Privacy Policy
Tourify ("we", "us", or "our") is operated by Tourify Technologies. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at tourify.in and our SaaS platform (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.
1. Information We Collect
Personal Information
When you register for an account, we may collect:
- Full name and email address
- Phone number
- Organisation name and business details
- Billing address and payment information
- Profile photo (optional)
Usage Data
Essential service and security records may include:
- IP address and browser type
- Device information and operating system
- Requests and errors needed to operate and secure the Service
- Request timing and security events
Cookies and Tracking
We use cookies and similar technologies to maintain your session, remember preferences, and store privacy choices. Optional tenant analytics requires a separate choice on the tenant’s custom domain. See our Cookie Policy section for details.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process your registration and manage your account
- Process payments and send billing-related communications
- Send transactional emails (password resets, alerts, updates)
- Improve and personalise your experience
- Analyse usage patterns to improve the Service
- Respond to support requests and communicate with you
- Detect, prevent, and address fraud or security issues
- Comply with legal obligations
3. Data Storage & Security
Your data is stored on Supabase, a managed PostgreSQL platform, with the following security measures:
- Row-level security (RLS) ensuring strict data isolation between organisations
- Encryption at rest using AES-256
- Encryption in transit using TLS 1.2+
- Daily automated backups with point-in-time recovery
- Regular security audits and vulnerability assessments
While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.
4. Third-Party Services
We use the following third-party services to operate and improve Tourify:
- Supabase Auth, for user authentication and session management
- Google OAuth, for optional social sign-in
- Analytics providers, for understanding usage patterns and improving the Service
- Payment processors, for securely handling subscription payments
Each third-party service has its own privacy policy governing their use of your information. We encourage you to review their policies.
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service providers: With trusted partners who assist in operating the Service (hosting, payments, email delivery), subject to confidentiality agreements
- Legal requirements: When required by law, court order, or governmental regulation
- Safety: To protect the rights, property, or safety of Tourify, our users, or others
- Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data, subject to legal retention requirements
- Export: Request a portable copy of your data in a machine-readable format
- Objection: Object to or restrict certain types of processing
- Consent withdrawal: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at privacy@tourify.in. We will respond to your request within 30 days.
8. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@tourify.in.
9. Data Retention
We retain records for the service purpose and applicable legal requirements. Our default review thresholds are 12 months after the last meaningful interaction for an unconverted lead, and 90 days after a trip ends for routine access to traveller identity documents. These thresholds require a review; they do not promise automatic deletion. Legal retention may require restricted storage for at least one year from relevant processing, or longer for an active booking, legal hold or statutory record. Traveller records are managed on the operator’s instructions. Contact privacy@tourify.in to request access, correction or erasure; we will explain applicable exceptions and the treatment of processor copies and backups.
10. International Data Transfers
Your data is primarily stored and processed in data centres that may be located outside India. Service hosting and optional analytics providers can process data internationally. Contact privacy@tourify.in for information about the providers relevant to your account and applicable transfer safeguards. Optional tracking requires the separate choices described above.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Where a change introduces a new consent-based processing purpose, we will request a fresh choice before enabling it.
12. Contact Information
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: