Enrollment is currently limited. This notice describes the current private-pilot service. A customer order may add organization-specific terms without reducing applicable privacy rights.
Who provides Travel Desk
Travel Desk is provided by The Commissioned Group and presented as a product of LDW.build. Questions and privacy requests may be sent to lonnell@ldw.build.
Information we handle
We handle information supplied by customers and their authorized users to operate the service, including:
- account details, organization membership, roles, and branding;
- traveler names, contact details, travel-program information, and profile preferences;
- trip schedules, flights, stays, ground movement, call times, confirmations, and acknowledgments;
- support messages, authorized attachments, service activity, and audit records;
- billing status and provider identifiers needed to administer subscriptions; and
- device and notification information needed to provide app access and alerts.
Initial collection of passport or driver-license numbers, dates of birth, medication details, and insurance cards is disabled. Customers should not place those values in general notes, support messages, or attachments.
How information is used
We use information to organize and display travel arrangements, maintain account and role access, deliver relevant changes, provide support, administer billing, protect the service, investigate failures, and satisfy lawful recordkeeping obligations. We do not sell personal information.
Visibility and sharing
Access is limited by organization, trip, role, and assignment. Owners and administrators can access the operational details needed to coordinate their organization. Travelers see information assigned or made visible to them.
Shared-trip peers see a person's name, title, and trip role by default. A phone number or headshot is shared with peers only when that traveler opts in. Emergency contacts, allergy details, loyalty information, and other operational details remain limited to the person and authorized administrators.
Service providers
Travel Desk relies on service providers for application hosting, database and authentication services, private file storage, payment processing, email delivery, mobile distribution, and notifications. Current providers may include Supabase, Vercel, Stripe, Resend, Expo, and Apple. They process information only for the services configured for Travel Desk and under their own contractual and legal obligations.
Security and operator access
Travel Desk uses role-aware permissions, private file access, multifactor authentication requirements for owners and administrators, and audited operator actions. No online service can guarantee absolute security. Customers should maintain a verified backup administrator and report suspected unauthorized access promptly.
Retention, export, and deletion
Organizations can request an owner-verified export. Standard exports are bounded to the supported in-product limits; larger assisted exports require additional identity verification and a protected delivery process.
After cancellation, operational data is scheduled for cleanup under the service's current 90-day process. Financial records, security and audit evidence, legal holds, provider backups, and copies already downloaded may follow different retention periods. An offline or downloaded copy cannot be recalled instantly.
Your choices and requests
Authorized users may review and update supported profile information in the product. A traveler may withdraw optional peer phone or headshot sharing. Organization owners may request access, correction, export, or deletion review for information under their organization's control. We verify identity, authority, organization, and scope before acting on a request.
Children and changes
Travel Desk is a business service and is not directed to children. We may update this notice as the service, providers, or legal obligations change. The date above identifies the current public version.