Privacy Policy

This Privacy Policy explains how JK Tour CRM, operated by Elyspace, collects, uses, stores, and protects your information when you use our platform. We are committed to handling your data responsibly and transparently.

1. Information We Collect

We collect: (a) account information you provide — name, email, phone number, company name, and business details; (b) the operational data you create inside the platform, such as client records, itineraries, proposals, leads, and invoices; and (c) basic technical and usage data — IP address, browser type, and feature usage — collected to keep the Service secure and to improve it.

2. How We Use Your Information

We use your information to provide and operate the Service, authenticate your account, process subscriptions and payments, send essential transactional communications (such as receipts, renewal reminders, and security notices), provide customer support, and improve platform performance and features.

3. Legal Basis & Consent

We process your data to perform our contract with you (providing the Service), to comply with legal obligations, and for our legitimate interest in operating and improving JK Tour CRM. Optional features that require additional processing are enabled only with your explicit consent.

4. Third-Party Service Providers

We share data only as needed to deliver the Service — for example with payment gateways to process transactions, email/messaging providers to deliver notifications, and AI providers when you choose to use AI features. Where you supply your own AI API key, requests are sent directly to your provider and we do not retain a copy.

5. Cookies

We use strictly necessary first-party cookies for authentication and security (such as CSRF protection). We do not use third-party advertising or tracking cookies.

6. Data Retention

We retain your data for as long as your account remains active. After cancellation or suspension, data may be retained for a limited period to allow reactivation and to meet legal or accounting requirements, after which it may be permanently deleted.

7. Data Security

Sensitive credentials (such as API keys and messaging tokens) are encrypted at rest. Passwords are hashed using industry-standard algorithms. Production traffic is served over HTTPS. While we apply strong safeguards, no system can be guaranteed 100% secure.

8. Your Rights

You may access, correct, export, or request deletion of your personal data at any time from your account settings or by contacting us. We will respond to verified requests within a reasonable timeframe.

9. Contact

For any privacy-related question or request, email us at info@jktourcrm.com.

JK Tour CRM is a product of Elyspace. For questions, email info@jktourcrm.com.