody here can look yours up. Traffic is encrypted in transit. Workspaces are separated at the database level rather than only in the interface. We do not store card numbers, because we do not take card payments at all.

If we ever discover a breach affecting your data, we will tell you what happened and what to do about it, promptly and in plain language.

Contact

Questions about this policy, or a request about your data: write from the account you registered with, or to the address on your invoice.