Privacy Policy

Last updated: 22 July 2026

The short version

Your data belongs to you and your agency. We never sell it. You can export or delete it anytime.

1. Who we are

TourVilo (Pvt) Ltd operates TourVilo, a CRM for travel agencies. Our registered address is Kandy, Sri Lanka. For any privacy question, contact us at hello@tourvilo.com.

2. What we collect

  • Account data — your name, email, phone, agency details and password (stored securely by our authentication provider).
  • Your customers' data — traveller information you enter, such as names, contact details, passport numbers and travel documents. We process this on your behalf.
  • Usage analytics — basic, privacy-respecting data about how the app is used, to fix problems and improve it.
  • Payment slips — the bank transfer slips you upload to activate your subscription.

3. Why we use it

We use your data to provide the service, support you, handle billing, and meet our legal obligations. We do not sell your data or your customers' data, and we don't use it for advertising.

4. Where your data lives

Your database is hosted on AWS Singapore via Supabase. Uploaded files are stored on Cloudflare R2 in private storage. Transactional email is sent through Brevo. The application is delivered by Vercel.

5. Sub-processors

We rely on a small number of trusted providers to run TourVilo:

Sub-processorPurposeRegion
SupabaseDatabase & authenticationAWS Singapore
Cloudflare R2File & document storageGlobal (private buckets)
BrevoTransactional & notification emailEU
VercelApplication hosting & deliveryGlobal edge
Secure payment gatewayCard payment processing (planned)Named here once live

6. How long we keep it

We keep your data for as long as your account is active. After your account expires or you ask us to delete it, we remove your data within 90 days. Encrypted backups may persist for a short additional period before they cycle out.

7. Your rights

You can access, export, correct and delete your data at any time. Export tools are built into the product (CSV/Excel and PDF), and you can reach us at hello@tourvilo.com for anything else.

8. Cookies

We use essential cookies to keep you logged in and the app working, plus privacy-respecting analytics cookies to understand usage. We do not use advertising or cross-site tracking cookies.

9. Children

TourVilo is a business tool intended for people aged 18 and over. It is not directed at children.

10. Changes to this policy

If we make material changes, we'll update the date above and, where appropriate, let you know by email.

11. Contact

Questions about privacy? Email hello@tourvilo.com or write to us at Kandy, Sri Lanka.