Privacy Policy
Last updated: March 2026 · Effective date: March 2026
CoPlanner (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information in accordance with the Information Technology Act, 2000 (“IT Act”) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”) of India.
1. Information We Collect
We collect information you provide directly to us and information generated through your use of our service.
a) Information you provide
- arrow_rightEmail address — used to deliver your itinerary and communicate with you.
- arrow_rightTravel preferences — destination, travel dates, budget, accommodation preferences, activity interests, and other answers you provide in the planning questionnaire.
- arrow_rightContact form data — name, email, and message when you reach out to support.
b) Information collected automatically
- arrow_rightUsage data — pages visited, time spent, and interactions with our website.
- arrow_rightDevice information — browser type, operating system, and screen resolution.
- arrow_rightIP address — used for security monitoring and approximate geolocation.
2. How We Use Your Information
We use the information we collect for the following purposes:
- check_circleTo create and deliver your personalised travel itinerary.
- check_circleTo send transactional emails such as order confirmations, itinerary delivery, and support responses.
- check_circleTo improve our service by analysing usage patterns and user feedback.
- check_circleTo detect, prevent, and address technical issues and security threats.
- check_circleTo comply with applicable laws and legal obligations under the IT Act, 2000.
- check_circleTo respond to your queries submitted via our contact form or email.
We do not use your personal information for automated decision-making or profiling beyond what is necessary to deliver your itinerary.
3. Data Storage & Security
We take the security of your personal data seriously and implement reasonable technical and organisational measures as required under the SPDI Rules, 2011.
Supabase Infrastructure
Your data is stored securely on Supabase, a PostgreSQL-based platform with enterprise-grade security controls including row-level security and access policies.
Encryption at Rest
All stored data is encrypted at rest using AES-256. Data in transit is protected using TLS 1.2 or higher.
Access Controls
Access to your data is restricted to authorised personnel only, on a strict need-to-know basis.
Security Monitoring
We monitor our systems for unauthorised access and conduct periodic security reviews.
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to use strong, unique passwords and to contact us immediately if you suspect unauthorised access.
6. Your Rights
Under applicable Indian law, including the SPDI Rules, 2011, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal information we hold about you.
Right to Correct
Request correction of any inaccurate or incomplete information.
Right to Withdraw Consent
Withdraw your consent to processing at any time, subject to legal limitations.
Right to Restrict
Request that we restrict processing of your data in certain circumstances.
To exercise any of these rights, please contact us at support@coplanner.in. We will respond to your request within 30 days.
7. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Grievance Officer as required under the IT Act, 2000:
We reserve the right to update this Privacy Policy at any time. Changes will be effective upon posting to our website, and we will update the “Last updated” date accordingly.