Legal
Privacy Policy
The plain-language version is the binding spirit.
What we collect
What booking needs: your name, contact details, enquiry messages, and — once you book — traveler documents required for visas and permits. Reviews and photos you choose to submit. Basic, cookieless analytics about page visits.
What we do with it
Run your trip, respond to your enquiries, meet legal obligations (visas, TCS records). Enquiries placed via our public API by AI assistants are stored identically and confirmed by a human before anything else happens.
What we never do
Sell your data. Spam you. Share documents beyond the embassies, airlines and operators your own trip requires.
Retention & deletion
Write to us to see or delete your data; we keep only what tax and travel law obliges us to keep, and delete the rest.
Security
Passwords are hashed, admin access is invite-only and audited, uploads are sanitised, and the database lives outside the public web root with regular backups.