Status of this policy
This page gives the practical privacy foundation for launch. Heaventrip Africa must review and validate the final legal wording before public launch.
July 13, 2026
Privacy policy
How Heaventrip Africa collects, uses, protects, and shares personal data for marketplace booking operations.
Data we collect
We collect only the data needed to run the marketplace, manage bookings, support partners, and keep users informed.
- Account data such as name, email, locale, and password credentials.
- Booking data such as selected experience, date, guests, customer details, phone number when provided, and ticket reference.
- Payment references and statuses from Stripe or Wave. Card details are handled by payment providers and are not stored by Heaventrip Africa.
- Partner profile, experience, media, availability, payout destination summaries, and operational messages.
- Support, review, favorite, itinerary, audit, notification, and consent-related operational records.
How we use data
We use data to provide account access, process bookings, confirm payments, issue QR tickets, notify customers and partners, operate admin moderation, calculate commissions and payouts, improve recommendations, and protect the service.
Service providers
Heaventrip Africa relies on third-party processors for parts of the service. The active production list must be confirmed by the operator before launch.
- Stripe for card and eligible wallet payments.
- Wave for Mobile Money checkout and, when enabled, payout operations.
- Resend for transactional email.
- Meta/WhatsApp for optional booking utility messages.
- Google Gemini for the optional itinerary assistant.
- Hosting, database, deployment, and file-storage providers used to run the app.
Your rights
Users may request access, correction, export, or deletion of personal data by contacting admin@heaventrip.africa. Some records may need to be retained when required for fraud prevention, accounting, legal obligations, dispute handling, or security audit logs.
Retention and security
We retain operational data only as long as needed for booking, payment, support, compliance, and security. Sensitive payout destination values are encrypted at rest where implemented, and payment card data stays with payment providers.