Privacy Policy

Your trip plans are personal. This policy explains, in plain language, exactly what data Itinerary Store - The Blueprint for Extraordinary Travel collects, why, how we keep it secure, and the rights you have over it. We are committed to privacy-first, spam-free travel planning.

By creating an account, unlocking an itinerary, booking a tour, or otherwise using Itinerary Store - The Blueprint for Extraordinary Travel ("the platform", "we", "us"), you consent to the practices described here. This policy is designed to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and the SPDI Rules, 2011.

1. Information we collect

• Account data: your name, email address and mobile number, used to create and secure your account.
• Travel preferences: destinations, dates, group size, budget level and trip "vibe" you share so curators can build relevant day-by-day itineraries and tour recommendations.
• Purchase & booking data: the itineraries, tour packages, gift cards and Travel Club subscriptions you buy. Payments are processed by Razorpay (PCI-DSS certified) — we never see or store your full card, UPI or net-banking credentials.
• Traveller documents: for tour bookings that require them, you may upload ID/passport details. These are stored securely and used solely to complete that booking.
• Usage analytics: anonymised, aggregated data about how the platform is used, to improve quality and prevent abuse. Referral click IPs are anonymised (last octet zeroed) before storage.

2. How we use your data

• To deliver the itineraries, tours and subscriptions you unlock or book.
• To send transactional notifications — booking confirmations, trip updates, and alerts when a verified point of interest in your itinerary changes.
• To operate loyalty coins, referrals and the Travel Club membership.
• To improve curation quality, run AI freshness checks, and keep prices honest.
• To protect the platform against fraud, abuse and security threats.

3. Our zero unsolicited calls promise

This is core to how we treat your data: we will never cold-call you or sell your phone number. We contact you by email or WhatsApp only for the transactions you initiate, or when you explicitly ask us to call you. No 9 AM sales calls, no spam blasts — ever.

4. How we share data

We do not sell your personal data. We share only what is strictly necessary with trusted processors that run the service: our payment gateway (Razorpay), hosting and email/SMS delivery providers, and, where you choose to use them, hotel and activity partners. Every processor is bound to protect your data and use it only to provide their service to us.

5. Data security

We use HTTPS encryption in transit, hashed passwords, CSRF protection, encrypted storage of sensitive credentials, and access controls. While no online service can guarantee absolute security, we apply industry-standard safeguards to protect your information.

6. Data retention

We keep your account and purchase data for as long as your account is active and as required to provide the service, comply with tax and legal obligations, and resolve disputes. You can request deletion at any time (see your rights below).

7. Cookies

We use essential cookies for login sessions, security tokens, currency preference and (if you opt in) referral attribution. We do not use intrusive third-party advertising trackers.

8. Your rights

Under the DPDP Act and applicable law, you may access, correct, update or delete your personal data, withdraw consent, or request a copy of your data. To exercise any of these rights, email us at hi@itinerarystore.com from your registered address and we will respond promptly.

9. Children

Itinerary Store - The Blueprint for Extraordinary Travel is intended for users aged 18 and above. We do not knowingly collect data from children. Bookings for minors are made by a consenting adult.

10. Grievance Officer

In line with the Information Technology Act, you may raise any privacy concern or grievance with our Grievance Officer by writing to hi@itinerarystore.com with the subject line "Privacy Grievance". We aim to acknowledge within 48 hours.

11. Changes to this policy

We may update this policy as the platform evolves or the law changes. Material changes will be reflected by the "last updated" date below and, where appropriate, notified to you.

See also our Terms of Service, Refund & Cancellation Policy, and Contact page.

Last updated: June 2026.