Privacy Policy

Navigator handles two kinds of personal data: yours, as the advisor using the platform, and your clients', which you enter to plan their trips. This policy explains what we collect, why, where it's stored, who we share it with, and how to have it deleted. It's written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who this applies to

This policy covers Navigator's own website and application (navigator.alptravel.co) and the client-facing proposal pages it generates (/preview/*). It does not cover third-party sites Navigator links to, such as a hotel's own website.

2. What we collect

About you, the advisor:

• Account details: name, email, password (stored hashed, never in plain text).
• Business details you add to your advisor profile: agency name, IATA number, WhatsApp number, Virtuoso/Fora membership status.
• Billing details: processed by Razorpay on our behalf — we store the subscription status and invoice history Razorpay gives us, not your raw card number.
• Usage data: which features you use, error logs, and performance data, used to keep Navigator working and to prioritise what we build.

About your clients (entered by you, the advisor):

• Names, contact details (email, phone, WhatsApp), and travel preferences you record against a trip.
• Trip details: destinations, dates, party size, hotel and flight selections, pricing shown to them, and any notes or personal messages you write.
• If your client uses a proposal page: which proposal they viewed, when, and any selection they make (e.g. picking a room option) or acceptance action they take.
• Passport and travel-document data is not yet collected by Navigator. If a future feature (e.g. a client intake portal) adds this, this policy will be updated first and treated as sensitive personal data under the DPDP Act, with additional safeguards.

We do not knowingly collect data from anyone we're aware is under 18. Navigator is a business tool for advisors, not a consumer service.

3. Why we collect it

• To provide the service — build itineraries, generate proposals, process your subscription.
• To communicate with you — account notices, billing, support responses.
• To keep the platform secure and working — fraud prevention, rate limiting, error monitoring.
• To improve Navigator — aggregated, de-identified usage patterns only; never your specific client data used to train anything outside your own account.

4. Where data is stored

Navigator's database and application run on cloud infrastructure managed through Dokploy, on a VPS provided by Hostinger. Backups are stored encrypted in Cloudflare R2 object storage. The physical location of these servers is Mumbai, India — all primary data storage is within India, so this does not constitute a cross-border transfer of personal data under the DPDP Act. If we ever change providers or regions such that data moves outside India, this section will be updated first.

5. Who we share data with (sub-processors)

We use the following third-party services to run Navigator. Each receives only the data it needs to perform its function, under its own terms:

• Razorpay — payment processing for subscriptions. Receives billing contact details and payment information; we never see your full card number.
• Hapuppy (AI) — drafts narrative text (e.g. destination summaries) from structured trip data you provide. Receives the specific trip content you ask it to draft from, not your full client database.
• SerpAPI, Jinko, Ignav — hotel, flight, and rate search. Receives search parameters (destination, dates, party size) — not client names.
• Pexels — stock photography for destinations that don't have licensed press imagery. Receives search terms only.
• Sentry — error tracking, so we can find and fix bugs. Receives technical error data, which can incidentally include fragments of what you were doing when an error occurred.
• Cloudflare — content delivery, image storage (R2/Images), and encrypted backup storage.

We don't sell personal data to anyone, and we don't share it with data brokers or advertisers. We only disclose it beyond this list if required by law, or to protect the rights, property, or safety of Navigator, our users, or the public.

6. How long we keep it

• Active account data is kept for as long as your subscription is active.
• If you cancel, we retain your data for 90 days in case you resubscribe or need an export, then delete it.
• Billing records are kept for as long as Indian tax law requires (typically several years), even after account closure.
• Encrypted backups are retained on a rolling schedule (daily/weekly/monthly, oldest pruned automatically) and are not a way to recover data you've asked us to delete — deletion requests are honoured in both the live database and, on the next backup cycle, in backups.

7. Your rights

Under the DPDP Act, you (and, in respect of the client data you control, your clients through you) have the right to:

• Know what personal data we hold and why.
• Correct inaccurate data — most of this you can edit directly in Navigator.
• Request deletion of your account and associated data, subject to the retention exceptions in Section 6.
• Withdraw consent where processing depends on it, understanding this may mean we can no longer provide the service.
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity.

To exercise any of these, contact support@alptravel.co. As the advisor, you're the point of contact for your own clients' data rights requests — we'll support you in fulfilling them (e.g. exporting or deleting a specific client's records) but we don't have a direct relationship with your clients and won't act on their requests without your involvement, except where required by law.

8. Security

Passwords are hashed, not stored in plain text. Data in transit is encrypted (HTTPS). Backups are encrypted at rest. Access to production systems is limited to the people operating Navigator. Client-facing proposal pages are unlisted (not indexed by search engines) and access-controlled by an unguessable link; anyone who obtains that link can view the proposal, so treat it like you would any document you'd hand a client.

9. Cookies

Navigator uses a session cookie to keep you signed in. It's required for the app to work and isn't used for advertising or cross-site tracking. We don't currently run third-party analytics or advertising cookies on the application; the public marketing site may use privacy-respecting, self-hosted analytics (page views only, no cross-site tracking) once it launches.

10. Grievance officer

Under the DPDP Act, you can raise a complaint about how your data is handled with our grievance contact: Abhilaksh Lalwani, support@alptravel.co. If unresolved, you may approach the Data Protection Board of India.

11. Changes to this policy

If we change what we collect or how we use it in a material way, we'll notify active subscribers by email before the change takes effect.

12. Contact

Questions about this policy: support@alptravel.co or WhatsApp +91 98704 00235.