Introduction
Wolkcle Technology Pvt Ltd (“Wolkcle,” “we,” “us,” or “our”) is committed to protecting the privacy of individuals and businesses that use our platform. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you access or use the Wolkcle platform, including our website, applications, and related services (collectively, the “Services”).
This Policy applies to all users of our Services, including Travel Agents, Tour Operators, Destination Management Companies (DMCs), Inbound Tour Operators, Outbound Tour Operators, and any other business or individual that accesses or uses our platform.
By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.
Definitions
For the purposes of this Privacy Policy:
“Personal Data” means any information that relates to an identified or identifiable individual, including but not limited to name, email address, phone number, business address, and financial information.
“Usage Data” means information collected automatically when you use the Services, including but not limited to IP addresses, browser type, pages visited, time spent on pages, and other diagnostic data.
“Tenant” means a business entity that has registered on the Wolkcle platform and operates within its own isolated data environment.
“End Customer” means a traveller or client whose information may be entered into the platform by a Tenant in the course of managing leads, quotations, bookings, or related travel services.
“Cookies” means small data files placed on your device that help us improve the Services and your experience.
Information We Collect
Information You Provide to Us
When you register for and use our Services, we may collect the following categories of information:
Account and Business Information. When you create an account, we collect your name, email address, phone number, business name, business type, business address, and GST identification number (GSTIN) where applicable.
Lead and Customer Data. When you use our lead management and customer relationship features, you may input information about your end customers, including their names, contact details, travel preferences, and communication history. You are responsible for ensuring that you have the appropriate consent or legal basis to share such information with us.
Quotation and Booking Data. When you create quotations and manage bookings, we collect the details you enter, including itinerary information, package details, hotel and vehicle preferences, pricing information, supplier details, traveller details, and special requests.
Financial and Transaction Data. When you use our invoicing and payment features, we collect invoice details, payment schedules, expense records, and financial summaries. We do not store payment card details; all payment processing is handled securely by our third-party payment processor.
Communication Data. When you use our communication features or contact our support team, we collect the content of those communications, including emails, notes, and messages.
Documents and Files. When you upload documents to the platform, such as identification documents, travel documents, vouchers, or other files, we store those documents within your tenant environment.
AI-Generated Content. When you use our AI-powered features, such as itinerary generation, we collect the text prompts you provide to generate content. Only the prompt text is shared with the AI service provider; no customer personal data, booking details, or other sensitive information from your account is transmitted.
Information We Collect Automatically
When you access or use our Services, we automatically collect certain information:
Device and Access Information. We collect information about the device and browser you use to access our Services, including your IP address, operating system, browser type and version, device identifiers, and language preferences.
Usage and Analytics Data. We collect information about how you interact with our Services, including pages visited, features used, actions taken, time and date of access, time spent on pages, click patterns, and referring URLs.
UTM and Campaign Data. When you or your leads arrive at our platform through marketing campaigns, we collect UTM parameters and campaign tracking information to help measure the effectiveness of marketing efforts.
Log Data. Our servers automatically record information created by your use of the Services, including server logs that may include information such as your IP address, date and time of access, application activity, and error logs.
Information from Third-Party Sources
Analytics Providers. We receive aggregated and individual analytics data from third-party analytics services that help us understand how our Services are used.
Advertising Platforms. When we run advertising campaigns, we may receive conversion data and audience insights from advertising platforms to measure campaign effectiveness and improve our marketing efforts.
How We Use Your Information
We use the information we collect for the following purposes:
Providing and Maintaining the Services. To operate, maintain, and deliver the features and functionality of our platform, including lead management, quotation generation, booking management, invoicing, and all other core features.
Account Management. To create and manage your account, authenticate your identity, and maintain the security of your tenant environment.
Multi-Tenant Data Isolation. To ensure that your data is securely isolated from other tenants on the platform, and that only authorised users within your organisation can access your data.
AI-Powered Features. To process your text prompts through AI services for the purpose of generating itineraries and other content you request.
Communication. To send you transactional communications, such as account verification, booking confirmations, payment reminders, invoice notifications, and other service-related messages.
Analytics and Improvement. To analyse usage patterns, diagnose technical issues, and improve the performance, functionality, and user experience of our Services.
Marketing and Advertising. To measure the effectiveness of our marketing campaigns and deliver relevant information about our Services. We do not sell your personal data to third parties for their marketing purposes.
Legal Compliance. To comply with applicable laws, regulations, and legal processes, including tax and financial record-keeping obligations under Indian law.
Security and Fraud Prevention. To detect, investigate, and prevent fraudulent, unauthorised, or illegal activity, and to protect the rights, property, and safety of our users and the public.
Legal Basis for Processing
We process your information based on the following legal grounds under applicable Indian law, including the Information Technology Act, 2000, and rules made thereunder, and, when enacted and effective, the Digital Personal Data Protection Act, 2023:
Consent. Where you have provided your explicit consent for us to process your personal data for specified purposes.
Contractual Necessity. Where processing is necessary for the performance of our contract with you, including the provision of our Services as described in our Terms of Service.
Legitimate Interest. Where processing is necessary for our legitimate business interests, such as improving our Services, ensuring platform security, and conducting analytics, provided these interests are not overridden by your data protection rights.
Legal Obligation. Where processing is necessary for compliance with a legal obligation to which we are subject, including tax and financial record-keeping requirements.
Data Sharing and Disclosure
We do not sell your personal data. We may share your information in the following limited circumstances:
Third-Party Service Providers
We engage trusted third-party companies and service providers to perform functions on our behalf, including:
- Cloud Infrastructure Providers — to host and store data securely.
- Payment Processors — to process subscription payments securely. These providers handle payment card data directly; we do not store payment card information on our servers.
- AI Service Providers — to process text prompts for AI-powered content generation features. Only the prompt text you provide is shared; no personal data, customer information, or booking details from your account is transmitted to these providers.
- Email Service Providers — to deliver transactional and service-related emails.
- Analytics Providers — to collect and analyse usage data and platform performance.
- Advertising Platforms — to measure advertising campaign performance and deliver relevant content.
These service providers are contractually obligated to use your information only as necessary to provide their services to us and in accordance with this Privacy Policy.
Legal and Regulatory Disclosure
We may disclose your information if required to do so by law or in the good-faith belief that such disclosure is necessary to:
- Comply with a legal obligation, court order, or governmental request.
- Enforce our Terms of Service or other agreements.
- Protect and defend the rights, property, or safety of Wolkcle, our users, or the public.
- Detect, prevent, or address fraud, security, or technical issues.
Business Transfers
In the event of a merger, acquisition, reorganisation, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data.
With Your Consent
We may share your information with third parties when you have given us your explicit consent to do so.
Data Storage and Security
Where We Store Your Data
Your data is stored on secure servers located in India, hosted by our cloud infrastructure provider's South India data centre. We do not transfer your personal data outside of India unless required for specific service functionality (such as processing AI prompts), and any such transfer is conducted in compliance with applicable data protection laws.
Security Measures
We implement industry-standard technical and organisational security measures to protect your data, including:
- Encryption of data in transit using TLS/SSL protocols.
- Secure access controls with role-based authentication and multi-tenant data isolation.
- JWT-based authentication with secure token management.
- Regular security monitoring and vulnerability assessments.
- Secure file storage with time-limited access tokens for document uploads and downloads.
While we strive to use commercially acceptable means to protect your personal data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents in accordance with applicable law.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:
Active Account Data. We retain your account data, including business information, leads, quotations, bookings, and related records, for as long as your account remains active.
Post-Deletion Retention. Upon deletion of your account, we will retain your general account data for a period of sixty (60) days, after which it will be permanently deleted from our active systems. During this period, your data will not be accessible or used for any purpose other than potential account recovery.
Financial and Tax Records. Notwithstanding the above, we may retain financial records, invoices, and transaction data for a longer period as required by applicable Indian tax and financial regulations, including but not limited to requirements under the Goods and Services Tax (GST) laws and the Income Tax Act, 1961. Such records will be retained only for the minimum period required by law and will be securely stored with restricted access.
Aggregated and Anonymised Data. We may retain aggregated, anonymised data that does not identify you personally for an indefinite period for analytical, research, and service improvement purposes.
Your Rights
Subject to applicable Indian law, you have the following rights with respect to your personal data:
Right to Access. You have the right to request access to the personal data we hold about you, including the categories of data collected, the purposes of processing, and the categories of third parties with whom it has been shared.
Right to Correction. You have the right to request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure. You have the right to request deletion of your personal data, subject to our legal obligations to retain certain records as described in the Data Retention section above.
Right to Withdraw Consent. Where processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Grievance Redressal. You have the right to raise a grievance regarding the processing of your personal data. Please contact us using the details provided in the Contact Us section below.
Right to Nominate. Under applicable law, you may have the right to nominate another individual to exercise your data protection rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, please contact us at the email address provided in the Contact Us section. We will respond to your request within thirty (30) days, or within the timeframe prescribed by applicable law, whichever is shorter.
Tenant Responsibilities
As a Tenant on the Wolkcle platform, you acknowledge and agree to the following responsibilities:
Lawful Data Collection. You are responsible for ensuring that any personal data you enter into the platform — including information about your end customers, travellers, and suppliers — has been collected lawfully and with appropriate consent or legal basis.
End Customer Notification. You are responsible for informing your end customers about how their data will be processed, including that it may be stored on the Wolkcle platform, and for obtaining any necessary consents.
Data Accuracy. You are responsible for ensuring that the data you enter into the platform is accurate and up to date.
Authorised Access. You are responsible for managing user access within your tenant environment and ensuring that only authorised individuals within your organisation can access your data.
We act as a data processor on your behalf when processing end customer data that you enter into the platform. You remain the data controller for such data and bear primary responsibility for compliance with applicable data protection laws.
Children's Privacy
Our Services are designed for business use and are not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from children. If you believe that we have inadvertently collected personal data from a child, please contact us immediately and we will take steps to delete such information.
Future Use of AI and Machine Learning
We are committed to continually improving our Services, which may include the introduction of enhanced artificial intelligence and machine learning features. If and when such features are introduced, they may involve processing certain user data through AI and machine learning service providers to deliver functionality such as intelligent recommendations, automated insights, and enhanced workflow automation.
Prior to the launch of any such features that involve material changes to how your data is processed, we will update this Privacy Policy, clearly describe the nature of the data processing involved, and, where required by law, obtain your consent. We will notify you of such changes through the platform or via email.
Third-Party Links and Services
Our Services may contain links to third-party websites, services, or content that are not operated or controlled by us. This Privacy Policy does not apply to the practices of third parties. We encourage you to review the privacy policies of any third-party services you access through our platform. We are not responsible for the content, privacy practices, or security of any third-party websites or services.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the “Last Updated” date at the top of this Privacy Policy.
- Notify you through the platform or via the email address associated with your account.
- Where required by applicable law, obtain your renewed consent.
We encourage you to review this Privacy Policy periodically. Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of the updated Policy.
Governing Law and Dispute Resolution
This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Puri, Odisha, India.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Wolkcle Technology Pvt Ltd
4602019, Ground Floor, Madhubana, Naga Bagicha
Puri Station Road, Puri, Odisha, India — 752002
Email: support@wolkcle.com
We will endeavour to respond to all privacy-related inquiries within thirty (30) days of receipt.
This Privacy Policy was last updated on March 10, 2026.