Privacy Policy

1. Who We Are

Hitinerary operates hitinerary.com, a platform for purchasing digital travel itineraries. This Privacy Policy explains what personal data we collect, why we collect it and how we use it.

2. What Data We Collect

When you create an account:

• Name and email address
• Password (stored as an encrypted hash, never in plain text)

When you make a purchase:

• Order details (products purchased, amount, date)
• Billing details entered at checkout (processed by Razorpay and Shopify — not stored on our servers)

Automatically collected:

• Browser type and device information
• IP address
• Pages visited and time spent (via analytics)
• Session cookies needed for cart and login functionality

3. How We Use Your Data

• To process your orders and give you access to purchased itineraries
• To send order confirmation and download instructions by email
• To respond to customer support queries
• To improve the site based on usage patterns
• To send occasional updates about new itineraries (you can unsubscribe any time)

4. Payment Data

We do not store your card number, UPI handle or any payment credentials. All payment processing is handled by Razorpay and Shopify, which are PCI-DSS compliant. Please review their respective privacy policies for details on how they handle payment data.

5. Sharing of Data

We do not sell, trade or rent your personal data to third parties. We may share limited data with:

• Shopify — our commerce platform (order management)
• Razorpay — payment processing
• Resend — transactional email delivery
• Vercel — website hosting

We may also disclose data if required by law or to protect the rights, property or safety of Hitinerary or others.

6. Cookies

We use cookies for:

• Session cookies — to keep you logged in and maintain your cart
• Analytics cookies — to understand how visitors use the site

You can disable cookies in your browser settings, though this may affect some site functionality (login, cart).

7. Data Retention

We keep your account data for as long as your account is active. Purchase records are kept for 7 years as required for accounting and tax purposes under Indian law. If you delete your account, we remove your personal data within 30 days, except records we are legally required to keep.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Unsubscribe from marketing emails at any time

To exercise any of these rights, email us at hello@hitinerary.com.

9. Children's Privacy

Hitinerary is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top will reflect changes. We will notify you by email if changes are significant.

11. Contact

For any privacy-related questions, contact us at hello@hitinerary.com.