Privacy Policy

This policy explains what personal information IdeaMyTrip ("we") collects when you use ideamytrip.com or the IdeaMyTrip Android app, why, who we share it with, and the choices you have.

1. What we collect

• Your account. You sign in with Google or Microsoft. We receive your email address and whether the provider has verified it. We never see or store a password.
• Traveller details. To book a flight: each traveller's title, name and date of birth, and passport number and expiry where the airline requires them. To book a hotel: each guest's title and name, and the lead guest's PAN where the hotel requires it.
• Contact details. The email address, phone number and address you give for the booking, and any special requests.
• Payments. Card, UPI and bank payments are handled by Razorpay. We do not receive or store your card number, UPI PIN or bank credentials; we keep Razorpay's order and payment references and the amount paid.
• Security information. Your IP address and the time of requests, used to stop abuse (rate limits) and to check payments.

The Android app does not collect your location, contacts, photos or advertising ID, and contains no advertising or analytics SDKs.

2. How we use it

To search for and make the bookings you ask for, issue tickets and hotel vouchers, send confirmations and updates about your bookings, handle cancellation requests and support, prevent fraud and misuse, and meet our legal and tax obligations. We do not sell your information or use it for advertising.

3. Who we share it with

• Travel suppliers. Traveller and contact details go to our booking partner TBO and, through them, to the airline or hotel you book, because they need them to issue your ticket or hold your room.
• Razorpay, to take your payment.
• Google or Microsoft, when you choose to sign in with them.
• Our service providers: Microsoft Azure, which hosts our servers and database, and our email provider, which delivers booking emails.
• Authorities, where the law requires it.

4. How long we keep it

Details entered for a booking that is not completed are deleted within 7 days. Completed bookings and payment records are kept for as long as accounting and tax law requires. Your account is kept until you ask us to delete it.

5. Security

All traffic to our website and app is encrypted (HTTPS). Data is stored in Microsoft Azure with encryption at rest, and access to it is limited to the staff who need it to run your bookings. In the app, your sign-in is stored in the device's secure keystore and booking screens cannot be captured in screenshots.

6. Your choices

You can ask to see, correct or delete the personal information we hold about you. To delete your account, use Account > Delete account in the app or follow the steps on our account deletion page. Bookings already made are kept as described above.

7. Children

Accounts are for adults. Details of children travelling are entered by the adult making the booking.

8. Changes

We will update this page when our practices change, and change the date at the top.

9. Contact

Questions about your data, or a request about it: noreply@notify.ideamytrip.com.