Buddy4Travel ("B4T", "we", "our", "us") is committed to protecting the personal information of individuals and organisations who participate in the B4T Partner Program. This policy applies to all partner types — including Channel Partners, Ground Support Partners, Mobility Partners, and Service Partners — who access the B4T Partner App, the B4T Live Matchboard, or any associated B4T partner portal (collectively, the "Partner Platform").

This policy explains what data the Partner Platform collects, how it is used, with whom it may be shared, and your rights regarding that data. By registering as a partner or continuing to use the Partner Platform, you acknowledge and agree to the practices described in this policy.

This policy applies to all individuals and entities who register or operate as a B4T partner, including but not limited to:

• Channel Partners — Airline Operators, OTA Platforms, Destination Management Companies, Travel Agencies, Corporate Travel Programs, and Tour Operators who integrate assisted travel as a revenue extension within their booking and distribution ecosystems.
• Ground Support Partners — Airport Assistance Teams, Terminal Handling Units, and On-Ground Coordination Services operating within the B4T real-time coordination layer.
• Mobility Partners — Taxi Networks, Chauffeur Services, Bus and Shuttle Operators, and Ground Transfer Providers integrating assisted travel flows into existing mobility operations.
• Service Partners — Verified individuals and organisations delivering specialised travel assistance services within the B4T monitored partner network.

If you are unsure which category applies to you, contact our support team at [email protected].

We collect data across several stages of the partner lifecycle:

2.1 Registration & Onboarding

• Full legal name, business name, and ABN/ACN or equivalent business registration number.
• Email address, phone number, and business address.
• Role and partner type selected during registration.
• Identity documents submitted for KYC verification (e.g. passport, driver's licence, business registration certificates, travel or care licences).
• Fleet information, service area descriptions, and operational capacity details provided during application.
• Electronic signature data captured at the time of digital partnership agreement execution.

2.2 Operational Data

• Lead data: travel details, client information, origin/destination routes, and service requests submitted through the app or Matchboard.
• Booking and assignment records including status updates (matching, confirmed, in-progress, completed).
• Real-time coordination data accessed via the B4T Live Matchboard dashboard.
• Communication records between partners and B4T support or compliance teams.
• Performance metrics including completed bookings, response times, and service ratings.

2.3 Financial Data

• Wallet balance, transaction history, and earnings records.
• Commission structures and payout details as agreed in the digital partnership agreement.
• Banking or payment account details provided for reward disbursements or withdrawals.

2.4 Device & Technical Data

• Device name and operating system used for session management.
• Authentication tokens stored securely on-device using platform Keychain (iOS) or EncryptedSharedPreferences (Android).
• Biometric preference flag stored locally — no biometric data ever leaves your device.
• IP address, browser type, and access timestamps for security and audit logging.
• App usage analytics including feature interactions and session duration.

We use partner data for the following purposes:

• To authenticate you and maintain your session securely across the Partner Platform.
• To conduct KYC and eligibility reviews in accordance with our safety and compliance standards.
• To execute and manage your digital partnership agreement, including commission structures and SLAs.
• To process and track leads and bookings you submit on behalf of travellers.
• To facilitate real-time coordination via the B4T Live Matchboard between booking platforms, ground teams, mobility partners, and service providers.
• To calculate, display, and disburse your rewards, wallet balance, and earnings.
• To send notifications relevant to your leads, bookings, and rewards.
• To provide guided onboarding, training resources, and ongoing partner support.
• To monitor partner performance, enforce platform standards, and investigate complaints or disputes.
• To comply with applicable laws, regulations, and lawful directions from regulatory authorities.
• To improve the Partner Platform through aggregated analytics and usage data.

We do not sell your personal data to third parties.

All API communication between the Partner App and B4T servers is encrypted via HTTPS/TLS. Authentication tokens and sensitive preferences are stored using flutter_secure_storage, which leverages the platform's native secure enclave. Biometric authentication is handled entirely by the device OS — B4T never receives or stores biometric data.

KYC documents and identity verification materials are processed through our compliance infrastructure and stored in encrypted form with access restricted to authorised compliance personnel only.

Financial data, including wallet balances and transaction records, is stored in secured, access-controlled environments. Electronic signature data is retained as part of the legally binding partnership agreement record.

While we take reasonable steps to protect your data, no internet transmission is entirely secure. You acknowledge that data transmitted to us is done at your own risk, and we cannot guarantee absolute security against interception.

As part of the partner onboarding process, B4T conducts a structured Know Your Customer (KYC) and eligibility review. This involves:

• Collection and verification of identity documents, business registrations, and relevant licences.
• Assessment of your eligibility against B4T's global safety and reliability standards.
• Retention of KYC records for the duration of the partnership and for a minimum of 7 years thereafter, as required by applicable financial and regulatory laws.

B4T reserves the right to re-verify partner credentials at any time and to suspend or terminate access pending re-verification. Failure to provide requested documentation may result in suspension of your partner account without liability to B4T.

KYC data may be shared with third-party compliance and identity verification providers engaged by B4T. These providers are contractually bound to handle your data in accordance with applicable privacy laws.

