Privacy Policy
Last updated: July 2026
This document is a draft pending review by legal counsel. It should not be relied upon as final legal advice. Please consult qualified legal counsel before relying on these terms.
1. Information We Collect
We collect: (a) Account information — name, email, phone number, profile photo. (b) Identity verification — government-issued ID documents for companions. (c) Booking data — scheduled times, meeting points, service details, and payment information. (d) Location data — real-time location during active bookings, shared with the other party. (e) Usage data — how you interact with the app, device information, and cookies.
2. How We Use Your Information
We use your information to: create and manage your account, process bookings and payments, verify identities, facilitate real-time tracking during bookings, send booking notifications and updates, provide customer support, prevent fraud and abuse, and comply with legal obligations.
3. Information Sharing
We share: (a) Booking details between the traveler and companion involved in a booking. (b) Location data with the other party during active bookings only. (c) Payment data with our payment processor (Stripe) — we never store full card numbers. (d) Information with authorities when required by law. We never sell your data to third parties.
4. Data Security
We use industry-standard encryption (TLS/SSL) for data in transit. Identity documents are stored securely and access is restricted. Payment processing is handled by Stripe, which is PCI-DSS compliant. Despite these measures, no system is 100% secure.
5. Identity Verification
Companions must upload a government-issued ID (passport, driver's license, or national ID). This document is used solely for verification purposes and is not displayed publicly. Travelers do not see the actual document — only a verification badge on the companion's profile.
6. Your Rights
You have the right to: access your personal data, request corrections, request deletion of your account and data, export your data, and object to certain processing. To exercise these rights, contact us at support@travistant.com.
7. Data Retention
We retain account data for as long as your account is active. Booking records are retained for 2 years after completion for dispute resolution and legal compliance, then automatically deleted. Identity verification documents are retained while your account is active and deleted immediately upon account deletion. Location data is cleared within 24 hours after a booking ends. When you delete your account, all associated personal data is removed immediately.
8. Cookies
We use essential cookies to maintain your session and language preferences. We do not use advertising or third-party tracking cookies.
9. Children's Privacy
The Service is not available to anyone under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy at any time. Significant changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance.
11. Contact
For privacy questions or to exercise your rights, contact us at support@travistant.com.
12. Right to Complain to a Supervisory Authority
If you are in the EU, UK, or EEA, you have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates applicable law. For EU residents, you can find your supervisory authority at https://edpb.europa.eu/about-edpb/board/members_en. For UK residents, the Information Commissioner's Office (ICO) can be contacted at https://ico.org.uk. We encourage you to contact us first so we can address your concerns directly.
13. Secondary Safety Contact
For your safety, Travistant may designate a secondary safety contact (configured by the platform operator) who can be notified if the primary operator is unresponsive during a safety escalation. In the event of a terminal escalation — when an urgent or high-priority safety alert remains unacknowledged by the primary operator beyond the configured escalation threshold — this secondary contact may receive the following information: the alert type, the booking confirmation number, a description of the situation (which may include traveler and companion names and the meeting location), the escalation count, and a link to the operator dashboard. This disclosure is made solely for safety purposes — to ensure that a safety alert is not left unattended if the primary operator is unavailable. The secondary contact is an individual authorized by the platform operator to receive this information. If you have questions about this disclosure, contact us at support@travistant.com.