Privacy Policy

Travel Docx is a service of Flylop FZE LLC, a company in Sharjah, United Arab Emirates (“we”, “us”).

We decide how Travel Docx uses your personal data and are responsible for that use; no other company shares that role. This policy covers our apps, www.traveldocx.com, invoice pages and forms we send by link, and everyone whose details reach us, including travellers and children. It is a notice, not part of our contract with you. A “file” is one order and everything in it.

• • About you and the people you apply for: names, contact details, nationality, date and place of birth, gender, marital status, address, emergency contact, passport and residence details and, where a destination asks, work, income, bank balances, family, travel history and past refusals. Some of it comes from whoever applies or pays for you, governments, or licensed payment service providers (“payment providers”).
• • Documents: what you upload, fill in or sign, and what we prepare or receive for you, such as a visa or refusal letter.
• • Sensitive answers: family, health, religion or criminal records, asked only when a destination requires them and used only for that application, which cannot be prepared without them. By giving them you also agree to that use; for someone else, you confirm they asked you to apply and agreed.
• • Payments: amounts, invoices, refunds, promo codes and, for a card, the payment provider's record, such as the result, whether your bank checked it, and the card's brand, last four digits and country of issue.
• • Messages and calls: chats, voice notes, emails, Lop conversations (section 4), call-back details and feedback. We do not record calls; we keep who called, when, about which file and how it ended.
• • Automatically: your IP address and device details, also recorded when you accept our Terms & Conditions or pay; app version, notification code, settings, time zone and last activity; records of important actions; and advert data (section 9).
• • Phone permissions (camera, photos, microphone, calendar, notifications) are used only for their feature. Face ID or fingerprint stays on your phone, and on iPhone your location goes only to Apple's map service, to fill in your country.

We use personal data only where the law allows: to give you the service you asked for, to meet a legal duty, or to make or answer a claim, complaint or payment dispute. These cover your account, orders, payments, records, fraud prevention and collecting money owed, even if you withdraw a consent. We ask your consent, which you can withdraw at any time, for sensitive answers, phone permissions and, on iPhone, sharing your advertising ID with Meta; offers and advert measurement work as sections 9 and 10 describe.

If you would rather not give information a destination asks for and we cannot go ahead without it, that counts as you cancelling the order (Terms & Conditions, section 6).

We use AI services that may handle data in the United States and China. Lop, our automated assistant, uses Anthropic, an AI provider in the United States. Our email-drafting tool uses DeepSeek, an AI provider that runs its systems in China. A person works on every file.

• • Lop receives your messages to it, your name, email, phone and WhatsApp numbers, nationality, where you live, the visas you hold, and your recent orders with their payments, invoices, refunds, promo codes, appointments and consultant's notes. Its answers are general help and can be wrong; your consultant and your case page have the final word. Messages to your consultant on your case page are read by people, not sent to Lop.
• • Email drafts: the tool receives your name, the subject and your consultant's notes.
• • Research: to work out what a destination asks for, AI and web-search services receive only the destination, nationality, country of residence and residence status, never your name or passport details.
• • Canada visitor visa files: an AI tool working in the United States reads your uploads and answers, flags gaps and may turn away an upload it cannot read or that is not what we asked for. A person checks every point; if you think the tool got something wrong, tell your consultant and they will look again.

Apart from fixed rules, such as keeping a delivered visa locked until the balance is paid, people decide about your file, a refund or your account.

• • Hosting, database, network and file-storage providers, which store and carry our data, and may carry calls in encrypted form.
• • An email provider (your name, email address and our emails, including invoices, visas and documents); Apple and Google (notification codes and text).
• • Payment providers (your name, contact details, the amount and its purpose), which collect card details themselves and use data to prevent fraud.
• • Governments, consulates, embassies, and visa and appointment centres, for what your application needs.
• • Airlines, hotels, booking services and travel insurers, for what your order includes; for a Canada visitor visa file, the people and companies in Canada who help prepare it, anyone inviting you, and offices that certify documents.
• • AI and web-search services (section 4), Meta (section 9), and WhatsApp for messages sent there. Documents you send us on WhatsApp are copied into your order; we do not send passports or visas by WhatsApp.
• • Our advisers and insurers; debt collectors, if money owed stays unpaid after a reminder; authorities, courts and police where the law requires, or to report fraud or protect our rights; a buyer of our business, which must keep to this policy; and people you choose.

Providers working for us may use data only for that work and must protect it at least as well as this policy does. Other recipients, such as governments, payment providers, Apple, Google and Meta, use it under their own laws and privacy policies.

Your data goes to the country you apply to, and many providers handle it outside the United Arab Emirates; we send data abroad only to give you the service or where the law allows. We never sell your personal data or use your documents, passport details or messages for advertising. Ask us for our providers' names and locations.

