VectripVectrip

Data Retention Policy

Version 2026-06-16

Vectrip retains customer data only as long as it is needed to operate the Service, meet legal obligations, support traveler safety, and produce audit trails. This policy summarizes our default retention windows. Enterprise customers may configure shorter retention via contract.

Active workspace data

  • Organization & user accounts — retained for the life of the subscription.
  • Traveler profiles & preferences — retained until the traveler or admin requests deletion, or the workspace is closed.
  • Trip records, itineraries, and bookings — retained for 7 years after the trip end date for tax, audit, and dispute purposes.
  • Approvals & audit logs — retained for 7 years from the action date (immutable).
  • Support and concierge conversations — retained for 2 years from the last message.
  • Notifications & delivery logs — retained for 12 months.
  • Email send log — retained for 12 months for deliverability monitoring.

Sensitive traveler data

Encrypted fields (passport number, driver license, TSA PreCheck, Global Entry, emergency contact) are retained only while needed to coordinate active or upcoming travel. We support per-traveler deletion of these fields without deleting the traveler's other history.

Payment data

Card numbers and CVV are never stored by Vectrip; they live with our payment processor. Vectrip stores only the processor's customer ID, masked last four digits, brand, and expiry — retained while the payment method is on file plus 18 months for chargeback handling.

Backups

Encrypted operational backups are retained on a rolling 30-day window. Data deleted from the live system may persist in backups up to 30 days before being purged.

Account deletion

On account or workspace deletion, we delete personal data from the live system within 30 days and from backups within 30 additional days. We may retain a minimal record of the deletion (user id hash, deletion timestamp) for compliance.

Legal holds

If we receive a binding legal request or are subject to a regulatory hold, we may preserve relevant data beyond the windows above for the duration of the hold.

Requesting deletion

Submit a request at /data-deletion or email privacy@vectrip.com.