The B4T Live Matchboard is a real-time coordination platform that connects booking platforms, ground teams, mobility partners, and service providers. By participating in the Matchboard, you acknowledge and agree that:

• Your availability status, service area, and operational capacity may be visible to other verified partners within the B4T network for the purpose of coordinating assisted travel requests.
• Booking and assignment data — including route information, status updates, and completion records — is shared across relevant parties in a given booking chain (e.g. the booking platform, ground team, and mobility provider involved in a single trip).
• Aggregated and anonymised performance data may be used by B4T for platform analytics, reporting, and service improvement.
• B4T does not guarantee the accuracy, completeness, or timeliness of data displayed on the Matchboard and accepts no liability for decisions made in reliance on Matchboard data.

Partner earnings, wallet balances, and transaction records are maintained within the Partner Platform. You acknowledge that:

• Commission structures and payout terms are governed by your digital partnership agreement. In the event of any discrepancy between this policy and your agreement, the agreement prevails.
• B4T reserves the right to withhold, adjust, or reverse wallet transactions in cases of suspected fraud, policy violations, disputed bookings, or regulatory requirements.
• Financial records are retained for a minimum of 7 years for Australian tax law compliance and may be disclosed to tax authorities or financial regulators as required by law.
• B4T is not a licensed financial institution. Wallet balances do not accrue interest and are not protected by any government deposit guarantee scheme.

We retain partner data for as long as your account is active and for a minimum of 7 years following account closure, in accordance with Australian tax and financial record-keeping requirements.

KYC and identity verification records are retained for the period required by applicable anti-money laundering and counter-terrorism financing laws, which may exceed 7 years.

Electronic signature records and partnership agreement documents are retained indefinitely as legally binding records.

You may request deletion of your account and associated personal data at any time via Settings → Account → Delete Account, or by contacting [email protected]. Note that deletion requests are subject to our legal retention obligations and may not result in the immediate or complete removal of all data.

We may share your data with the following categories of third parties:

• Identity & KYC providers — for partner verification and compliance screening.
• Payment processors — for wallet disbursements and financial transaction processing.
• Cloud infrastructure providers — for secure data hosting and platform operations.
• Analytics providers — for aggregated, anonymised platform usage analysis.
• Google Fonts — for typography rendering within the app (no personal data shared).
• Platform biometric APIs (Apple LocalAuthentication / Android BiometricPrompt) — processed entirely on-device.
• Legal and regulatory authorities — where required by law, court order, or regulatory direction.
• Other verified B4T partners — limited operational data shared within a booking chain, as described in Section 6.

All third-party providers engaged by B4T are contractually required to handle partner data in accordance with applicable privacy laws. B4T does not sell partner data to third parties for marketing purposes.

In the event of a sale, merger, acquisition, or transfer of B4T's business or assets, partner data may be disclosed to a prospective purchaser or transferee, subject to confidentiality obligations.

By participating in the B4T Partner Program, you acknowledge that:

• B4T may monitor partner activity on the platform, including booking behaviour, communication records, and performance metrics, for the purposes of quality assurance, safety, and compliance.
• B4T reserves the right to suspend or terminate partner access at any time, with or without notice, in cases of suspected fraud, policy violations, reputational risk, or failure to meet platform standards.
• Data collected during monitoring may be used as evidence in dispute resolution, legal proceedings, or regulatory investigations.
• Partners are responsible for ensuring that any client or traveller data they submit through the platform has been collected lawfully and with appropriate consent.
• B4T accepts no liability for data submitted by partners that is inaccurate, incomplete, or obtained without proper authorisation.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to our legal retention obligations.
• Withdraw consent at any time, where processing is based on consent.
• Object to processing for direct marketing purposes.
• Request data portability (where applicable under GDPR).
• Lodge a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may require identity verification before processing your request.

Note that certain rights may be limited where data is required for legal compliance, dispute resolution, or enforcement of our partnership agreements.

B4T's liability in connection with this privacy policy and the handling of partner data is limited to the maximum extent permitted by applicable law. In particular:

• B4T is not liable for any loss or damage arising from unauthorised access to partner data resulting from circumstances beyond our reasonable control, including cyberattacks, third-party breaches, or partner-side security failures.
• B4T is not liable for the privacy practices of third-party services integrated with or linked from the Partner Platform.
• Partners are solely responsible for the security of their own login credentials and device access. B4T accepts no liability for unauthorised access resulting from compromised credentials.
• The Partner Platform is provided "as is" and B4T makes no warranties regarding the accuracy, completeness, or availability of data displayed on the platform, including Matchboard data.

We may update this policy from time to time to reflect changes in our practices, the Partner Platform, or applicable laws. Significant changes will be communicated via an in-app notification and/or email to your registered address. The updated policy will be published at b4t.com/legal/partner-privacy-policy.

Continued use of the Partner Platform after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must cease using the Partner Platform and notify us at [email protected].

This policy is governed by the laws of New South Wales, Australia, and the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Partners based in the European Union also have rights under the General Data Protection Regulation (GDPR). Partners in other jurisdictions may have additional rights under local law.

Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts of New South Wales, Australia, unless otherwise required by applicable law.

For privacy-related enquiries or to exercise your rights:

• General support: [email protected]
• Website: https://b4t.com
• Support chat: https://b4t.com/support-chat