Who operates TripDesk
PixelAccord operates TripDesk, the mobile tour-operations app, and these customer/support pages. This policy covers owners, staff, guides and people whose information is handled through TripDesk, including tour customers using private feedback links.
For privacy questions, corrections, access or deletion requests, contact support@pixelaccord.com or use the account and data request page.
Your tour company decides how customer and business records are used for its tours. PixelAccord provides the platform and handles account, security and support processing. For a booking, refund or tour-company record, you may also need to contact that company.
Information we handle
- Account and profile: name, verified mobile number, account identifiers, role and company membership; optional email, profile photo, languages, biography and professional experience.
- Business and contacts: company name, contact/location/registration details and optional logo; customer, guide and driver contact details, including imported customer records.
- Trip operations: packages, bookings, schedules, itineraries, assignments, attendance/activity records, vehicle/driver details and optional trip/vehicle photos.
- Financial records: prices, recorded customer collections, guide earnings, expenses, settlements and cash handovers. TripDesk records externally handled money; the current app does not process payments or collect card credentials.
- Content you provide: team and trip chat messages, photos and PDF files you choose to share in conversations, support messages, guest ratings/comments, optional notes, selected CSV imports and generated reports. Chat also records message times and read status. A temporary typing indicator is shown to authorized conversation participants and expires after a few seconds. Replies sent from a notification are checked against your current account and conversation access. An unsuccessful notification reply may be saved securely on your phone until you retry it or it is confirmed as sent.
- Technical and security information: IP addresses and request logs processed by service providers, app/device and installation identifiers, push-notification tokens, app versions and information used to verify the app and prevent abuse.
Device language, SIM/network country hints and timezone help choose regional defaults. The current app does not track GPS or live location and does not read your phone's address book or SMS inbox. Entered/imported contact records are still processed as described above. Photos and files are selected by the user through device pickers.
SMS and WhatsApp sign-in codes
When you request a sign-in code, we use your phone number to deliver it through SMS or, for supported Indonesian numbers, WhatsApp. WhatsApp delivery shares the destination number and verification message with WhatsApp. Your app language and account access do not change because you choose a delivery channel. Codes expire, can be used once and are protected by resend and verification limits. We keep short-lived security records, including protected identifiers derived from your phone number and network address, to prevent misuse and control delivery costs. Verification codes and access tokens are not included in application logs. Never share your code with another person.
Why we use information
We use information to authenticate accounts; set up companies and team access; deliver tour operations and customer management; keep financial records; send chosen activity notifications; process feedback, support and privacy requests; and prevent abuse. Optional photos and profile details support the features you choose to use.
PixelAccord does not sell personal information or use it to display third-party advertisements. Analytics collection is not enabled in the current Android app. Tour companies may use customer contact details for offers they choose to share manually. The sender chooses whether to send the prepared message in WhatsApp.
Storage and international processing
Core business records for businesses operating in India are stored in India, and those for businesses operating in Indonesia are stored in Indonesia.
Supporting services, including sign-in verification, notifications, security, website delivery and communication services you choose, may process information outside your business country. Regional storage of business records does not mean all information is processed exclusively in that country. We use access restrictions and appropriate provider arrangements to protect information. Do not send sensitive documents or verification codes in support emails.
Guide professional documents
Guides and authorised office staff can upload licences, certificates and other documents needed for the business, with optional expiry dates. Guides can maintain an emergency contact in their profile; only the guide can edit that contact. Access is limited to that guide, the company owner and staff authorised to review these records. Uploaded files are checked before review or sharing. Expiry alerts assist the company; they are not a certification of legal eligibility.
Archived and superseded document files are scheduled for removal after 30 days. At the end of an approved account-deletion grace period, that account’s guide documents and emergency-contact records are removed. Business audit records may be retained as described below.
Pending attachments may be stored encrypted on your phone so you can retry after interruption. They are separated by account and business, removed after successful sending or discard, and checked for seven-day expiry when the draft store is next accessed. Chat recipients receive new attachment messages only after file checks pass.
In-app account deletion has a 30-day grace period. Cancel from More / Profile → Delete account during this period. After it ends, personal sign-in, profile and notification bindings are removed in the next daily processing window; business and legal retention exceptions described below still apply.
Retention and account deletion
We keep account information while the account is active and information needed to provide the service, respond to requests and meet applicable obligations. You can request account deletion and associated personal-data deletion, or deletion of specified data, without reinstalling the app, through our deletion page.
After verifying the request, our support team aims to complete it within 30 days. We will tell you if identity verification, another person's rights, an active dispute or a legal obligation affects the request. Uninstalling or signing out does not delete your account.
Deletion normally covers authentication access, personal profile information/photo, notification/device bindings and associated personal records that no longer need to be kept. We assess uploaded files and copies held by our providers as part of the request.
Some business transaction, invoice, settlement, fraud-prevention or legal-claim records may need to remain for a legitimate documented reason. We limit retained information and access and explain which records, the reason and the applicable retention period in our response. Those exceptions are not used to keep an account active for marketing. Company records involving other people are not automatically erased solely because one team member leaves.
Your choices and requests
You can edit available profile/customer details, choose optional uploads and notification settings, and request access, correction or deletion by emailing support@pixelaccord.com. Tell us the country used in the app and the registered phone number with country code. We may verify control of the account before disclosing or deleting information; never send an OTP, password, payment-card details or identity document unless a secure, appropriate verification method has been agreed.
Tour customers can contact their tour company about customer/business records or contact PixelAccord for help routing a request. Rights depend on the applicable circumstances and law.
Security and children
We protect information through encrypted connections, restricted access, permissions based on business roles and measures to verify the app. No online service can promise absolute security. Keep your device and sign-in codes secure.
TripDesk accounts are intended for adult business owners, staff and guides, not children. Tour companies may enter guest details needed for a trip and are responsible for appropriate permissions and lawful handling. Contact us if a child's information requires attention.
These public pages
Our public pages do not use advertising or analytics cookies. Website delivery providers may process technical request information for delivery and security. The deletion-request form prepares an email on your device; it does not submit your details automatically. The request reaches PixelAccord only when you actually send the email.
Updates and contact
We may update this policy when the service or our practices change. The date below identifies the version published here. Material changes will be communicated through an appropriate app or support channel.
PixelAccord · TripDesk
Email: support@pixelaccord.com
Effective and last updated: 25 October 2026