Security
How client data is protected
Passport scans are some of the most sensitive files an agency holds. This page explains, in plain terms, what we do with them and who we rely on.
Agency isolation
Postgres row-level security on every table: one agency can never read or change another’s records or files. We test this on every release.
Private file storage
Scans sit in a private storage bucket. Each view uses a signed link that expires after 60 seconds, issued only to a signed-in member of the same agency.
Encryption
HTTPS for every connection. Data and files are encrypted at rest by our hosting providers.
Deletion and retention
Deleting a traveller removes their files at once. Deleting a workspace removes everything immediately; provider backups roll off within their standard window.
Reminder emails go only to your agency’s address, from a verified sending domain. Pre-departure emails to travellers wait for your approval unless you switch that off.
Two-factor sign-in
Each person can add a 6-digit code from an authenticator app to their login. An owner can require it for everyone; until a member completes the code, the database shows them no agency data.
Who opened which scan
Each time someone in the agency opens a passport or visa scan or a traveller upload in TripClerk, we record who, when and from which IP address. Only the owner can see this log, and it cannot be edited.
Client links
Each client’s private page uses a long random link that only shows that client’s own trip. Links expire after 180 days and you can switch one off at any time. Files a traveller sends go into the same private storage.
Who can do what
Each agency has one owner and any number of staff. These limits are enforced by the database, not only hidden in the app.
| Action | Owner | Staff |
|---|---|---|
| See and edit clients, travellers, groups, hotels and suppliers | Yes | Yes |
| Upload and view passport and visa scans | Yes | Yes |
| Create bookings and mark instalments paid | Yes | Yes |
| Confirm bank transfers reported by clients | Yes | Yes |
| Create proposals and client portal links | Yes | Yes |
| Export CSV files | Yes | Yes |
| Delete bookings, instalments and groups | Yes | No |
| Change agency settings, branding, bank details and invoice terms | Yes | No |
| Invite and remove staff | Yes | No |
| Delete the workspace and all its data | Yes | No |
Vendors we use
| Vendor | What for |
|---|---|
| Supabase | Database, sign-in and private file storage |
| Cloudflare | Hosting the website and app |
| Resend | Sending reminder and account emails |
Reporting a security issue
Email hello@ahmadzunair.online with “Security” in the subject. Please do not include real client data in your report. See also the privacy notice.