Privacy Policy

Effective 1 July 2026. Governed by the Digital Personal Data Protection Act, 2023 (India).

This policy explains what data we collect, why, how long we keep it, and the rights you have. If anything is unclear, email privacy@anywherego.in.

1. Who we are

"AnywhereGo", "we", "us" refers to the operator of anywherego.in — a curated group-trip planning service. The legal entity operating this website is [YOUR REGISTERED BUSINESS NAME], registered at [YOUR REGISTERED ADDRESS]. Data-protection queries reach a human at privacy@anywherego.in.

2. What we collect and why

2.1 When you create an account

Email, display name, profile photo (if you sign in with Google), and a Firebase-issued user ID. We store this to keep you signed in across devices and to associate your saved trips (wishlist) with your account.

2.2 When you save a trip (wishlist)

The trip IDs you save are stored in Firestore under your user ID so they sync across your phone, laptop, and tablet.

2.3 When you click an affiliate deal link

When you click "Find hotels" or "Find flights" on any trip page, we log the following before redirecting you to the partner site (EaseMyTrip):

Which trip and which link type (hotel or flight)
Timestamp
Your user ID (if signed in) — not stored for guests
A one-way hash of your IP address (never the raw IP), used only for abuse-prevention
Your browser's user-agent string (truncated)

We do this so you can see "Trips you started" on your account page and so we can spot abuse. The hash uses a salt that rotates daily, meaning the same IP produces a different hash every day — we cannot track you across days.

2.4 When you submit the "Plan my trip" lead form

The form fields you fill (name, email, phone if provided, destination, dates, travellers, budget, message) plus your consent flag, the timestamp, the daily-rotating IP hash, and the truncated user-agent. We use this to reply to your trip request from leads@anywherego.in (which forwards to our operations Gmail inbox).

3. How long we keep it

Account + wishlist: until you delete the account. Email privacy@anywherego.in to request deletion.
Affiliate click log: auto-deleted after 90 days by Firestore's TTL policy.
Lead form submissions: kept for as long as needed to fulfil your trip request, then archived. Emailed automatically to our inbox on submission. Request deletion any time via privacy@anywherego.in.
Rate-limit records: auto-deleted after 2 hours.

4. Who processes your data with us

Google Firebase (Auth, Firestore, Cloud Functions) — hosted in Google's Mumbai (asia-south1) region. Our authentication + database + backend.
Cloudflare Turnstile — bot protection on the lead form. Sees your IP and browser fingerprint at the moment of submission; we receive only the pass/fail signal.
Resend — transactional email provider that delivers lead submissions to our inbox.
Cuelinks — affiliate link aggregator. When you click a deal link, you leave our site and enter Cuelinks then a partner site (e.g. EaseMyTrip). Those sites have their own privacy policies.
Render — static-site hosting for anywherego.in.

5. What we do NOT do

We do not sell your data.
We do not use third-party ad-tracking cookies.
We do not run behavioural profiling for advertising.
We do not store your raw IP address anywhere.

6. Your rights under DPDP Act 2023

You have the right to:

Know what personal data we hold about you.
Request correction of inaccurate data.
Request erasure of your data ("right to be forgotten").
Withdraw consent at any time (this may limit what our site can offer you).
Nominate someone to exercise these rights on your behalf.
Lodge a grievance with our contact person and, if unresolved, with the Data Protection Board of India.

To exercise any of these, email privacy@anywherego.in. We respond within 30 days.

7. Cookies and local storage

We use browser localStorage for your currency preference and to keep you signed in. We do not use tracking cookies. We do not display cookie banners because we do not set any tracking cookies that would require one.

8. Children

AnywhereGo is not directed at children under 18. If you believe a minor has provided us data, email privacy@anywherego.in and we will delete it.

9. Changes to this policy

We will update the effective date at the top when this policy changes and, for material changes, notify signed-in users on their next visit.

10. Governing law

This policy is governed by the laws of India. Any dispute is subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka.