Portal and App Privacy Policy
Explorify LLC | Covers the Explorify portal and the Explorify app for iPhone and Android | Version 1.0 | Last updated: 7 November 2026
This policy explains how we handle personal data when you hold an account on the Explorify portal, use the portal at b2b.byexplorify.com, or use the Explorify app. Our website privacy policy at www.byexplorify.com/privacy-policy covers visitors to the main website.
1. Who is responsible for your data
1.1 Explorify LLC, 954 Lexington Ave. #1062, New York, NY 10021, USA, is the controller of your personal data.
1.2 The Explorify app is published on the App Store and Google Play under the developer account of Explorify sp. z o.o., ul. Bobrowiecka 3/224, 00-728 Warszawa, Poland (KRS 0001171278). It is also our representative in the European Union for data protection matters, and handles data for us under a written data processing agreement. You can contact either company about privacy at [email protected].
2. What we collect
2.1 Fingerprint and face login. If you turn these on, your phone checks your fingerprint or face. We never receive or store biometric data.
2.2 We do not use your data for advertising inside the app, and we do not sell personal data.
| Type of data | Examples |
|---|---|
| Account details | Name, email, mobile number, address, company name and registration details, login details |
| Identity verification | Copy of passport or identity card, photo of the Account Holder, company documents, proof of who may sign for a company |
| Traveller details | Names, date of birth, nationality, passport details, contact details, special requests you choose to give us (for example wheelchair assistance or meal needs) |
| Balance and payments | Top-ups, bookings, refunds, commission, closure payouts, bank account details for payouts. Card numbers are handled by our payment provider and not stored by us |
| App and device data | Device type, operating system, app version, IP address, login times, crash reports, push notification token |
| Messages | Emails, WhatsApp messages and chats with our team |
3. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Opening and running your account, making and managing bookings, refunds and commission | Contract |
| Checking identity and preventing fraud and money laundering | Legal obligation and legitimate interests |
| Keeping accounting and tax records | Legal obligation |
| Sending booking updates, schedule changes and account messages, including push notifications | Contract |
| Keeping the portal and app secure and fixing faults | Legitimate interests |
| Special requests about a traveller's health or mobility | Explicit consent of the traveller |
4. Who we share it with
Airlines, hotels and other suppliers, and the booking systems that connect us to them, only as needed for each booking.
Our technology providers, such as our booking engine provider, hosting provider, email and messaging providers, under contracts that protect your data, including Adivaha (booking engine), DigitalOcean (hosting), Stripe (payments), Brevo (email), Meta (WhatsApp) and Google Workspace (email).
Banks and payment providers, to receive top-ups and make payouts.
Apple and Google, as needed to deliver the app and push notifications.
Explorify sp. z o.o., for app publishing and support in Europe.
Authorities, when the law requires it.
4.1 If you hold a company account and give us your customers' data, you are responsible for telling them about this sharing and for having a legal basis to give it to us.
5. International transfers
We are based in the United States and our suppliers are worldwide. When we send data from the EU or UK to other countries, we use safeguards such as standard contractual clauses approved by the European Commission, or rely on the transfer being needed to perform your booking.
6. How long we keep it
| Data | How long |
|---|---|
| Account details | While the account is open, then until closure is complete |
| Identity verification documents | Up to 5 years after the account is closed, where anti-money-laundering or tax law requires; otherwise deleted at closure |
| Booking, payment and accounting records | 7 years from the date of travel or payment |
| App and device logs | 12 months |
| Messages | 2 years from the last contact |
7. Deleting your account
7.1 You can ask us to delete your account and data at any time from the account settings in the app or on the desktop portal, or on our account deletion page at www.byexplorify.com/delete-account.
7.2 Deletion starts the account closure process in the B2B Portal Terms and Conditions, which takes up to 45 working days so that open bookings, refunds and your remaining balance can be settled. When it is complete, we delete your data except the records in section 6 that we must keep by law, and we tell you what we have kept.
8. Your rights
Depending on where you live, you can ask to see, correct, delete or receive a copy of your data, object to or limit how we use it, and withdraw consent. Contact us at [email protected]. We may need to confirm your identity first and will reply within one month.
You can also complain to a data protection authority, for example in the country where you live or work. In Poland this is the President of the Personal Data Protection Office (UODO). Nothing in this policy or in our terms limits that right.
9. Security
We use encrypted connections, access controls and secure hosting. Please keep your login details secret and your app updated, and tell us straight away if you think your account has been misused.
10. Children
The portal and app are for adults and businesses. We do not knowingly open accounts for anyone under 18. Children's details are collected only as travellers, from the adult or business making the booking.
11. Changes and contact
We will post any update here with a new date and email account holders about important changes. Questions: [email protected], Explorify LLC, 954 Lexington Ave. #1062, New York, NY 10021, USA.