LEGAL
Privacy Policy
Last updated: March 18, 2026
At MoonTrip, we believe you deserve clarity about how your information is handled. This Privacy Policy describes what data we collect, why we collect it, how we use and protect it, and the choices available to you. By accessing or using moontrip.app, you acknowledge that you have read and understood this policy.
1. Scope of This Policy
This policy applies to all users of the MoonTrip platform, including travel agency owners, team members, and visitors to our website. It covers information collected through our website, web application, and any related services we provide. It does not cover third-party websites or services that may be linked from our platform — we encourage you to review their privacy practices independently.
2. Information We Collect
We collect information in three ways:
a) Information You Provide
- Account details such as your name, email address, phone number, business name, and GST Identification Number (GSTIN).
- Business data you enter into the platform, including customer records, booking details, quotes, itineraries, invoices, and payment records.
- Billing and subscription information processed through our payment provider. We do not store full payment card numbers on our servers.
- Communications with our support team, including emails and feedback.
b) Information Collected Automatically
- Device and browser information, including IP address, operating system, browser type, and screen resolution.
- Usage data such as pages visited, features used, time spent on the platform, and navigation patterns.
- Cookies and similar tracking technologies, as described in our Cookie Policy.
c) Information From Third Parties
We may receive information from authentication providers when you sign in using a third-party account (e.g., Google), limited to your name, email address, and profile picture.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide our services: Operating the platform, managing your account, processing subscriptions, and generating invoices and itineraries.
- To communicate with you: Sending service-related notifications, billing reminders, security alerts, and responding to your support requests.
- To improve our platform: Analysing usage patterns, diagnosing technical issues, and developing new features (only with your consent for non-essential tracking).
- To ensure security: Detecting, preventing, and addressing fraud, abuse, and technical vulnerabilities.
- To comply with the law: Meeting legal obligations, including GST and tax-related requirements under Indian law.
- To measure effectiveness: Understanding how users discover our platform through advertising (only with your consent).
We process your data under the following legal bases, as applicable under the EU General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act, 2023 (DPDPA): contractual necessity, legitimate interest, your consent, and legal obligation.
5. Data Retention
We retain your information only for as long as necessary to fulfil the purposes described in this policy. Specifically:
- Account data is retained for the duration of your active account. Upon deletion, we retain it for an additional 30 days to allow for account recovery, after which it is permanently deleted.
- Financial records including invoices, GST records, and tax-related data are retained for a minimum of 8 years, as required by Indian tax and accounting regulations.
- Usage and analytics data is retained in aggregate form and is anonymised or deleted within 24 months.
- Support records are retained for up to 3 years after resolution for quality assurance purposes.
You may request deletion of your account and personal data at any time by contacting us. Certain data may be retained where required by law.
6. Data Security
We implement industry-standard technical and organisational measures to protect your information, including encryption of data in transit and at rest, access controls, regular security assessments, and encrypted backups. While we take every reasonable precaution, no system can guarantee absolute security. If you believe your account has been compromised, please contact us immediately.
7. International Data Transfers
Some of our service providers operate outside India. When your data is transferred to other jurisdictions, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent mechanisms required by applicable law. By using MoonTrip, you acknowledge that your data may be processed in jurisdictions with different data protection frameworks than your own.
8. Your Rights & Choices
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you and receive a copy.
- Correct inaccurate or incomplete information.
- Delete your personal data, subject to legal retention obligations.
- Restrict or object to certain types of processing.
- Export your data in a structured, machine-readable format (data portability).
- Withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of prior processing.
Under India's DPDPA 2023, you may also raise a grievance with our designated contact and we will respond within the timeframe prescribed by law.
To exercise any of these rights, contact us at support@moontrip.app. We respond to verified requests within 30 days.
10. Children\u2019s Privacy
MoonTrip is a business platform designed for use by travel agency professionals. Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will promptly delete that information.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by updating the date at the top of this page and, where appropriate, by email. We encourage you to review this policy periodically.
12. How to Contact Us
If you have questions about this policy, wish to exercise your data rights, or have a privacy-related concern, please reach out to us:
Email: support@moontrip.app
Website: moontrip.app