Privacy Policy

1. Information We Collect

Personal Information

When you register for an account, we may collect:

• Full name and email address
• Phone number
• Organisation name and business details
• Billing address and payment information
• Profile photo (optional)

Usage Data

We automatically collect information about how you interact with the Service, including:

• IP address and browser type
• Device information and operating system
• Pages visited, features used, and time spent
• Referring URLs and search terms

Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember preferences, and analyse usage patterns. See our Cookie Policy section for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your registration and manage your account
• Process payments and send billing-related communications
• Send transactional emails (password resets, alerts, updates)
• Improve and personalise your experience
• Analyse usage patterns to improve the Service
• Respond to support requests and communicate with you
• Detect, prevent, and address fraud or security issues
• Comply with legal obligations

3. Data Storage & Security

Your data is stored on Supabase, a managed PostgreSQL platform, with the following security measures:

• Row-level security (RLS) ensuring strict data isolation between organisations
• Encryption at rest using AES-256
• Encryption in transit using TLS 1.2+
• Daily automated backups with point-in-time recovery
• Regular security audits and vulnerability assessments

While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

4. Third-Party Services

We use the following third-party services to operate and improve Tourify:

• Supabase Auth — for user authentication and session management
• Google OAuth — for optional social sign-in
• Analytics providers — for understanding usage patterns and improving the Service
• Payment processors — for securely handling subscription payments

Each third-party service has its own privacy policy governing their use of your information. We encourage you to review their policies.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service providers: With trusted partners who assist in operating the Service (hosting, payments, email delivery), subject to confidentiality agreements
• Legal requirements: When required by law, court order, or governmental regulation
• Safety: To protect the rights, property, or safety of Tourify, our users, or others
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Export: Request a portable copy of your data in a machine-readable format
• Objection: Object to or restrict certain types of processing
• Consent withdrawal: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@tourify.in. We will respond to your request within 30 days.

7. Cookie Policy

Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

• Essential cookies: Required for the Service to function (e.g., authentication tokens, session management)
• Functional cookies: Remember your preferences and settings (e.g., language, theme)
• Analytics cookies: Help us understand how visitors use the Service to improve performance

You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@tourify.in.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion or subscription cancellation, we retain your data for 30 days to allow for recovery, after which it is permanently deleted. We may retain certain information longer as required by law (e.g., financial records, tax compliance) or to resolve disputes.

10. International Data Transfers

Your data is primarily stored and processed in data centres that may be located outside your country of residence. By using the Service, you consent to the transfer of your data to these locations. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: