Privacy Policy

Last updated: March 19, 2026

Triply (“we”, “us”, “our”) respects your privacy and is committed to protecting personal data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules and regulations.

This Privacy Policy explains how personal data is collected, used, stored, and protected when you use the Triply platform.

1. Scope of This Policy

This Privacy Policy applies to:

  • Travel agents and agencies using Triply
  • Clients and travelers who view quotes, make payments, or upload documents via Triply

2. Information We Collect

A. Information Provided by Agents

  • Name, email address, phone number
  • Agency details
  • Account credentials
  • Subscription and billing information
  • Client and traveler information entered into the platform

B. Information Provided by Clients / Travelers

  • Name and contact details
  • Travel and booking information
  • Uploaded documents (e.g., passport copies, visa requirements)
  • Payment confirmation details (processed by third parties)

C. Automatically Collected Information

  • IP address
  • Device and browser type
  • Log data and usage activity
  • Security and performance data

D. Identity Verification

  • Government-issued ID documents (submitted via our identity verification provider)
  • Verification status and session metadata
  • Name as verified through the identity check

3. How We Use Personal Data

We use personal data to:

  • Provide and operate the Triply platform
  • Generate and manage quotes, bookings, and payment links
  • Store and process travel and visa-related documents
  • Send system notifications and reminders
  • Maintain platform security and prevent abuse
  • Comply with legal and regulatory obligations
  • Verify the identity of organization owners through third-party identity verification services

4. Legal Basis for Processing

We process personal data based on one or more of the following:

  • Contractual necessity
  • User consent
  • Legitimate business interests
  • Compliance with legal obligations under Philippine law

5. Data Ownership & Roles

  • Agents retain ownership of client and traveler data they upload
  • Triply acts as a data processor for agent-provided data
  • Agents are responsible for obtaining consent from their clients and travelers

6. Data Sharing & Third Parties

We may share personal data with trusted third-party service providers, including:

  • Payment processors
  • Cloud hosting and storage providers
  • Email and notification services
  • Identity verification providers (for KYC compliance)

These third parties only process data necessary to perform their services and are bound by confidentiality and security obligations.

7. Data Retention

We retain personal data:

  • While an account remains active
  • As necessary to provide the service
  • As required by law or regulatory obligations

You may request data deletion, subject to legal and operational requirements.

8. Data Security

We implement reasonable technical and organizational safeguards to protect personal data, including:

  • Field-level encryption: Sensitive personal data such as passport numbers, dates of birth, and document expiry dates are encrypted at rest using AES-256-GCM authenticated encryption with unique keys per field operation
  • Data masking: When sensitive data is shared via public links (e.g., quote previews), personally identifiable fields are masked to show only partial information
  • Encrypted connections: All data in transit is protected via TLS
  • Access controls: Role-based access ensures only authorized users can view or manage data
  • Secure token storage: Share links and API tokens are cryptographically hashed before storage

While we take security seriously, no system can be guaranteed 100% secure.

9. Identity Verification

  • Organization owners may be required to complete identity verification (Know Your Customer) to access certain platform features
  • Verification is performed by a third-party provider (Didit) — Triply does not directly store or process identity documents submitted during verification
  • Verification results (status and verified name) are stored by Triply to manage feature access
  • Verification sessions are rate-limited and expire automatically for security

10. Data Subject Rights

In accordance with Philippine law, you have the right to:

  • Be informed
  • Access your personal data
  • Correct inaccurate data
  • Object to processing
  • Request erasure or blocking
  • Data portability
  • Lodge a complaint with the National Privacy Commission

11. Children's Data

Triply is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the platform constitutes acceptance of the updated policy.

13. Contact Information

For privacy-related inquiries or requests:

📧 [email protected]

📍 Triply, Philippines