Privacy
What we collect, why, who can see it, and how long we keep it. Identity documents get their own section because they deserve one.
We collect what a permit and a safe journey actually require, and nothing extra. Your identity documents are seen only by the people processing your permit, and are deleted after the retention period.
This is a working draft
It has not yet been reviewed by a lawyer, and we are not taking payments on this website until it has been. We are publishing it early because you should be able to read our terms before you talk to us, not after.
What we collect
Three kinds of information, for three different reasons.
- Contact details, when you enquire: your name, phone number, and what you asked about, so a person can call you back.
- Traveller details, when you book: names, dates of birth and identity document numbers exactly as the permit application requires them.
- Health information you choose to tell us, so we can plan safely at altitude. This is sensitive personal data and we treat it as such.
Identity documents
Permits for the inner line require identity documents. We ask for them for that reason and no other.
Uploaded documents are stored encrypted, are not publicly reachable, and are opened only through short-lived links. Inside our team, only staff with an explicit document-review role can see them. Being a founder does not automatically grant access.
Every time a document is viewed, that view is recorded against the person who viewed it.
We keep documents for as long as the permit and the statutory record require, and then delete them. We do not keep a scan of your passport indefinitely because it might be useful later.
Who else sees your information
Permit authorities and the licensed operating partner for your departure receive what they need to issue permits and run the journey safely. That is the point of collecting it.
Our own tools for messaging, storage and hosting process this data on our instruction.
We do not sell your information, and we do not share it with advertisers.
Messaging
If you contact us on WhatsApp, that conversation happens on WhatsApp's platform under its own terms. We keep a record of the enquiry so a person can follow up, and we send trip-related messages, not marketing, unless you have asked for it.
Your choices
You can ask us what we hold about you, ask us to correct it, ask us to delete it, and withdraw consent for anything that is not legally required. Ask by phone or message and a person will handle it.
Some records we must keep: financial records for the statutory period, and permit records for as long as the administration requires. We will tell you when that is the case rather than quietly ignoring the request.
Where your data lives
Data is stored on servers in India. Where a processor operates elsewhere, we use providers with appropriate safeguards.
Contact
Questions about privacy go to the same people who answer everything else. There is no separate department; there are three of us.