We use the records in sections 2 and 8, such as your file's timeline, what you accepted before paying, the payment provider's result and when we delivered, to prevent fraud and answer payment disputes. We may ask you or the cardholder for proof of identity and a card statement showing only its last four digits; never send us a full card number, security code, PIN or one-time code. We may share these records with payment providers, banks and card networks and, if we suspect forgery, false information or card misuse, the government concerned and the police.

Data travels encrypted and documents sit in private storage. Most download links expire after 15 minutes; links in some emails, such as receipts and large folders, last 7 days for anyone holding that email. No system is completely secure; if a breach puts your data at risk, we act to contain it and tell you and the authorities where the law requires. Keep your email and phone secure, never share a sign-in code (we never ask for one), keep invoices and their links private, and check any other address you give us for documents: we send them there.

A file closes when its order is completed, refused or cancelled, or when we close it. Anything needed for an open complaint, dispute, claim or investigation is kept until settled. Once a period ends, we delete the data or remove what identifies you, normally within a month. Anything not listed is kept only as long as its account or file. Deleted data can stay in our hosting providers' backups until they are replaced.

To measure our adverts, our apps tell Meta when the app is installed or opened, an application or order is placed, or a payment is made and for how much, with basic phone details, your IP address and any advert you came from. We do not give Meta your passport, documents or messages. On iPhone, Meta gets your advertising ID only if you allow tracking; otherwise the events go without it. On Android, Meta's tools use your advertising ID, which you can reset or delete in your phone's settings.

Our website uses no advertising or analytics cookies, only what it needs to work. It loads typefaces from Google Fonts, which sees your IP address, and reports technical problems to our hosting provider. Payment pages may use the payment provider's own cookies.

Notifications and emails about your orders and payments are part of the service; to stop those notifications, use your phone's settings. Your case page still shows that news, so check it, and keep your email and phone number up to date. Offer and announcement notifications are on unless you turn them off. You can turn them off, and your consultant's replies, at any time in Profile → Notifications or, without an account, in your phone's settings.

Within the limits of the law, you can ask for a copy of your data, including what you gave us in a common electronic format, ask us to correct, limit, stop using or delete it, and withdraw a consent without affecting what we did before. We keep and use what the law, our accounts, fraud prevention or an open complaint, dispute or claim needs, and tell you what and why. We cannot change what a government already holds. Asking us to stop using or delete data an open file still needs counts as cancelling that order (Terms & Conditions, section 6). Where another country's data protection law applies to you, you also have its rights.

Write to privacy@traveldocx.com from your account's email address or, without an account, with an order or invoice reference. We check it is you, and need written permission from anyone writing for you; a parent or guardian can ask for their child. We reply within 30 days, or tell you within that time why we need longer. It is free unless what you ask is clearly unfounded or excessive; then we may refuse or charge a reasonable fee, and say why.

Download your visas and documents first, then choose Close my account in your profile and type DELETE, or write to privacy@traveldocx.com from your account's email address. While an order is waiting for payment or in progress, or an invoice is unpaid, our app cannot close the account; if you write to us, we close it as soon as that ends and tell you the date. We also close a suspended account when you ask. Closing cannot be undone and does not cancel money you owe.

When your account closes, we remove at once your profile's name, contact, passport and personal details, photo, sign-in and notification codes. Your orders, with their traveller details, and other records are kept for their periods in section 8.

You must be 18 or over to hold an account. Only a parent or legal guardian may order for a child under 18, confirming they have the right to apply and any consent needed, as section 5 of our Terms & Conditions explains.

If you give us another person's details, you confirm you may share them, have told them how we use them, and that they are true; for another adult, also that they asked you to apply or order for them. If details reach us without proper permission, we may stop work, delete them and report it where the law requires; section 7 of our Terms & Conditions explains what happens to payments.

If a change to this policy matters to you, we tell you in our apps and by email at least 14 days before it takes effect, unless the law or a government forces it sooner.

These documents are written in English, which governs.

These terms are governed by the laws of the United Arab Emirates as applied in the Emirate of Sharjah. The courts of the Emirate of Sharjah decide any dispute. This does not take away any right you have under the mandatory consumer laws of the country where you live.

If you are unhappy with how we handle your data, tell us (section 17 of our Terms & Conditions explains how we handle complaints), the UAE Data Office or the data protection authority where you live.

• • Email: support@traveldocx.com (privacy questions: privacy@traveldocx.com)
• • Phone and WhatsApp: +971 58 196 6892
• • In the app: the chat with Lop, or with your consultant on your case page
• • Registered address: Business Center, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
• • Office: CBD Bank Building, Office 201, Dubai, United Arab Emirates