Legal
Privacy Policy
Last updated: August 29, 2026
This policy explains what information Travelyt collects when you use our website, mobile app, or service, how we use it, who we share it with, and your rights. It applies to all Travelyt customers, account holders, and visitors.
Information we collect
When you request a quote, create a booking request, pay for service, apply or onboard as a driver, or contact support, we collect identifiers and details you provide directly. These may include your name, contact information, trip and bag details, addresses, vehicle and license information, and private driver-readiness evidence such as training, insurance, registration, and vehicle photos. Before live custody handoffs, we may verify customer, driver, handler, or employee identity using a government ID such as a driver's license or passport plus a selfie, liveness video, or similar biometric check. Online checkout is processed by Stripe or another payment processor on our behalf; Travelyt does not store full card numbers, card security codes, or wallet credentials on our systems. For active bookings, we may also generate operational records (timestamps, location checkpoints, seal IDs, bag photos, airline or airport handoff recipient details, signatures, and proof-of-service images) needed to maintain chain of custody. If you create an account, we store your login credentials and account preferences. We may also collect basic device information (browser type, IP address, app version, crash logs) for security, fraud prevention, and product improvement.
How we use it
We use your information to respond to quote requests, coordinate pickups and deliveries where available, send service updates (SMS, email, and push notifications), maintain chain-of-custody and insurance records, support claims and disputes, prevent misuse and fraud, comply with legal obligations, and improve Travelyt operations. We do not sell your personal information, and we do not use it for cross-context behavioral advertising.
Who we share it with
We share booking and contact details only with the people and providers required to operate the service: assigned drivers and handlers, airport or airline contacts when needed for bag identification and an authorized handoff, identity-verification or driver-readiness providers where configured, our communications providers (SMS and email delivery), payment processors, our hosting and analytics providers, our insurance and claims partners, and our legal and accounting advisors. We may disclose information to law enforcement or other authorities when required by law, subpoena, or court order, or when needed to protect Travelyt, our customers, or the public.
Tracking and custody data
For active bookings, we generate and retain timestamps, GPS location checkpoints, tamper-evident seal IDs, bag photos, driver and handler IDs, airline or airport receiving-party details, and proof-of-service signatures or photos. This data is used to verify chain of custody, support insurance claims, and let you and authorized recipients follow verified bag status updates.
Identity verification and biometrics
When identity verification is required, Travelyt may ask a customer, driver, employee, or handler to verify a driver's license, passport, employee credential, selfie, or liveness video. We use this only for account security, fraud prevention, readiness review where applicable, custody handoff validation, and legal or claims support. Government ID images and biometric/liveness checks are processed by a specialized verification provider, and Travelyt also securely retains a copy of the ID document and selfie images captured during verification, together with verification status, provider reference IDs, and timestamps, as the evidentiary core of our chain of custody. These images are stored in access-restricted systems, are never sold or used for advertising, and are retained for up to 3 years from capture or until the verification purpose ends, whichever comes first, after which they are permanently deleted.
Push notifications
If you opt in, we send push notifications for booking confirmations, pickup and delivery status, driver assignments, exception alerts, and limited service announcements. You can disable push notifications at any time from your device's notification settings or your in-app preferences.
Cookies and local storage
Travelyt uses essential cookies and local storage to support login state, save in-progress quotes, remember preferences, and protect against abuse. With your permission, we use Google Analytics to measure aggregate website usage and understand which pages and services are useful. Analytics storage is denied by default until you select Accept analytics. You can select Decline or change your choice by clearing Travelyt site data in your browser. Disabling essential cookies may prevent parts of Travelyt from working.
Data retention
We retain quote requests for up to 24 months. We retain completed booking records and chain-of-custody data for as long as needed to provide service, handle claims, comply with laws, and resolve disputes — typically 3 years for operational records, unless a longer period is required by law. Payment and financial records may be retained for up to 7 years as required for tax, accounting, and dispute purposes. Account data is retained while your account is active and deleted on request as described below.
Security
We protect personal information using HTTPS in transit, encrypted databases at rest, access controls on internal systems, role-based permissions, and audit logs. Travelyt agents must complete identity verification, required evidence review, and scored custody training before activation. Any carrier-sponsored Security Threat Assessment or other external screening required for an authorized airline workflow remains a separate activation gate. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authorities as required by law.
Automated processing and AI
Travelyt uses automated workflow rules to process booking and operational data. Current rules support chain-of-custody reporting, timing and exception alerts, duplicate checks, routing suggestions, and aggregate service analytics. Travelyt does not currently use AI to approve identity, inspect baggage, decide airline acceptance, or replace required human review. If we later offer an AI-assisted customer support or operational feature, it will use only the minimum authorized context, will not receive full payment credentials or other customers' data, and will remain subject to human review for any material booking decision. We do not use your trip, location, account, or chain-of-custody data to train public or third-party AI models, and we do not sell or share AI-derived insights about you. Automated outputs such as estimated windows, status summaries, and routing suggestions may contain errors; binding service details come from confirmed booking records and Travelyt staff. You can request information about, or human review of, any automated decision that materially affects your booking by contacting info@travelyt.us.
Your rights
You have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. California residents have additional rights under the CCPA, including the right to know what we collect, the right to delete, the right to correct, the right to opt out of sale or sharing (we do not sell), and the right to non-discrimination. Residents of the EU/EEA and UK have rights under the GDPR and UK GDPR, including the right to lodge a complaint with your local supervisory authority. To exercise any of these rights, email info@travelyt.us.
Account and data deletion
You can delete your account and request deletion of your personal information at any time. From the app or website, go to Profile → Settings → Delete Account, or email info@travelyt.us. We will confirm your identity, delete your account and personal information within 30 days, and retain only the records we are legally required to keep (such as financial records and chain-of-custody logs for completed bookings).
Children's privacy
Travelyt is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at info@travelyt.us and we will delete it.
International transfers
Travelyt is operated from the United States. If you use Travelyt from outside the US, your information may be transferred to, stored, and processed in the US and other countries where our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
Third-party services
Travelyt integrates with third-party services including our SMS and email providers, hosting and analytics providers, Stripe or another payment processor, operational partners needed to coordinate authorized handoff, and mobile platform services from Apple and Google when you use our app. These providers process information under their own privacy policies and our data-processing agreements with them.
Changes to this policy
We may update this policy as Travelyt evolves. When we make material changes, we will update the date below and, where appropriate, notify you by email or in-app notice before the changes take effect.
Contact
Questions, requests, or complaints about privacy can be sent to info@travelyt.us. We respond to verified requests within 30 days.
Questions about this policy can be sent to info@travelyt.us.