Scope of Service & Platform Delivery
TripFlow CRM ("Platform", "We", "Us", or "Service Provider") delivers a specialized multi-tenant software-as-a-service (SaaS) application designed for travel industry operations. The standard platform includes:
- Itinerary Builder & Quotation Generator: Tools to create custom day-by-day travel programs, cost structures, margin markups, and customer-facing PDF proposals.
- Booking Management & Confirmations: Tools to record confirmed bookings, passenger travel details, payment installment tracking, and booking summaries.
- Client Pipeline & Lead Tracking: Stage-based inquiry workflows from initial customer contact to completed bookings, with sales follow-up notes.
- Multi-User Organization Architecture: Role-based access control (Admin, Sales, Operations, Accounts) permitting agency administrators to manage employee permissions.
Technical Architecture & Scope: The Platform operates on standard web server request-response architecture optimized for shared and cloud hosting environments. Data updates, stage progressions, and notifications are processed upon standard user actions and page refreshes. The standard platform does not utilize persistent socket daemons or external WebSocket brokers. Access is granted on a non-exclusive, subscription-based license for the Tenant's internal travel business operations.
Tenant Data Ownership & Intellectual Property
We recognize that customer data, supplier commercial agreements, itinerary arrangements, and pricing margins are the core proprietary assets of your travel agency.
Sole Ownership of Tenant Data
The Tenant retains 100% exclusive intellectual property, commercial, and title rights over all information uploaded, created, or stored within their workspace. This includes, without limitation: customer names, contact numbers, passport records, private supplier rates, itinerary descriptions, booking confirmations, financial invoices, and employee records.
The Platform Provider asserts zero ownership claim over any Tenant data. Tenant grants the Platform Provider only the limited, automated technical permission strictly necessary to process, display, store, and back up said data on the servers hosting the Tenant's workspace.
Zero-Inspection Covenant & Non-Competition
To eliminate any commercial conflict of interest, the Platform Provider formally and contractually binds itself to the following zero-inspection covenants:
Strict Non-Inspection & Non-Interference Undertakings
- Zero Inspection: Platform management, administrators, and contractors will never inspect, open, analyze, scrape, mine, sell, or commercialize Tenant customer databases, traveler profiles, or itinerary calculations.
- Zero Customer Contact: Under no circumstance will the Platform Provider or its affiliates contact, market to, solicit, or engage with any traveler, lead, or client entered into the Tenant's CRM.
- Zero Supplier Rate Exploitation: The Platform Provider will never inspect, extract, or negotiate with travel suppliers using proprietary rates, contracts, or markups entered by the Tenant.
- Audit Logging: Any critical system-level database maintenance is conducted via automated scripts. In the rare event a technical engineer must troubleshoot an active support ticket, access is granted solely upon written authorization from the Tenant Administrator.
Account Administration, Credentials & Roles
The Tenant's Designated Administrator has sovereign administrative control over creating, modifying, and deactivating user accounts for their agency.
- Credential Confidentiality: Tenant users are required to maintain secure passwords and safeguard their authentication credentials. The Tenant assumes full legal responsibility for actions conducted under authorized employee accounts.
- Immediate Revocation: The Tenant agrees to immediately deactivate employee credentials upon staff termination, reassignment, or suspected credential compromise.
- Multi-Factor & Throttling: The Platform enforces automated rate limiting and brute-force lockouts to protect accounts against credential guessing.
Acceptable Use Policy
The Tenant agrees to utilize TripFlow CRM exclusively for legitimate, lawful travel management and customer relationship operations. The following actions are strictly prohibited:
- Transmitting unsolicited commercial email (spam) or fraudulent inquiries through the Platform.
- Attempting to probe, scan, or breach platform security, bypass rate limiters, or test vulnerabilities without explicit written authorization.
- Uploading malicious files, executable scripts (such as PHP webshells, batch scripts, or trojans) through quotation attachment or gallery modules.
- Reverse engineering, decompiling, or attempting to derive the source code or proprietary database schema of the Platform.
