This document is a working draft prepared for TravelDrop and has not yet been reviewed by a licensed security or legal professional. Please have it reviewed before publishing it as a formal commitment, and keep it updated as your actual security practices evolve.
1. Account Security
Your TravelDrop account is protected by several layers of security:
- Password protection. Passwords are never stored in plain text — they're hashed using industry-standard encryption before being saved.
- Login alerts. Unusual login activity, such as a sign-in from a new device or location, may trigger a notification to your registered email or phone.
- Session management. You can review and sign out of active sessions on your account at any time.
2. Identity Verification
Trust on TravelDrop starts with knowing who you're dealing with:
- Every Traveler and Sender is verified using a government-issued ID before they can send or accept deliveries.
- Verified users display an identity verification badge on their profile, so the other party can see this before agreeing to a delivery.
- Identity documents are stored securely and are only used for verification and fraud-prevention purposes — see our Privacy Policy for full detail on how this data is handled.
3. Payment Security
- All payments are processed through TravelDrop's designated payment providers — TravelDrop does not store your full card or bank details on its own servers.
- Funds paid by a Sender are held in escrow and only released to the Traveler once delivery is confirmed, protecting both sides of every transaction.
- Payment providers used by TravelDrop maintain their own industry-standard compliance and security certifications for handling financial data.
4. Delivery Verification Codes
Every handoff on TravelDrop is confirmed with a secure code, not just a conversation:
- A unique pickup code confirms that a package is being collected by the correct, verified Traveler.
- A unique delivery code confirms that a package has reached the correct recipient before payment is released.
- These codes are only ever shared directly between the relevant Sender, Traveler, and recipient — never post them publicly or share them with anyone outside the delivery.
5. Data Protection
Your personal information is protected using the same safeguards described in our Privacy Policy:
- Encryption of sensitive data, both in transit and at rest.
- Secure cloud infrastructure with reputable, industry-standard providers.
- Restricted internal access — only TravelDrop staff who need specific data to do their job can access it.
6. Fraud Monitoring
TravelDrop actively monitors the platform for signs of fraudulent or suspicious activity, including:
- Fake or duplicated identity documents.
- Patterns consistent with fake accounts or rating manipulation.
- Payment activity that suggests fraud or account compromise.
Accounts flagged for suspicious activity may be temporarily restricted while under review — see our Terms & Conditions for how account suspension works.
7. Reporting a Vulnerability
If you believe you've found a security vulnerability affecting TravelDrop, please report it to info@traveldrop.world with as much detail as possible. Please report responsibly — do not access, modify, or share other users' data while investigating an issue, and give us reasonable time to address it before disclosing it publicly.
8. Tips to Stay Safe
A few things you can do to protect yourself on TravelDrop:
- Never share your pickup or delivery code with anyone outside the actual handoff.
- Never send payment for a delivery outside of TravelDrop's platform.
- Always confirm the other party's identity verification badge before meeting.
- Report anything that feels off — a mismatched ID, pressure to pay off-platform, or a request for information TravelDrop wouldn't normally ask for.
Have a security question or concern? Reach us anytime at info@traveldrop.world.