Privacy Policy

PlanBanaDo (“we”, “us”) is an AI-powered trip planner operated from India at planbanado.com. This policy explains what data we collect, why, and the choices you have. It is written to comply with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

• Account data — your email address, sign-in provider (email/password or Google), and optionally a display name, home city, and language preference.
• Trip data — the preferences you enter (destination, group type, budget, pace, interests, dietary preference, travel month, and any free-text notes), the itineraries generated for you, your chat messages refining a plan, and collaboration activity on shared trips (invitations, joins, and votes).
• Payment records — the plan or pack you bought, the amount, and a Razorpay payment reference. We never see or store your card, UPI, or bank details — payment is handled entirely by Razorpay.
• Usage events— privacy-conscious counters (for example “an itinerary was generated”) containing the event type, your account ID when signed in, and coarse metadata such as a destination name. They contain no advertising identifiers and we use no third-party analytics or ad networks.
• Technical data — server logs and error reports (via Sentry) which can include your IP address and device/browser information, used only to keep the service working.

Sensitive inputs

If you add accessibility or dietary notes to a trip, they are used only to shape that trip’s plan. They are never written to our analytics events, never shared with other users beyond the trip you put them in, and are deleted with the trip.

How we use your data

• Generating your plan— the trip preferences you enter are processed by our AI provider (Anthropic’s Claude API) solely to produce your itinerary and chat replies.
• Operating your account, saved trips, and shared-trip features.
• Processing payments and maintaining a purchase record.
• Understanding aggregate product usage (how many plans are generated, where sign-ups drop off) from the privacy-conscious events above.
• Detecting abuse and keeping the service secure.

We do not sell your data, and we show no third-party advertising.

Who processes your data

• Google Firebase — sign-in and our database, hosted in the Mumbai (asia-south1) region.
• Vercel — website hosting and server functions.
• Anthropic — AI generation of itineraries and chat replies.
• Razorpay — payment processing (India).
• Sentry — error monitoring.
• Unsplash— destination photographs are loaded directly from Unsplash’s servers, which receive your IP address when a photo loads.
• Google Maps & Weather — map embeds, geocoding, and forecasts for your itinerary.

Sharing you control

A trip’s share link lets anyone who has the link view that itinerary — share it only with people you trust. Collaborators you invite can see the trip and vote on days. Sharing to WhatsApp simply opens your own WhatsApp with a pre-filled message; we get nothing from WhatsApp.

Outbound booking links (transport and stays) may carry an affiliate tag. What you do on those sites is governed by their own privacy policies.

Cookies and local storage

We use only what is essential to run the service: Firebase stores your sign-in session in your browser’s local storage, and our offline support caches pages on your device. We set no advertising or cross-site tracking cookies and use no third-party analytics cookies, which is why you don’t see a cookie banner.

Retention

Account and trip data are kept until you delete them. Usage events and error logs are kept for bounded operational windows. Payment records are retained as required by Indian law.

Your rights (DPDP Act)

• Access & correction — see and edit your account details on the Account page; your trips are yours to edit or delete at any time.
• Erasure — delete individual trips in the app, or delete your entire account (Account page), which removes your account data and the trips you own.
• Consent withdrawal & grievances — write to support@planbanado.com. We respond to grievances within 30 days.
• Nomination — you may nominate another person to exercise these rights for you as provided by the DPDP Act.

Children

PlanBanaDo is not directed at children. Paid features require you to be at least 18, or to use the service with a parent or guardian’s consent.

Security

All traffic is encrypted in transit (HTTPS). Trip saves, entitlements, and payments are enforced on our servers with least-privilege database rules; your payment instruments never touch our systems.

Changes

We will update this page when our practices change and revise the “last updated” date above. Material changes will be announced in the app.

Contact

Questions or requests: support@planbanado.com