- Reselling, sublicensing, or providing direct access to the platform software to third-party entities outside the Tenant's authorized organization.
Violation of this Section grants the Platform Provider the right to immediately suspend workspace access to safeguard system integrity.
Subscription Billing, Renewals & Grace Period
Subscription fees are billed in advance based on the agreed billing cycle (monthly, quarterly, or annual).
- Continuity of Access: Upon receipt of renewal payment, active access is extended automatically through the new subscription period.
- 14-Day Renewal Grace Period: In the event a subscription expires, the Tenant's account enters a 14-day operational grace period where stored data remains intact, allowing payment processing or renewal finalization without disruption to critical client bookings.
- Taxes: Fees are exclusive of applicable local taxes, which will be invoiced in compliance with prevailing legal regulations.
Standard Features vs. Custom Development (Extra Paid Basis)
To ensure complete transparency and avoid future misunderstandings regarding development scope:
Custom Feature Policy & Development Terms
- Standard Subscription Scope: Subscription fees grant access strictly to the standard, ready-to-use CRM features as provided in the current production release.
- Custom Features Require Extra Payment: If a Tenant requires custom-built features, tailored workflows, agency-specific PDF layouts, unique calculation logic, external third-party API integrations, or proprietary modules built specifically for their unique business process, such work is categorized as Custom Development Services and is not included in the standard subscription.
- Separate Scoping & Quotation: Any customization request submitted by a Tenant will be reviewed by our engineering team and quoted separately based on estimated development effort, architecture, and complexity. Custom development will only be initiated after mutual written agreement and payment of the agreed customization fees.
- Platform Integrity: The Platform Provider reserves the right to decline any customization request that compromises system security, database stability, multi-tenant isolation, or standard shared hosting performance.
Service Availability (SLA) & Automated Backups
The Platform Provider strives to maintain high availability and reliability for mission-critical travel operations:
- Target Availability: We target a minimum monthly service availability of 99.5%, excluding scheduled off-peak maintenance windows.
- Scheduled Maintenance: Routine updates, security patches, and database indexing are performed during off-peak hours with advance electronic notification whenever possible.
- Automated Backups: System databases undergo automated encrypted daily backups to ensure business continuity in the event of unexpected hardware or network failures.
Third-Party Travel Suppliers & API Disclaimers
TripFlow CRM serves strictly as an operational workflow, itinerary generation, and records management platform:
- The Platform does not act as a travel agent, consolidator, airline carrier, or hotel operator. All supplier contracts, travel fulfillment, cancellations, client refunds, and service delivery remain solely between the Tenant and their respective travel suppliers and travelers.
- The Platform Provider is not liable for errors in flight schedules, supplier pricing modifications, third-party payment gateway outages, or telecommunication network disruptions outside our direct infrastructure control.
Data Export, Termination & Secure Purging
Either party may terminate the subscription agreement with notice prior to the start of the next billing cycle.
Transition & Data Portability Guarantee
Upon account cancellation or contract completion, the Tenant is provided a 14-day data export period during which the Tenant administrator may export all client contact records, booking histories, quotations, and booking archives in standard formats (CSV, Excel, PDF).
Following the expiration of the 14-day transition period, the Tenant's partitioned database records and uploaded files are queued for permanent cryptographic deletion and purging from active production servers, in accordance with industry data destruction standards.
Limitation of Liability & Dispute Resolution
To the maximum extent permitted under applicable law:
- Neither party shall be liable for indirect, incidental, punitive, or consequential damages, including loss of anticipated travel profits or commercial opportunities.
- The cumulative financial liability of the Platform Provider arising from this Agreement shall not exceed the total subscription fees actually paid by the Tenant during the three (3) calendar months immediately preceding the event giving rise to liability.
- This Agreement is governed by the laws of India, and any disputes arising shall be subject to the exclusive jurisdiction of the competent courts having jurisdiction over the Platform Provider's corporate headquarters.
Questions regarding these terms? Contact our Compliance & Security Team at support@tripflowcrm.in