About this notice
This notice explains data handling in the TourQuester travel-planning preview at tourquester.com and its local development version. Contact info@tourquester.com about privacy or your information. Local development may use test data and separate storage; it is not a separate public service.
Information you provide
We process account identifiers and profile information supplied through sign-in, trip destinations, dates, interests, traveler counts, itinerary edits and saved plans. Passport Explorer uses the passport-issuing countries you select; it does not ask for passport numbers, scans or identity documents. Avoid entering sensitive information in free-text fields.
We also process session identifiers, security tokens, request and error information, usage-limit counters and operational records needed to run and protect the service. Our infrastructure providers may process network information such as IP addresses. Messages you send to our contact address include the information you choose to provide.
How information is used
We use information to create and save your requested plans, authenticate you, provide entry and route summaries, support exports and sharing, respond to requests, prevent abuse and recover the service. Depending on the applicable law and processing, the grounds include providing the service you request, legitimate interests in security and reliability where permitted, legal obligations and consent where required. Optional processing that requires consent will not be introduced merely by changing this notice.
Service providers and international processing
Amazon Web Services hosts our production application, database, backups and sign-in infrastructure in the Singapore region. Travel Buddy through RapidAPI receives the passport and destination country codes needed for entry lookups. HeiGIT openrouteservice receives route endpoint coordinates and the selected driving or walking mode. These requests are made by our servers; we do not send account identifiers with those provider requests.
Google Fonts supplies the site's fonts and receives browser network requests when fonts load. Links to official authorities and other external sites open services governed by their own policies. Providers may process information outside your country and outside the selected hosting region under their applicable arrangements. We do not use advertising trackers or sell personal information in the current preview.
Storage and retention
Guest access and guest drafts expire after 24 hours. Expired guest trips are eligible for cleanup one day after expiry. Member plans remain until deleted or the account is closed. Deleted trips become eligible for permanent removal after 30 days. Deleted account profile identifiers are scheduled for anonymisation after 30 days. Cleanup runs periodically, so eligibility is not an exact deletion timestamp.
Encrypted production backups are configured to expire after 30 days; copies of information removed from the live database may therefore remain in older backups until those backups expire. Usage-limit records are eligible for removal after 62 days. Security and operational records may follow separate provider retention settings. Deleting your TourQuester account does not currently delete the separate Cognito sign-in identity automatically; contact us for assistance with that identity.
Sharing and security
Creating a share link makes its selected itinerary revision accessible to anyone who has the link. Links can be forwarded; do not include information you would not want recipients to see. You can revoke a link, but we cannot remove copies that recipients have already saved. Share links normally expire after seven days.
We use HTTPS, access restrictions and encrypted backups. No system can guarantee absolute security. Do not send passwords, API keys, passport scans or full payment details to our support address.
Your choices and rights
Account and privacy provides account-data download and account deletion. You can edit or delete plans and revoke shared links. Depending on the law that applies to you, you may also have rights to access, correct, erase or restrict information, object to processing, obtain a portable copy, withdraw consent and complain to a competent data-protection authority. Email info@tourquester.com to make a request. We may need proportionate verification before acting and will respond within the applicable legal timeframe.
The current preview is intended for adults arranging travel. Please do not create an account for a child or submit a child's identifying details. Contact us if such information has been provided. Material changes to this notice will be reflected in its updated date and, where appropriate, communicated through the service.