Security and privacy
Security and data protection at Tourandi
Tourandi holds your bookings and the details of your customers, guides and team. Here's how we protect them, what you control and how we comply with GDPR. We only list what the product does today.
GDPR
You decide, we process on your behalf
Your company is the controller of its customers' data. Tourandi processes it on your behalf, as a processor, only to provide the service.
- We sign a data processing agreement (GDPR art. 28) with every customer company
- The agreement covers the security measures and the list of sub-processors
- We tell you before changing a sub-processor, and you can object
- We give you a template privacy notice for your booking process
How we protect your data
Measures already in the product
Each company kept apart
Every company's data is separated in the data-access layer and, on top of that, by row-level security in the database. Automated tests check it.
Roles and permissions
Owner, admin, office, guide and agent. Each person only sees and does what their role allows, and the server enforces it on every request.
Activity log
Changes to bookings, departures, prices, settlements and permissions are logged with who made them. Every booking shows its history.
No card data
Card payments happen on your gateway's page or form (Stripe or Redsys). Tourandi never receives or stores card numbers.
Encrypted credentials
Your integration keys, such as the Turitop connection, are stored encrypted. If you disconnect Turitop, its credentials are deleted.
Encrypted connections
All traffic between your browser, the app and our servers is encrypted over HTTPS. Passwords are stored hashed, never in plain text.
Rights and control
Tools to do right by your customers
When a customer exercises their rights, you handle it from the dashboard.
Export their data
Download a customer's data to answer an access or portability request.
Anonymise a customer
Erase their personal details when they ask. Bookings stay, anonymised, so your reports still add up.
Retention period
Turn on automatic anonymisation of customers with no activity for the number of years you choose, with a preview first.
Less data on guides' phones
Customer names and phone numbers disappear from the guide portal a few days after the departure. You choose how many.
Your data is yours
Take it with you whenever you like
- Export bookings, reports and settlements to CSV at any time
- If a subscription payment fails, your data stays put: the account goes read-only, and billing never deletes anything
- If you leave, you can export everything and ask us to delete it
FAQ
Questions about security and privacy
Need us to fill in a security questionnaire or review the agreement? Get in touch.
Do you sign a data processing agreement?
Yes. We sign a data processing agreement (GDPR art. 28) with every customer company. It sets out the data we process, the security measures and the sub-processors.
Which providers process the data?
The sub-processors (application hosting, database and email delivery) and their safeguards are listed in the annex to the processing agreement, which we send you before signing.
Do you store my customers' card details?
No. Card payments go through your gateway (Stripe or Redsys) and the money lands in your account. Tourandi stores each payment's status, amount and reference, never the card number.
How do I control what each team member sees?
With roles: owner, admin, office, guide and agent. For example, an agent only sees and manages their own bookings, and a guide sees their schedule and departures.
A customer has asked me to delete their data. What do I do?
Anonymise them from their customer record: their personal details are erased and their bookings stay, anonymised, for your reports. If they have upcoming active bookings, cancel those first.
What happens to my data if I leave Tourandi?
You can export your bookings, customers and reports to CSV and ask us to delete your account. Billing never deletes data on its own.
Start selling more with less work
Let's talk about your business
Tell us what tours you sell and how you work today. We'll reply within one working day with what Tourandi can do for you and a price that fits.
Get in touchI'd like a walkthrough first
We'll show you Tourandi with your own tours, answer your questions and plan the move from your current system together.
Book a demo