Important MVP notice
This privacy policy is a starter draft for MVP testing. It is written in plain English so users can understand the intended data use. It must be reviewed before production launch.
The platform is being designed with UK GDPR principles in mind, including transparency, purpose limitation, data minimisation, security, and user rights.
Who controls the data
Travel Xchange is the platform being developed by the project owner. A final company name, registered address, and privacy contact should be added before public launch.
For MVP testing, privacy questions and data requests should be directed to the project owner.
Information we may collect
Travel Xchange may collect account details, profile details, company details, roles, verification status, posts, comments, groups, jobs, events, articles, messages, notifications, billing status, support questions, reports, and admin moderation records.
The platform may also collect technical information such as device details, browser details, IP address, security logs, consent choices, and usage events needed to operate and protect the service.
Why we use information
We use information to create accounts, provide member profiles, run the feed, manage groups, show jobs and events, process support questions, send notifications, moderate content, prevent misuse, manage subscriptions, and improve the product.
Some processing is needed to provide the service, some is needed for legal or security reasons, and some may rely on consent, such as optional analytics or marketing cookies.
Sharing information
Information may be shared with trusted service providers that help run the platform, such as Supabase for authentication and database services, Vercel for hosting, Stripe for payments, and email or notification tools added later.
Public profile and company information may be visible to other users depending on profile settings and platform rules.
Retention
Personal data should only be kept for as long as needed for the purpose it was collected, platform security, legal records, dispute handling, accounting, or audit requirements.
Retention periods will be refined before production launch as real operating processes are confirmed.
Your rights
Depending on the circumstances, users may have rights to access, correct, delete, restrict, object to, or receive a copy of their personal data.
The data request page explains how users can ask for help with these rights during the MVP.
Complaints
Users should contact Travel Xchange first so the project owner can try to resolve the issue. UK users can also contact the Information Commissioner's Office if they are unhappy with how personal data is handled.