Keep tourism data focused, private, and useful.

This MVP privacy page is written as a practical project baseline. It should be reviewed by a legal professional before commercial launch.

Minimal data collection

Road Track collects only the details required to answer travel enquiries: name, phone, email, destination, date, people count, resort preference, and vehicle preference.

Secure storage

Production data should be stored in a private PostgreSQL database with row-level access, encrypted backups, and no public database access.

OTP email

Email OTP is used for customer login. OTPs should expire after 5 minutes and resend attempts should be rate limited.

Partner visibility

Resort and vehicle owners should see only leads assigned to them by Road Track. Admin controls partner approvals and pricing visibility.