Privacy Policy
Last updated: 2026-04-30
1. Who we are
TourDock.ai ("TourDock", "we", "us") operates an online marketplace that connects travelers with verified Islamic tour operators offering Hajj, Umrah, and Ziyarat packages. This policy explains what data we collect, how we use it, and your rights over it.
2. What we collect
Operators (account holders): business name, contact email, country, city, WhatsApp number, license details, package content, photos, and authentication credentials.
Travelers (anonymous visitors): name, email, phone, country, and message text — only if you submit an enquiry through the site. We do not require an account.
Automatic: standard server logs (IP, user agent, referrer) and minimal analytics events (page views, WhatsApp clicks, enquiry submissions) to operate and improve the platform.
3. Why we collect it
- Operate the marketplace and fulfil enquiry routing.
- Send transactional emails and (with consent) push notifications.
- Detect abuse, prevent spam, and improve product quality.
- Comply with legal obligations.
4. How we store it
All data is stored on Supabase (PostgreSQL) with row-level security enabled and encryption at rest. Access by TourDock staff is restricted to operations and support, logged, and audited.
5. Who we share with
- Resend — transactional email delivery (operator notifications, traveler confirmations).
- AiSensy — WhatsApp messaging (planned, post-launch).
- Stripe — payment processing for operator subscriptions (planned, post-launch).
- Anthropic / OpenRouter — AI processing for the package wizard and matcher. Prompts may include package descriptions but never traveler PII.
We do not sell your data. Ever.
6. Your rights
You can:
- Access a copy of your data.
- Correct inaccurate data.
- Request deletion (the "right to be forgotten") — except where we must retain records for legal or accounting reasons.
- Export your data in a portable format.
- Withdraw consent for marketing or non-essential cookies at any time.
To exercise any right, email privacy@tourdock.ai. We respond within 30 days.
7. Cookies
We use only essential cookies required for authentication and session management. We do not use third-party advertising cookies.
8. Children
TourDock is not directed at children under 13. We do not knowingly collect data from minors.
9. International transfers
Our infrastructure may process your data outside your country of residence. We use Standard Contractual Clauses or equivalent safeguards for cross-border transfers.
10. Changes to this policy
We may update this policy as the product evolves. Material changes will be announced on this page and (where appropriate) by email.