Tourave Privacy Policy

Tourave is a software platform for travel businesses. This policy applies to platform-level use of Tourave websites, dashboards, APIs, and connected workflows. It does not replace the separate privacy notices that a tenant business may provide to its own customers.

Tourave is the platform operator. Tenant organizations remain responsible for the information they collect and process through their own storefronts and customer communications.

Depending on platform usage, we may process account details, business profile information, contact information, user role and authorization data, platform configuration data, and operational records needed to provide and secure the service.

We may also process technical and usage information such as log events, request metadata, approximate device/browser details, and performance diagnostics required for reliability, fraud prevention, and support.

Tourave can connect to third-party services when an authorized user explicitly initiates a connection. The data available to Tourave depends on the permissions approved by that user and the third-party provider.

For Google Search Console integration, Tourave requests only thehttps://www.googleapis.com/auth/webmasters.readonlyscope. When connected by an authorized user, Tourave may access Search Console property and performance data permitted by that authorization to provide SEO and search performance functionality.

Tourave does not request unrelated Google scopes such as Gmail, Google Drive, Contacts, or Calendar for this integration.

To maintain an authorized third-party connection, Tourave may securely store connection credentials and related token metadata on the server side as needed for session continuity, refresh, and synchronization.

Credential handling is designed to support security controls such as access restriction, encryption at rest, and operational monitoring. Credentials are not exposed in public pages or customer-facing payloads.

Tourave processes information to operate the platform, provide requested features, maintain security and abuse prevention controls, troubleshoot incidents, improve product quality, and comply with legal and contractual obligations.

Tourave may use subprocessors and infrastructure providers to host services, monitor reliability, and support communications. These providers process information under contractual and security controls appropriate to their role.

We retain information for as long as required for service delivery, legal obligations, dispute resolution, and legitimate operational needs. Retention periods vary based on data type and use context.

Tourave applies administrative, technical, and organizational safeguards intended to reduce risk of unauthorized access, misuse, alteration, or loss.

Tourave services may be operated through infrastructure and service providers in multiple regions. Where cross-border processing occurs, Tourave applies reasonable safeguards aligned with applicable legal requirements.

Depending on applicable law, users may have rights to request access, correction, deletion, restriction, or portability of personal information, and may object to certain processing. Requests can be submitted through the contact details below.

When Tourave acts on behalf of a tenant business, data-subject requests may need to be coordinated with that tenant as the primary controller of customer relationship data.

Tourave may use cookies and similar technologies for authentication, security, functional preferences, measurement, and service improvement. Additional details are provided in the Cookie Policy where available.

Tourave may update this Privacy Policy to reflect service or legal changes. Updated versions are published on this page with an updated effective date.

For privacy-related questions, contact:privacy@tourave.com