Draft for review

Data Policy

This overview explains how responsibility for information is shared between KaribuOps, tour operators, and travelers.

Operator data

Operators manage the activities, accommodations, prices, itineraries, and organization details they add to their workspace. They should keep that content accurate and ensure they have permission to share it with teammates and travelers.

Traveler information

When a traveler submits a booking request, the operator is responsible for using the submitted information to respond to and manage that request, and for providing any notices required by applicable law.

Travelers should contact the tour operator about information supplied in a specific booking request. KaribuOps can be contacted about platform account or technical questions.

Access and security

Workspace access is intended to be limited to the operator's authorized team members. Operators should assign permissions carefully and remove access when it is no longer needed.

KaribuOps uses access controls and service infrastructure to support the platform. Detailed security controls and incident procedures should be confirmed in the final policy.

Correction, export, and deletion

Operators should manage and update their workspace content through the available product tools. Requests involving traveler information should generally be directed to the operator who collected it.

The final policy should state supported export and deletion processes, retention periods, and any applicable exceptions.

Contact

For data-related questions, contact inquiry@karibuops.com.