Privacy Policy
Table of contents
Who we are
TripDrafts is a product of WhereTo Studios, a company registered in India. We build software for Indian travel agents.
For all privacy matters, contact us at privacy@tripdrafts.com. We respond within 30 days.
Data we collect
We collect only what is necessary to provide the service.
- Account data: Your name, email address, phone number (optional), and company name - collected at signup.
- Quote data: Client names, travel details, pricing, and itinerary content you enter. This is your data - we process it only to provide the service.
- Usage data: Pages visited, features used, session duration - collected via our privacy-friendly analytics provider to help us improve the product.
- Payment data: Processed entirely by our PCI-DSS compliant payment gateway. We never store card numbers, UPI credentials, or bank details.
- Uploaded files: Logo images and cover photos you upload - stored in secure cloud storage (Mumbai region).
- Enquiry text: WhatsApp messages or emails you paste for AI parsing. This text is processed by our AI provider to extract travel details and is not stored or used for any other purpose.
How we use your data
- To provide the TripDrafts service - quote creation, PDF generation, sharing.
- To send transactional emails - invoices, payment confirmations, account notifications.
- To improve the product - usage analytics help us understand what to build next.
- To process payments and generate GST invoices as required by Indian tax law.
Third-party processors
We use the following sub-processors to deliver the service. Each is bound by a data processing agreement.
| Processor | Purpose | Data location |
|---|---|---|
| Cloud database & storage | Database, authentication, file storage | Mumbai (ap-south-1) |
| Payment gateway | Payment processing, subscription management | India |
| Email delivery | Transactional email delivery | US (GDPR compliant) |
| Product analytics | Product analytics (opt-out available) | EU/US (GDPR compliant) |
| AI provider | AI enquiry parsing - text not retained | US |
| Stock images | Destination image suggestions | US |
| Hosting & CDN | Application hosting and CDN | Global edge |
| Error monitoring | Error tracking and diagnostics | US (GDPR compliant) |
Data residency
Analytics data (our privacy-friendly analytics provider) and error tracking data (our error-monitoring provider) may be processed on servers outside India. Both providers are GDPR-compliant and provide data processing agreements on request.
Enquiry text sent to our AI provider for AI parsing is processed in the US and is not retained by our AI provider beyond the API call.
Your rights (DPDP Act 2023)
Under the Digital Personal Data Protection Act 2023, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Deletion: Request deletion of your account and all associated personal data.
- Withdrawal of consent: Withdraw consent for data processing at any time.
- Grievance redressal: Lodge a complaint with our grievance officer.
To exercise any of these rights, email privacy@tripdrafts.com with your account email and the right you wish to exercise. We will respond within 30 days.
Data retention
- Account and quote data: Retained while your account is active. Deleted within 30 days of account deletion.
- GST invoices: Retained for 7 years as required by Indian tax law (Income Tax Act, 1961).
- Analytics data: Retained for 12 months by our privacy-friendly analytics provider, then automatically deleted.
- Uploaded files: Deleted immediately on account deletion.
- Enquiry text (AI parsing): Not retained beyond the API call. Deleted from our AI provider's servers immediately after processing.
Changes to this policy
We may update this policy from time to time. Material changes will be notified by email to your registered address at least 14 days before they take effect. Continued use of TripDrafts after the effective date constitutes acceptance of the updated policy.
Contact and grievance officer
For privacy questions, data requests, or complaints:
- Email: privacy@tripdrafts.com
- Response time: Within 30 days of receipt
- Company: WhereTo Studios · TripDrafts by WhereTo