Privacy Policy

1. Who We Are

Tourvala is a SaaS platform built for tour operators in Africa. When we say "Tourvala", "we", "us", or "our", we mean the Tourvala platform. When we say "you", we mean either a Vendor (tour operator using our dashboard) or a Guest (traveller booking through a Vendor's storefront).

2. Information We Collect

From Vendors

• Name, email address, and password on registration
• Company name, subdomain, and branding details
• Bank account details and Paystack keys (stored encrypted)
• Trip content you publish (titles, descriptions, images, pricing)

From Guests (via Vendor storefronts)

• Full name, email address, and phone number submitted at booking
• Number of guests and trip selection
• Payment proof uploads (images/PDFs stored securely)

Automatically Collected

• IP address and browser/device type for security logging
• Session data required to keep you logged in

3. How We Use Your Information

• To create and manage your Vendor account and storefront
• To process and display bookings made through your storefront
• To verify payment status via Paystack's API (for Vendors using Paystack)
• To send transactional emails related to your account or bookings
• To ensure platform security and prevent fraud
• To improve platform features and fix issues

We do not use your data for advertising or share it with marketing third parties.

4. How We Share Your Information

With Paystack

If a Vendor enables Paystack, Guest payment details (email, amount) are sent to Paystack to initialise a transaction. Paystack's own Privacy Policy applies to that data.

With Vendors

Guest booking information (name, email, phone, booking details) is visible to the Vendor whose storefront the Guest booked through. Guests should review the Vendor's own privacy practices.

Legal Requirements

We may disclose information if required by Nigerian law, court order, or to protect the rights and safety of Tourvala and its users.

5. Data Storage and Security

Your data is stored on secured servers. We implement the following measures:

• Passwords are hashed using bcrypt — we never store plaintext passwords
• Paystack secret keys are stored encrypted in the database
• Payment proof files are stored in a non-public storage directory
• HTTPS is enforced across all platform connections

No system is 100% secure. If you suspect a security issue, please contact us immediately.

6. Data Retention

We retain your account data for as long as your account is active. If you close your account, we will delete or anonymise your data within 30 days, except where retention is required by law or for legitimate dispute resolution purposes.

Booking records may be retained for up to 2 years for accounting and dispute purposes.

7. Your Rights

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update your account information at any time via Settings.
• Deletion: You can request deletion of your account and associated data by contacting us.
• Portability: You can request an export of your booking data in a readable format.

To exercise any of these rights, email us at privacy@tourvala.com.ng.

8. Cookies

Tourvala uses only essential cookies required for session management and authentication. We do not use advertising or tracking cookies.

9. Children's Privacy

Tourvala is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify Vendors of material changes via email and update the "Last updated" date on this page. Continued use of Tourvala after changes are published constitutes your acceptance.