LEGAL

Privacy Policy

Last updated: March 18, 2026

At MoonTrip, we believe you deserve clarity about how your information is handled. This Privacy Policy describes what data we collect, why we collect it, how we use and protect it, and the choices available to you. By accessing or using moontrip.app, you acknowledge that you have read and understood this policy.

1. Scope of This Policy

This policy applies to all users of the MoonTrip platform, including travel agency owners, team members, and visitors to our website. It covers information collected through our website, web application, and any related services we provide. It does not cover third-party websites or services that may be linked from our platform — we encourage you to review their privacy practices independently.

2. Information We Collect

We collect information in three ways:

a) Information You Provide

  • Account details such as your name, email address, phone number, business name, and GST Identification Number (GSTIN).
  • Business data you enter into the platform, including customer records, booking details, quotes, itineraries, invoices, and payment records.
  • Billing and subscription information processed through our payment provider. We do not store full payment card numbers on our servers.
  • Communications with our support team, including emails and feedback.

b) Information Collected Automatically

  • Device and browser information, including IP address, operating system, browser type, and screen resolution.
  • Usage data such as pages visited, features used, time spent on the platform, and navigation patterns.
  • Cookies and similar tracking technologies, as described in our Cookie Policy.

c) Information From Third Parties

We may receive information from authentication providers when you sign in using a third-party account (e.g., Google), limited to your name, email address, and profile picture.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide our services: Operating the platform, managing your account, processing subscriptions, and generating invoices and itineraries.
  • To communicate with you: Sending service-related notifications, billing reminders, security alerts, and responding to your support requests.
  • To improve our platform: Analysing usage patterns, diagnosing technical issues, and developing new features (only with your consent for non-essential tracking).
  • To ensure security: Detecting, preventing, and addressing fraud, abuse, and technical vulnerabilities.
  • To comply with the law: Meeting legal obligations, including GST and tax-related requirements under Indian law.
  • To measure effectiveness: Understanding how users discover our platform through advertising (only with your consent).

We process your data under the following legal bases, as applicable under the EU General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act, 2023 (DPDPA): contractual necessity, legitimate interest, your consent, and legal obligation.

4. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

  • Service providers: We work with trusted third-party providers who assist with cloud hosting, authentication, payment processing, analytics, and customer support. These providers are contractually required to use your data only as necessary to perform their services and to maintain appropriate security standards.
  • Advertising partners: With your consent, we may share limited data with advertising platforms to measure the effectiveness of our marketing campaigns. You can withdraw this consent at any time.
  • Legal requirements: When required by law, regulation, or legal process, or to protect the rights, safety, or property of MoonTrip, our users, or the public.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

We may also share aggregated or de-identified data that cannot reasonably be used to identify you.

5. Data Retention

We retain your information only for as long as necessary to fulfil the purposes described in this policy. Specifically:

  • Account data is retained for the duration of your active account. Upon deletion, we retain it for an additional 30 days to allow for account recovery, after which it is permanently deleted.
  • Financial records including invoices, GST records, and tax-related data are retained for a minimum of 8 years, as required by Indian tax and accounting regulations.
  • Usage and analytics data is retained in aggregate form and is anonymised or deleted within 24 months.
  • Support records are retained for up to 3 years after resolution for quality assurance purposes.

You may request deletion of your account and personal data at any time by contacting us. Certain data may be retained where required by law.

6. Data Security

We implement industry-standard technical and organisational measures to protect your information, including encryption of data in transit and at rest, access controls, regular security assessments, and encrypted backups. While we take every reasonable precaution, no system can guarantee absolute security. If you believe your account has been compromised, please contact us immediately.

7. International Data Transfers

Some of our service providers operate outside India. When your data is transferred to other jurisdictions, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent mechanisms required by applicable law. By using MoonTrip, you acknowledge that your data may be processed in jurisdictions with different data protection frameworks than your own.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you and receive a copy.
  • Correct inaccurate or incomplete information.
  • Delete your personal data, subject to legal retention obligations.
  • Restrict or object to certain types of processing.
  • Export your data in a structured, machine-readable format (data portability).
  • Withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of prior processing.

Under India's DPDPA 2023, you may also raise a grievance with our designated contact and we will respond within the timeframe prescribed by law.

To exercise any of these rights, contact us at support@moontrip.app. We respond to verified requests within 30 days.

9. Cookies & Similar Technologies

We use cookies and similar technologies to operate our platform and enhance your experience. Non-essential cookies are only activated after you provide explicit consent. For full details on the types of cookies we use, how they work, and how to manage your preferences, please refer to our Cookie Policy.

10. Children\u2019s Privacy

MoonTrip is a business platform designed for use by travel agency professionals. Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will promptly delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by updating the date at the top of this page and, where appropriate, by email. We encourage you to review this policy periodically.

12. How to Contact Us

If you have questions about this policy, wish to exercise your data rights, or have a privacy-related concern, please reach out to us:

Email: support@moontrip.app

Website: moontrip.app