Privacy policy

This policy explains what personal data Airbytech (SMC-Private) Limited (“Airbytech”, “we”, “us”) collects, why we collect it, who we share it with and the choices you have. It applies to airbytech.com, our WhatsApp business number, our partner portal, our live demo portals and any messages you send us.

1. Who we are

• Company: Airbytech (SMC-Private) Limited, incorporated with the Securities and Exchange Commission of Pakistan (CUIN 0294973), FBR NTN G700043.
• Registered office: Office No. 47, 2nd Floor, Toheed Mall, Queen Road, Sargodha, Punjab, Pakistan.
• Contact for privacy questions: airbytech@gmail.com or WhatsApp +923267469874.

When travel agencies use the booking platforms, CRM or apps we build for them, the agency decides what customer data is collected there. For that data the agency is responsible to its customers, and we process it only on the agency’s instructions under our service agreement.

2. Data we collect

When you contact us

• Contact form: your name, company, email, phone or WhatsApp number, country, the product you are interested in, your message and, if you give one, a partner referral code.
• How you found us: the campaign tags in the link you first arrived from (UTM source, medium, campaign, content and term), the first page you landed on and the website that referred you.
• WhatsApp: when you message our WhatsApp business number, we receive your WhatsApp number, your WhatsApp profile name, the content of your messages and delivery and read status of the messages we send you, through Meta’s WhatsApp Business Platform.
• Email, phone and visits: what you tell us when you email, call or meet our team.

Newsletter and reviews

• Newsletter: your email address.
• Reviews: your name, role and company, email, star rating and review text. Your email is never published.

Partner program

• Application and account: name, email, password (stored only as a secure hash), phone, country, city, partner type, company and website, audience size and how you plan to promote Airbytech.
• Identity and payouts: CNIC or passport number and, if you upload it, a photo of the document; your payout method, account title, account number and bank name. Account numbers and payout details are stored encrypted.
• Referral tracking: when someone opens your referral link we record the landing page, referring website, campaign source, browser type and a one-way hash of the IP address (not the IP address itself), and the agencies and leads credited to you.

Staff and admin accounts

Name, job title, email, phone and a hashed password for people who sign in to our admin and staff portals, plus a record of the leads they handle.

Automatically

• Your IP address and browser details in our server logs, used for security and to limit repeated login attempts.
• Cookies and similar technology, described in section 4.

We do not knowingly collect special categories of data such as health or religious information. Our services are for businesses and are not directed at children under 18.

3. How we use your data

• To reply to your enquiry, give you a demo or quotation and manage our sales follow-up in our CRM.
• To provide, set up, support and invoice the software and services you buy from us.
• To run the partner program: review applications, verify identity, track referrals, calculate commission and pay partners.
• To send WhatsApp, email or SMS messages about your enquiry, and marketing messages if you have agreed to receive them. You can opt out at any time (section 7).
• To measure which pages, campaigns and ads bring us enquiries, and to improve our website.
• To keep our systems secure, prevent fraud and abuse, and meet our legal, tax and accounting duties in Pakistan.

We use your data because you asked us to (your enquiry or application), because we need it to perform a contract with you, because of our legitimate interest in running and promoting our business, because the law requires it, or because you gave consent (for example to marketing messages). We do not sell personal data.

4. Cookies and similar technology

Name	Purpose	Kept for
airbytech-session, XSRF-TOKEN	Keep you signed in and protect forms against forgery. Strictly necessary.	2 hours of inactivity
abt_ref	Remembers the partner code of the referral link you followed, so the right partner is credited.	60 days
abt_attribution (cookie and browser storage)	Remembers the campaign, landing page and referrer of your first visit, attached to the contact form.	90 days
Google Tag Manager and Google Analytics	Visit and conversion statistics.	Set by Google, up to 2 years
Meta Pixel, LinkedIn Insight Tag	Measure ad campaigns and show relevant ads on Facebook, Instagram and LinkedIn.	Set by Meta and LinkedIn, up to 2 years
Microsoft Clarity	Heatmaps and session recordings that show how visitors use our pages, to improve the design.	Set by Microsoft, up to 1 year

You can delete or block cookies in your browser settings. Blocking the necessary cookies will stop sign-in and forms from working.

5. Who we share data with

• Service providers that host and run our systems for us: our web hosting provider, email delivery, Meta (WhatsApp Business Platform, Meta Pixel), Google (Tag Manager, Analytics), LinkedIn and Microsoft (Clarity). They may only use the data to provide their service to us.
• The partner who referred you: if you contact us through a partner’s link or code, that partner sees your agency name and the status of the referral so their commission can be calculated. They do not see your messages.
• Suppliers you ask us to connect, such as airlines, GDS, hotel and payment providers, when we set up your platform.
• Authorities when Pakistani law requires it, and professional advisers such as our auditors.
• A buyer or successor if our business is ever merged or sold, under the same protections.

Some of these providers store data outside Pakistan, for example on Meta, Google and Microsoft servers. We use providers that protect data with industry-standard safeguards.

6. How long we keep data

• Enquiries, leads and WhatsApp conversations: up to 3 years after our last contact with you, unless you become a client.
• Client, invoice and partner commission or payout records: as long as required by Pakistani tax and company law, generally 6 years after the end of the financial year they relate to.
• Partner identity documents: until your partner account is closed and all commissions are settled, then deleted.
• Newsletter: until you unsubscribe. Reviews: until you ask us to remove them.
• Server logs: a few weeks, unless needed to investigate a security problem.

After these periods we delete the data or make it anonymous.

7. Your choices and rights

• Access and copy: ask what data we hold about you.
• Correction: ask us to fix anything wrong. Partners can also update most details in their account.
• Deletion: ask us to delete your data. See our data deletion page for the steps.
• Stop marketing: reply STOP on WhatsApp, use the unsubscribe link in our emails, or tell us. We will still reply to messages you send us.
• Withdraw consent at any time, without affecting what happened before.

Send requests to airbytech@gmail.com or WhatsApp +923267469874. We may ask you to confirm your identity, and we reply within 30 days.

8. Security

Our website uses HTTPS. Passwords are stored as one-way hashes, partner payout details are encrypted, admin and staff areas need a login, and repeated login attempts are blocked. Only staff who need data for their work can see it. No system is perfectly secure; if a breach affects you, we will tell you and take steps to limit the harm.

9. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version. If a change is significant, we will tell clients and partners by email or WhatsApp.

10. Contact

Airbytech (SMC-Private) Limited, Office No. 47, 2nd Floor, Toheed Mall, Queen Road, Sargodha, Punjab, Pakistan. Email airbytech@gmail.com, WhatsApp +923267469874, phone +92 326 7469874.