Privacy Policy
Last updated: Mon Jan 26 2026
Overview
itinerarybuilder.in ("we", "us", "our") provides Itinerary Builder (the "Service"), a web + mobile application that helps you plan multi-destination trips. This Privacy Policy explains what data we collect, how we use it, and the choices you have.
This policy is written to be broadly compatible with GDPR-style principles (lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity/confidentiality).
Information We Collect
We collect information when you create an account, build itineraries, use maps, and interact with the Service.
1) Account & profile data
- Name (optional)
- Email address
- Authentication data (e.g., hashed password or third-party sign-in tokens)
- Plan/subscription status (if applicable)
2) Itinerary & travel planning data
- Destinations, dates, durations, and preferred travel style
- Budgets, notes, checklists, and saved places
- Trip collaborators (names/emails you add) and sharing settings
3) Location data
- Approximate location inferred from IP address
- Precise device location if you grant permission (used for maps, nearby suggestions, and routing features)
4) Device & usage data
- Device identifiers (where permitted), device type, OS/app version, browser type
- IP address, language/time zone
- App interactions, pages viewed, clicks, and feature usage
- Diagnostic data (crash logs, performance metrics)
5) Cookies and similar technologies
We use cookies/local storage and similar technologies for:
- Authentication and session management
- Preferences (e.g., language, theme)
- Analytics and performance
- Fraud prevention and security
You can control cookies through your browser/device settings. Some cookies are necessary for core functionality.
How We Use Your Information
We use information to:
- Provide and operate the Service (accounts, itineraries, maps, collaboration, exports)
- Personalize your experience (recommendations, pacing, budgeting views)
- Improve and develop features (testing, analytics, debugging)
- Maintain safety and security (fraud prevention, abuse detection)
- Communicate with you (support, product updates, legal notices; marketing with consent where required)
Legal Bases (GDPR-Style)
Where applicable, we process personal data based on:
- Contract: to provide the Service you request
- Legitimate interests: to improve the Service, keep it secure, prevent abuse
- Consent: for optional features (e.g., precise location) and certain marketing
- Legal obligation: to comply with applicable laws and lawful requests
Sharing and Disclosure
We do not sell your personal data.
We share information only as needed:
- Service providers: hosting, analytics, email delivery, customer support tooling (under contractual safeguards)
- Third-party integrations you use: map providers (e.g., Google Maps) and booking/affiliate partners to display content or open links
- Collaboration: when you share or co-edit an itinerary, collaborators can see the content you share
- Legal and safety: to comply with law, enforce terms, or protect users and the Service
- Business transfers: if we undergo a merger, acquisition, or asset sale, data may transfer subject to continued protection
Third-Party Services
The Service may embed or link to third-party services, including:
- Mapping and routing APIs
- Booking and affiliate platforms
These third parties have their own privacy practices. When you leave our Service or interact with embedded content, their policies apply.
Data Storage, Security, and Encryption
We use industry-standard safeguards designed to protect personal data, such as:
- Encryption in transit (TLS)
- Access controls and least-privilege permissions
- Monitoring and abuse detection
No method of transmission or storage is completely secure. You are responsible for using a strong password and protecting your device.
Retention
We retain personal data for as long as necessary to:
- Provide the Service
- Maintain security and prevent fraud
- Comply with legal obligations
You can request deletion (see "Your Rights"). We may retain limited information where required for legal, accounting, or security purposes.
Your Rights and Choices
Depending on where you live, you may have rights to:
- Access your data
- Correct inaccurate data
- Delete your data
- Port your data
- Restrict or object to certain processing
- Withdraw consent (where processing is based on consent)
To exercise rights, contact us at support@itinerarybuilder.in. We may need to verify your identity.
Location controls
You can enable/disable precise location in your device settings.
Marketing preferences
You can opt out of marketing emails using the unsubscribe link or by contacting support@itinerarybuilder.in.
International Data Transfers
We may process and store data in [Country/Region] and other locations where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.
Children’s Privacy
The Service is not directed to children under 16 (or the minimum age required in your region). We do not knowingly collect personal data from children. If you believe a child provided personal data, contact support@itinerarybuilder.in.
Changes to This Policy
We may update this policy from time to time. If changes are material, we will provide notice through the Service or by email.
Contact
Privacy questions or requests: support@itinerarybuilder.in