Privacy Policy

We use the information we collect to:

• Create, maintain, and secure your user account.
• Match you to appropriate travel groups based on gender and destination.
• Process bookings, payments, and communicate confirmations.
• Display personalised destination recommendations and saved content.
• Enable group chats and community features.
• Send booking updates, platform announcements, and service notifications.
• Detect, investigate, and prevent fraud, abuse, or security threats.
• Improve platform performance, features, and user experience.
• Comply with legal obligations and resolve disputes.

We do not sell your personal information to any third party for marketing purposes.

When you participate in group chats:

• Your name and profile photo are visible to other group members.
• All messages you send within a group are visible to current group members.
• Messages are retained to maintain conversation continuity for group members.
• We may review group chat content to enforce community guidelines, investigate abuse reports, and ensure platform safety.
• Messages flagged for violations may be removed without prior notice.

Group chats are not end-to-end encrypted. Please avoid sharing financial details, passwords, or sensitive personal documents in group chats.

We share your information only in the following circumstances:

Photos and images uploaded by users, agencies, and staycation providers are:

• Stored securely in Cloudinary, a cloud-based media management service.
• Displayed publicly on destination pages, agency profiles, and staycation listings.
• Used to present the platform to prospective travellers.
• Potentially used in platform marketing and promotional material (with credit where appropriate).

You are responsible for ensuring you have full rights to any images you upload. Do not upload images featuring identifiable individuals without their consent, or copyrighted images you do not own.

You may request removal of specific uploaded images by contacting hello@weekendwander.in.

All payment transactions are processed by Razorpay, a PCI-DSS Level 1 certified payment gateway. WeekendWander receives only:

• Transaction status (success / failure).
• Razorpay transaction ID and order ID.
• Amount paid and currency.
• Payment method type (card, UPI, net banking — not the specific credentials).

Razorpay's handling of your payment data is governed by Razorpay's Privacy Policy.

We implement reasonable technical and organisational measures to protect your data, including:

• All data is transmitted over HTTPS / TLS encryption.
• Passwords are hashed using bcrypt — never stored in plaintext.
• Our database (Supabase on PostgreSQL) is hosted with row-level access controls.
• Authentication tokens and sessions are managed securely via NextAuth.js.
• Platform access is protected with role-based permissions (User, Admin, Agency, Staycation).

While we strive to protect your data, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security and encourage users to use strong, unique passwords.

We retain your personal data for as long as your account is active or as needed to provide services.

When you delete your account:

• Your profile, travel preferences, saved destinations, and group memberships will be removed.
• Your profile photo and uploaded content will be deleted from our systems.
• Transaction records and booking history may be retained for up to 5 years for accounting, tax, and legal compliance purposes.
• Content you posted in group chats may be anonymised rather than deleted, to maintain conversation integrity for other members.

To request account deletion, go to Profile → Settings → Delete Account, or email hello@weekendwander.in.

WeekendWander is designed for users aged 18 years and above. We do not knowingly collect personal information from individuals under 18 without verified parental consent.

If you believe a minor has registered on our platform without appropriate consent, please contact us at hello@weekendwander.in and we will promptly investigate and take appropriate action including account deletion.

Minors under 18 may use the platform only under direct parental or legal guardian supervision, and the guardian assumes full responsibility for the minor's use of the platform.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information through your profile settings.
• Deletion: Request deletion of your account and associated personal data.
• Opt-out: Unsubscribe from marketing emails via the unsubscribe link in any email we send.
• Data portability: Request your data in a structured, machine-readable format.
• Withdraw consent: Withdraw consent for optional data processing at any time (this may affect certain platform features).

To exercise any of these rights, email hello@weekendwander.in with the subject line "Privacy Request" and we will respond within 15 business days.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify you via email or an in-app banner for significant changes.
• Where required by law, request your consent before applying changes.

Continued use of WeekendWander after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: