Privacy Policy

1. Who we are

Chautāri is operated by Saaz Neupane, based in Nepal. This policy explains what personal data we collect, how we use it, and your rights regarding that data. For any privacy-related questions, contact us at hello@chautari.co.

2. What we collect

We collect the following categories of data:

• Account data: your name and email address, collected at registration.
• Travel preferences: answers you provide in the trip-planning questionnaire (travel style, fitness level, budget, dietary preferences, trip duration, group size).
• Itinerary data: itineraries we produce based on your preferences, which are saved to your account.
• Wishlist data: destinations you save while browsing.
• Usage analytics: page views and interaction events collected via Plausible Analytics. Plausible is cookieless and collects no personally identifiable information.

We do not collect payment card details directly. Payment data is handled entirely by Stripe (see Section 5).

3. How we use your data

• To create and maintain your account.
• To build personalised Nepal trip itineraries based on your questionnaire answers.
• To send transactional emails: account verification, password reset, and subscription receipts. We do not send marketing emails.
• To improve the service by understanding which features are used.

4. What we do not do

• We do not sell your data to any third party.
• We do not share your data with advertisers.
• We do not use your data to train machine learning models.
• We do not use tracking cookies. The only cookie we set is a session cookie required to keep you logged in.

5. Third-party processors

We share data with the following third parties only to the extent necessary to operate the service:

• Supabase: PostgreSQL database hosting. Stores your account data, itineraries, and wishlist.
• Cloudflare R2: object storage for destination and region images.
• Resend: transactional email delivery (email address only; no message content is retained beyond delivery).
• Stripe: payment processing for Trip Pass purchases. Stripe receives your email address and handles all payment card data directly. We never see or store your card details. Stripe's privacy policy applies to data they collect.
• Sentry: error monitoring. Crash reports are anonymised; we configure Sentry to scrub personally identifiable information from error payloads.
• Plausible Analytics: cookieless, GDPR- compliant analytics. No personal data or IP addresses are stored by Plausible.

6. Cookies

We use one cookie: a session cookie that authenticates your logged-in state. It is deleted when you sign out or after your session expires. We do not use advertising cookies, third-party tracking cookies, or persistent analytics cookies.

7. Data retention

Account data, itineraries, and wishlist entries are retained while your account is active. If you request account deletion, all associated personal data will be permanently deleted within 30 days. Send deletion requests to hello@chautari.co.

8. Your rights

You may at any time:

• Access: request a copy of the data we hold about you.
• Correct: update your name or email via your account profile page.
• Delete: request permanent deletion of your account and all associated data.

To exercise any of these rights, contact hello@chautari.co.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after a change constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests: hello@chautari.co