Privacy Policy

We collect the following categories of information:

• Account information: name, email address, and profile picture, when you register or sign in via email/password, Google, or Apple.
• Trip and search data: origin/destination, travel dates, number of travelers (adults/children/rooms), nationality, and interests or preferences you enter to search for flights, hotels, transport, or generate itineraries.
• "Something else in mind?" free-text box (Trip Planner and mood-based Discovery): used to personalize that itinerary or set of recommendations, as with other trip preferences above. We also keep an anonymous copy of the text alone - never linked to your name, email, or account - solely so we can see recurring themes across all travelers (e.g. many people mentioning a particular occasion or need) and use that to improve future features. This anonymous copy is not affected by account deletion since it is never tied to your account in the first place.
• Saved trips: itineraries, bookings-search results, and listings you choose to save under "My Trips".
• Build Your Own itineraries: if you use the "Build Your Own" manual itinerary builder, we store one or more destinations (and, for multi-city trips, how nights are split across each), dates, and travelers you enter, along with each day's Things To Do selections and their optional time-of-day tag (morning/afternoon/evening/night), any free-text Notes you write for that day, and (on Plus, Pro, and Business) any Stay, Flight/Transport, or Dining results you choose to add - used only to save and display your itinerary back to you.
• Travel Advisory data: when you view an itinerary, the destination, travel dates, and the names/cities of places already in that itinerary are used to check for live local events and place-closure status (see Section 4, "How We Share Your Information").
• SARATHI Live (in-trip companion chat): uses only the destination, dates, and day-by-day plan already saved in that specific trip's itinerary (the trip and search data described above), plus the text of the messages you send it, which we store per-trip so your conversation persists across sessions. SARATHI Live does not access, request, or use your device's real-time/precise GPS location, and we do not build or store any location history or movement trail as part of this feature.
• Client data (SARATHI Business users only): if you use our Business tier, the name, email, phone, and notes you enter for your own clients/travelers to organize itineraries on their behalf. See Section 5, "Business/Agent Accounts & Client Data".
• When your app or browser contacts our servers we receive basic technical information as part of that request - app version, device and operating system type, language, and IP address. Our servers keep standard request logs for 90 days for security and troubleshooting. The app does not send crash reports to us, and we use no analytics or crash-reporting services inside the app.
• Communications: information you provide when you contact us for support (e.g. your email and the content of your message).
• Precise device location (GPS): only when you explicitly tap "Use my current location" in Restaurant Search - used one time to fetch nearby restaurant results for that single search. We do not track your location in the background, and we do not build or store a location history or movement trail; the coordinates are used transiently for that search and are not retained afterward.
• Camera and photos: only when you choose to take or upload a photo (e.g. a TravelNoteBook entry, or an agency branding logo on Business accounts) - the app never accesses your camera or photo library without that explicit action.
• Calendar: only when you explicitly tap "Add to Calendar" on a Build Your Own trip day - used solely to create a new event, on your device, for that day's plan. We do not read, collect, or transmit your existing calendar events, and no calendar data is sent to or stored on our servers.
• We do not request or collect microphone or contacts data - the app does not request these device permissions.
• Payment/subscription information: for SARATHI Plus/Business subscriptions, Apple or Google processes your payment directly through their in-app purchase system; we receive only your subscription status/entitlement (via RevenueCat, our subscription-management provider) - never your card details. Sovayze does not collect any payment information for real-world travel bookings (see Section 7, "Payments").

We use the information we collect to:

• Create, maintain, and secure your account, and let you save and retrieve trips across sessions and devices.
• Generate personalized itineraries, things-to-do suggestions, and budget estimates based on your search inputs.
• Search and display live flight, hotel, and other travel pricing relevant to your query.
• Operate, maintain, troubleshoot, and improve the Service, including diagnosing technical issues.
• Communicate with you about your account, respond to support requests, and send Service-related notices (we do not send marketing emails unless you opt in).
• Detect, investigate, and prevent fraud, abuse, or security incidents, and enforce our Terms of Service.
• Comply with applicable legal obligations.

The Service is a mobile application and does not use browser cookies. We may use functionally equivalent local storage mechanisms on your device (e.g. secure device storage) solely to keep you signed in and to remember your preferences (such as display currency or whether you have completed onboarding). We do not use these mechanisms for third-party advertising or cross-app tracking. See our full Cookie Policy for details.

We do not sell your personal information. We share information only as follows:

• Google Places API - to retrieve destination and points-of-interest data based on your search, and, for itineraries you have generated, to check whether a listed place is temporarily or permanently closed ("Travel Advisory").
• Ticketmaster (Discovery API) - for itineraries you have generated, we send the destination and travel dates (not your name or account details) to Ticketmaster to retrieve live, ticketed local events happening near your destination during your trip ("Happening During Your Trip"). If you tap to view or buy tickets for an event, you leave the Service and interact directly with Ticketmaster under its own terms and privacy policy.
• YouTube API Services - the short destination preview videos shown on "Explore Destinations" are retrieved and embedded using the YouTube Data API and YouTube's privacy-enhanced player (youtube-nocookie.com), which does not set tracking cookies unless you actually press play on a video. By using this feature you are also agreeing to be bound by the YouTube Terms of Service, and Google's use of information from this feature is governed by the Google Privacy Policy. You can review or revoke Sovayze's access to any Google account data at any time at Google security settings.
• Our flight search and booking data provider - to retrieve live flight search results and pricing based on your search parameters.
• Our hotel search and booking data provider - to retrieve live hotel search results and pricing based on your search parameters.
• Our itinerary-generation infrastructure providers - to generate personalized itineraries, things-to-do suggestions, budget plans, and SARATHI Live companion replies from your search inputs and messages. For SARATHI Free-tier itinerary generations and Free-tier SARATHI Live companion chats specifically, we may route your request to a secondary, lower-cost infrastructure provider so this stays free to you; your trip parameters or message text sent to it never include your name, email, or account ID, and that provider operates under a Zero Data Retention configuration and does not train its models on this data.
• ipwho.is - a momentary, server-side lookup of your approximate country (derived from your IP address) so we can show you the correct regional pricing for SARATHI Plus/Business; this is not a cookie and nothing is permanently stored tied to your IP.
• Google or Apple - only if you choose to sign in using those providers, subject to their own privacy policies.
• Service providers who host our infrastructure (e.g. cloud hosting and database providers), under contractual confidentiality and data-protection obligations.
• Legal and safety purposes: where required to comply with law, respond to lawful requests, or protect the rights, property, or safety of Sovayze, our users, or others.
• Business transfers: if Sovayze is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.
• RevenueCat - our subscription-management provider for SARATHI Plus/Business; it receives your purchase/entitlement status from Apple or Google (never your card details) so we can keep your subscription active and in sync across your devices.
• Affiliate/commission relationships: some booking links shown in the Service may, now or in the future, be commercially compensated (affiliate) links with travel providers or a travel-affiliate network (e.g. Travelpayouts). This does not affect the price you pay. Where an affiliate relationship is active, we disclose it in the Service near the relevant booking link, consistent with FTC endorsement guidance.

Sovayze offers a "SARATHI Business" tier for travel agents and teams, which lets a subscriber create profiles for their own clients/travelers ("Client Data") and generate or save itineraries on their behalf. If you use this feature:

• You (the agent/subscriber) are solely responsible for obtaining any consent required by applicable law before entering a client's name, email, phone number, or notes into the Service, and for confirming you have a lawful basis to do so.
• Sovayze acts as a data processor for Client Data you submit - we store and process it only to provide the Service to you (e.g. saving itineraries, generating co-branded PDF exports), and do not use Client Data for our own marketing or profiling purposes.
• You can permanently delete a client profile at any time from the Agent Dashboard; associated saved trips are retained under your own account but unlinked from the deleted client.
• You must not enter personal information belonging to a client who has not authorized you to store and process it for travel-planning purposes.

We retain your account and trip data for as long as your account remains active, or as needed to provide the Service to you. SARATHI Live conversation history is retained for as long as its associated trip remains saved; deleting that saved trip, or your account, permanently deletes its SARATHI Live conversation history along with it. If you delete your account, we permanently delete your account record, saved trips, and session data from our production systems (residual copies may briefly persist in backups before being purged on our standard backup rotation cycle). We may retain limited information where required to comply with legal obligations, resolve disputes, or enforce our agreements.

Sovayze does not process payments for real-world travel bookings within the app. All flight, hotel, and other travel bookings are completed directly with the third-party operator (e.g. the airline, hotel, or booking platform), and any payment details you provide are submitted directly to that third party under its own privacy and payment terms - Sovayze does not receive or store your payment card information for these bookings.

SARATHI Plus and SARATHI Business subscriptions ARE processed in-app, exclusively through Apple's or Google's own in-app purchase systems. We use RevenueCat as our subscription-management infrastructure provider to keep your entitlement status in sync across devices - RevenueCat receives your purchase/transaction and subscription status from Apple/Google, but Sovayze never receives or stores your payment card details. You can view, manage, or cancel your subscription anytime through your Apple ID or Google Play account settings.

We implement industry-standard technical and organizational measures to protect your information, including encrypted connections (TLS/HTTPS) in transit and hashed password storage. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

Sovayze is operated from the United States, and the infrastructure providers we use may process and store information in the United States or other countries. Where we transfer personal information internationally, we take reasonable steps to ensure it receives an adequate level of protection consistent with this Privacy Policy and applicable law.

• Account deletion: you can permanently delete your account and all associated data at any time, directly in the app: go to Profile → Delete Account. This immediately and permanently removes your account, saved trips, and session data from our systems.
• You may also request access to, correction of, or deletion of your personal information by emailing us (see Contact Us below); we will respond within a reasonable time and in accordance with applicable law.
• EU/UK users (GDPR): you have the right to access, rectify, erase, restrict, or port your data, to object to certain processing, and to lodge a complaint with your local data protection authority.
• California users (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, and to non-discrimination for exercising these rights. We do not sell or "share" personal information as defined under the CCPA.
• Other jurisdictions (e.g. Brazil LGPD, India DPDP Act, Singapore PDPA, and similar laws): equivalent access, correction, and deletion rights apply and will be honored to the extent required by applicable law.
• To exercise any of these rights, contact us using the details in Section 14 below. We may need to verify your identity before completing certain requests.

The Service is not directed to, and is not intended for use by, children/minors under 18 years of age, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, please contact us and we will promptly investigate and delete such information as appropriate.

The Service contains links to and integrates data from third-party websites and services (e.g. airline, hotel, and booking-provider sites). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party site or service before providing your information to it.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy in the app with a revised "Last updated" date, and, where changes are material, we will provide additional notice (such as an in-app notification) before the changes take effect.

This Privacy Policy is governed by the laws of the United States, without regard to conflict-of-law principles, and without prejudice to any mandatory data-protection rights you may have under the law of your country of residence (e.g. GDPR, CCPA).

Sovayze is operated by Shobha With Shubhra LLC. If you have questions about this Privacy Policy, your data, or wish to exercise your privacy rights, contact us at: support@sovayze.com

Terms of Service · Cookie Policy · Accessibility Statement · Help & Support