Privacy, with
clear expectations.

1. Scope and responsibility

This Policy applies to personal information KLYP processes through the Services and in our business communications. It does not apply to third-party websites, travel suppliers, distribution systems, payment providers, or services that have their own privacy practices.

Where KLYP processes information solely on a business customer’s instructions, that customer is responsible for deciding why and how the information is used. Privacy requests relating to that data may need to be directed to the relevant customer.

2. Information you provide

We may collect identifiers and contact details such as your name, work email address, telephone number, company, role, username, and account credentials; communications such as enquiries, feedback, and support requests; and information you submit, upload, or authorize through the Services.

Depending on the products used, submitted information may include traveller profiles, preferences, loyalty details, itinerary and booking information, supplier records, invoices, operational notes, approvals, communications, and other transaction-related content. Please provide sensitive information only where it is necessary and authorized.

3. Information collected automatically

When you use the Services, we may collect technical and usage information such as IP address, device and browser type, operating system, app version, language, approximate region derived from IP address, session timestamps, feature interactions, referring pages, diagnostic events, and crash information.

We may use cookies, local storage, pixels, and similar technologies on our website and web-based Services to maintain sessions, remember settings, understand performance, and protect the Services. Browser controls can limit some of these technologies, although doing so may affect functionality.

4. Information from customers, partners, and integrations

We may receive information from the organization that provides your account, other authorized users, travel suppliers, global distribution systems, booking platforms, payment or invoicing providers, communications services, and integrations selected by a customer. The information received depends on the connection and the customer’s configuration.

5. How we use information

We use personal information to provide and operate the Services; authenticate users and administer accounts; process requested travel and operational workflows; connect customer-selected systems; personalize permitted features; provide customer service; send transactional, security, and policy notices; monitor reliability and performance; troubleshoot errors; develop and improve our products; prevent fraud, abuse, and security incidents; enforce agreements; and comply with legal obligations.

We may create aggregated or de-identified information for analytics, product planning, and service improvement. We do not attempt to re-identify information that has been appropriately de-identified.

6. Artificial intelligence and automated features

Some KLYP features may use artificial intelligence to organize information, assist search, generate suggestions, summarize content, or support governed travel workflows. The inputs and outputs may be processed to provide the requested feature, maintain safety and reliability, and improve performance as permitted by our customer agreements and applicable law.

AI-assisted output can be incomplete or inaccurate and should be reviewed by an authorized person where a decision could materially affect a traveller, booking, payment, policy, or other important outcome. KLYP does not use automated processing to make legally significant decisions about individuals without appropriate authorization and safeguards.

7. Legal bases where applicable

Where laws require a legal basis, we process personal information as necessary to perform a contract or provide requested Services; for legitimate interests such as operating, securing, and improving the Services; to comply with law; and with consent where consent is required. You may withdraw consent at any time, without affecting processing already carried out.

8. How we share information

We may share information with service providers that work on our behalf, including hosting, storage, analytics, communications, customer-support, identity, monitoring, and security providers. We may also share information with a customer’s selected travel suppliers, technology partners, or connected systems where necessary to complete a requested workflow.

We require service providers to protect personal information and use it only for authorized purposes. We may also disclose information when required by law; to protect KLYP, our customers, users, or others; to investigate misuse or security incidents; or as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.

9. Sale, advertising, and tracking

We do not sell personal information. We do not share personal information for cross-context behavioral advertising and do not use information from the Services to track individuals across unaffiliated apps or websites for advertising. If these practices change, we will update this Policy and provide any choices required by law before applying the change.

10. Mobile application permissions

Depending on the features you use, the mobile application may request access to notifications, camera, photos or files, microphone, contacts, or location. A permission is requested only when a related feature needs it and remains subject to your device settings. You can revoke permissions at any time; doing so may disable the related feature but should not prevent use of unrelated features where practical.

11. Retention and deletion

We retain personal information for as long as reasonably necessary to provide the Services, maintain business and security records, comply with legal, tax, accounting, and reporting obligations, resolve disputes, and enforce agreements. Retention periods vary by information type, customer instructions, operational need, and legal requirements.

When information is no longer required, we take reasonable steps to delete, anonymize, or securely isolate it. Residual copies may remain temporarily in backups or where retention is required by law. To request deletion of your account or personal information, email devteam@klyp.travel. If an organization manages your account, we may refer the request to its administrator.

12. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse. These measures may include access controls, encryption in transit, monitoring, and security review. No system or transmission method is completely secure, so we cannot guarantee absolute security.

13. Your choices and privacy rights

You may update certain account information through the Services or your organization’s administrator. You can opt out of promotional email using the unsubscribe link in the message; service and security communications may still be sent.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of your information; object to or restrict certain processing; withdraw consent; or appeal a privacy-request decision. You may also have the right to complain to a local data-protection authority. We will not discriminate against you for exercising applicable rights.

To submit a request, contact us below and describe the right you wish to exercise. We may verify your identity and authority before responding. Authorized agents may be required to provide proof of authorization.

14. International processing

KLYP and our service providers may process information in countries other than the country where you live. Where required, we use recognized safeguards for international transfers, such as contractual protections, and take steps designed to protect information consistently with this Policy.

15. Children’s privacy

The Services are designed for business use and are not directed to children under 13 or the higher minimum age required by local law. We do not knowingly collect personal information directly from children for their own use of the Services. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and take appropriate action.

16. Changes to this Policy

We may update this Privacy Policy as the Services, data practices, or legal requirements change. We will post the revised version here and update the “Last updated” date. If a change is material, we will provide additional notice where required.

17. Contact us

For questions, concerns, account-deletion requests, or requests to exercise privacy rights, contact KLYP, Inc. at devteam@klyp.travel.