Privacy Policy

• Tour operators' own account data (the people who sign up and use SafariFlow): Solvify decides how this is used, so we are the controller.
• Data about operators' clients (travellers and enquirers that an operator enters into SafariFlow): the tour operator is the controller and is responsible for having a lawful reason to collect it, for telling their clients about it and for answering their requests. Solvify only stores and processes it on the operator's behalf and on their instructions, as a processor. We do not sell it, and we do not use it for our own marketing.

If you are a traveller and want to see, correct or delete what a tour operator holds about you, please contact that operator first. You may also write to us at ismartabubakary@gmail.com and we will pass your request on and help the operator respond.

• Account: email address, password (stored only as a secure hash by our login provider), and, if you use "Continue with Google", your name, email address and Google account identifier. We ask Google only for your basic profile and email (the openid, email and profile scopes) and never see your Google password.
• Company profile: company name, logo, cover photo, agent name and photo, contact email and phone, company description, quote email message, price lists (accommodation, park fees, vehicles, guides with their names and phone numbers), route templates and photos you upload.
• Team: the email address and role of each team member, and invite codes.
• Billing: your plan, trial and subscription dates, and the payment details you submit: payment method, amount, mobile-money or bank transaction reference, the phone number used, notes and any receipt you upload. We do not collect or store card numbers.
• Usage records: who sent which quote email and when, and technical logs kept by our hosting providers (IP address, browser type, pages requested, time), used for security and fixing faults.

Operators decide what they enter. SafariFlow has places for:

• Names, email addresses and phone numbers of enquirers and guests, where the enquiry came from, and notes.
• Trip details: dates, number of adults and children, residency (for park-fee rates), route, lodges, vehicles, prices, quotes, acceptance of a quote, deposits and balances.
• Booking details: arrival and departure flights and times, special occasions and dietary requests. Dietary requests can reveal health or religious information, so operators should only record what the trip needs.
• Photos and short video clips added to trips, and links to YouTube or Vimeo videos.
• The email addresses a quote was sent to (including any copies), and when.

A client page (the link an operator sends to a client) can be opened by anyone who has the link. When a client presses "Accept", we record that the quote was accepted and when.

• To provide SafariFlow: sign-in, storing your records, building client pages and PDFs, and sending quote emails you ask us to send (performance of our contract with you).
• To run your subscription: trials, reminders before a trial ends, checking payments you submit (contract).
• To keep the service secure, prevent abuse and fix faults (our legitimate interests).
• To meet legal duties, for example tax and accounting records (legal obligation).

We do not use personal data for advertising and we do not sell it.

• Account emails from no-reply@safariflow.co.tz: confirming your email address and resetting your password.
• Billing emails to the account owner: a reminder 3 days before the trial ends, one on its last day, and a message when a submitted payment is approved or rejected.
• Quote emails from proposals@safariflow.co.tz, sent only when an operator presses send, to the client addresses the operator enters. Replies go to the operator's own contact email.

We use these service providers ("sub-processors"), each bound by its own data protection terms:

• Supabase — database, file storage (photos, clips, receipts) and login. Data is stored in the European Union (Frankfurt, Germany, AWS eu-central-1).
• Vercel — hosts the website and runs its server code (United States, with a worldwide content delivery network). Vercel Speed Insights measures page speed without cookies and without identifying visitors.
• Brevo (Sendinblue SAS, France) — sends quote emails and billing emails.
• Google — only if you choose "Continue with Google" to sign in.
• OpenStreetMap — map images on itinerary maps are loaded from OpenStreetMap's servers, which see the viewer's IP address.
• YouTube and Vimeo — only if an operator adds a video link; the video loads from YouTube (privacy-enhanced mode) or Vimeo (do-not-track) when the viewer presses play.

This means personal data is transferred outside Tanzania (to the EU and the United States). We rely on these providers' contractual safeguards, including the EU Standard Contractual Clauses where they apply, and we only transfer what is needed to run the service.

SafariFlow uses only cookies that are needed for it to work: login session cookies set by our login provider (they keep you signed in and are refreshed while you use the app) and a short-lived cookie used during Google sign-in. The app also remembers in your browser when you dismiss a notice. We do not use advertising or tracking cookies. Client pages set no cookies.

• While your subscription or trial is active, we keep your data so you can use it.
• When a trial or subscription ends without payment, the account becomes read-only: nothing is deleted, and everything comes back when you pay.
• If you ask us to close your account, we delete your company's data within 30 days, except billing records we must keep by law (normally up to 5 years). Backups held by our providers are overwritten on their normal cycle.
• Operators can delete individual records themselves; deleted records are removed from the live database straight away.

Data is sent over encrypted connections (HTTPS). Each company's records are kept apart by database access rules, so one company cannot see another's data. Passwords are never stored in plain text. Client page links contain a long random code that cannot be guessed; anyone who has a link can open it, so operators should share links only with their clients. If we become aware of a breach that affects personal data, we will tell affected operators without undue delay, and the authorities where the law requires it.

Under the Personal Data Protection Act, 2022 and the GDPR you can ask to see the personal data we hold about you, have it corrected, have it deleted, object to or restrict some uses, and receive a copy in a common format (export). Operators can request an export of all their company's data (for example as CSV or JSON files) or the deletion of their account by writing to ismartabubakary@gmail.comfrom the account owner's email address. We reply within 30 days.

If you are unhappy with how we handle your data, please tell us first. You can also complain to Tanzania's Personal Data Protection Commission, or, if you live in the EU or UK, to your local data protection authority.

SafariFlow is for businesses and is not meant for children to use. Operators may record that a trip includes children (their number, and sometimes their names) to price and plan it.

We will post any change to this policy on this page and, for important changes, email account owners before they take effect.

Contact: Ismart Abubakary Omary, trading as Solvify, P.O. Box 10643, Arusha, Tanzania. Email: ismartabubakary@gmail.com.

See also our Terms of Service.