Privacy Policy
We collect only what your trip needs, share it only with the services that run it, and never sell it. Here’s the full picture.
What we collect
When you book or create an account, we ask for what a host genuinely needs to arrange your trip: your name, WhatsApp number, email address, arrival date, and group size. If you add fellow travellers, we store their names and (optionally) dates of birth. Your profile can also hold optional details you choose to share — nationality, dietary preference, preferred language, and an emergency contact.
We never ask for, see, or store your card or banking details — payments are handled entirely by Razorpay, a PCI-DSS-compliant payment processor.
How we use it
Your information is used for exactly one thing: running your trip. That means confirming your booking, sending you your itinerary and receipts by email, coordinating with you on WhatsApp, tailoring the experience to what you told us (like dietary needs), and keeping your account and bookings in one place.
We don’t sell your data. We don’t rent it, trade it, or hand it to advertisers. Ever.
Who we share it with
Only the services that make the website work, and only what each one needs: Supabase (secure database and login), Razorpay (payments), Resend (transactional emails like your booking confirmation), Meta’s WhatsApp Business Platform (booking updates on WhatsApp), and Vercel (website hosting). Your host sees your booking details so they can welcome you properly.
How long we keep it
Booking records are kept so your history and receipts stay available to you, and to meet legal and accounting obligations. If you want your account and personal data deleted, email us — we’ll remove everything we’re not legally required to keep, within 30 days.
Your rights
You can ask us at any time to see the data we hold about you, correct it, or delete it. You can also download your own data anytime from your dashboard’s settings. One email to hello@bookmyrishikesh.com is all it takes.
Cookies & sessions
We use the minimum: a session cookie that keeps you signed in to your account. No third-party advertising cookies, no cross-site trackers.
Changes to this policy
If we ever change how we handle your data, we’ll update this page and note the date below. Material changes will be flagged to account holders by email.
Last updated: 19 July 2026