1. Parties and roles
TRIPQUO provides software to travel agents. The agent who sent the proposal generally determines which traveler information is requested and why. TRIPQUO and infrastructure providers process data to deliver the service, subject to applicable law. The legal operator identity and contact information require verification before final publication.
2. Data involved
Uploads may include JPG, PNG or PDF passport, identity, or travel documents (up to 10 MB each). Documents may reveal name, photograph, document number, nationality, date and place of birth, issue/expiry dates, machine-readable zone (MRZ), and other visible data. Document type, traveler label, related quote, upload date and terms-acceptance evidence may be recorded. Only provide what the agent needs.
3. Authority and minors
You must be the document holder or lawfully authorized to submit it. For a minor, the parent or guardian authorization required by applicable law must exist. When acting for another person, provide legally required notice and obtain any required authority. Checking a box cannot create authority you do not have.
4. Purposes
Documents are used to transmit traveler information to the authorized agent and to support travel handling. AI extraction occurs only if an authorized agent deliberately requests it. An upload does not book flights, hotels, or other travel services.
5. Upload and submission process
The system uses private storage and a temporary upload token associated with a proposal. Documents can be removed from a draft using available management controls before final submission. After submission, the public link no longer allows further viewing/deletion; ask the agent for assistance.
6. Access and visibility
Document contents do not appear on the public quote or public quote PDF. Only authorized agent-side accounts should obtain access under workspace controls, using short-lived signed viewing URLs. Authorized technical providers may process data for hosting, security or service support.
7. Optional AI analysis
Uploading does not automatically start a passport scan. An agent may trigger third-party AI analysis of a document, sending its content to the relevant AI provider. Extracted fields may include identity and MRZ data, and may be wrong. The agent is solely responsible for checking all extracted fields against the original document before relying on, copying or booking with them, subject to applicable law. AI does not certify identity, document validity or eligibility to travel.
8. Providers and transfers
TRIPQUO uses Base44 infrastructure and private document storage according to the active service configuration, including Cloudflare R2 when enabled for traveler documents. Historical private files stored by Base44 may remain with that provider until removed. OpenAI interfaces are used for applicable AI scanning. Providers or subprocessors may process data outside Israel. Specific legal operator, jurisdictions, onward transfers, agreements and contact details must be verified in the final Privacy Policy.
9. 72-hour access and deletion limits
TRIPQUO is configured to terminate product access no later than 72 hours after upload, including legacy documents. Cleanup removes references and extracted output in the active database after expiry. Physical deletion of historical files in Base44 storage is not independently verified. For new files stored in Cloudflare R2, an automated process attempts deletion and verifies absence before 72 hours, but technical failures or delays can occur, and retention at AI processors and other service providers requires separate verification. TRIPQUO therefore does not yet warrant complete erasure from every provider system within 72 hours.
10. Early removal
Draft-upload controls allow removal prior to submission, and agents can receive removal requests afterward. Removing application access or a stored URI is not necessarily the same as physically erasing the file. Requests are assessed in line with applicable legal rights and provider capabilities.
11. Security
Measures include private storage, temporary signed links, file validation and scoped authorization. No networked service can promise absolute security. Do not share your proposal link with unauthorized parties.
12. Choice and alternatives
You may ask your travel agent about alternative methods of supplying documents. Declining to provide a document may prevent the agent from completing steps that require it. The lawful basis and other mandatory notices must be detailed in the final Privacy Policy.
13. Rights and inquiries
Contact the requesting travel agent first about the document request, access, correction or deletion. TRIPQUO contact methods will appear in its complete Privacy Policy. This notice does not reduce statutory access, rectification, erasure or complaint rights.
14. Affirmative acknowledgement
Before uploading, you must actively check an initially unchecked acknowledgement that you have read these terms and are authorized to submit the document. The service records the policy version, acknowledgement time, method and non-passport quote/agent identifiers in a separate audit trail. A checkbox alone does not establish a third party’s consent or exempt any party from its legal obligations.
15. Travel-agent verification and AI risk
The travel agent alone is responsible for checking every extracted field against the original passport, including each passport-number digit, names, dates, expiration and nationality, correcting errors, and obtaining customer confirmation as appropriate before copying, booking or transmitting data. TRIPQUO is not liable for the agent’s reliance on unchecked AI errors to the extent permitted by law. TRIPQUO offers tools and does not independently verify passports, visas or entry requirements. Liability limitations apply only to the extent permitted by law.
16. Monthly agent acknowledgement and verification
At the first passport AI scan of each calendar month, each authorized agent must renew an explicit acceptance of responsibility. The agent must compare every extracted digit and field against the original passport and record a verification before copying the output. Monthly acceptance does not replace traveler-specific authority or per-quote upload consent.
17. Per-quote consent and audit evidence
Agents uploading for a traveler must expressly confirm authority for that specific quote; public clients must separately accept these terms for each upload. The service records quote, workspace and agent identifiers, consent type, version and timestamp separately from passport data. Audit evidence may be retained longer than the temporary source files where justified by lawful recordkeeping and legal-defense purposes under the applicable policy.
18. Main terms and updates
This document supplements the general Terms of Service and Privacy Policy. More specific and protective rules for traveler documents govern to the extent permitted by law. Material changes require updated terms, notice and renewed acknowledgement where legally necessary.