Privacy Policy

1. Who we are

Ontripper ("we", "our", or "us") provides software for travel agencies to manage itineraries, bookings, leads, and customer communications. The data controller is the Ontripper legal entity registered on our Meta Business Portfolio. Contact: mail@ontripper.com or our contact page.

When an agency uses Ontripper to message its own guests, that agency is typically the controller of guest communications. We process that data as a processor to deliver the product.

2. Information we collect

Account and billing. Name, email, phone, agency details, subscription and payment records (processed with our payment providers).

Travel operations. Itineraries, bookings, leads, guest names and contact details, and related notes that agencies store in the product.

WhatsApp. When an agency connects a WhatsApp Business Account (WABA) through Gupshup or Meta Cloud API, we process phone numbers, message content, delivery status, templates, and—when media sharing is enabled—images, documents, and video attached to those conversations. We store connection identifiers such as WABA id, phone number id, and encrypted provider tokens.

Messenger and Instagram. We may offer a dashboard inbox for Facebook Page and Instagram Professional direct messages. That flow uses Facebook Login for Business and may process Page and Instagram account ids, display names, message content, attachments, and encrypted Page access tokens. Scopes are limited to messaging (for example pages_messaging and instagram_manage_messages). This is separate from Lead Ads.

Lead Ads. If an agency connects Facebook or Instagram lead forms, we receive submitted form fields (such as name, email, and phone) to create inquiries. That integration does not read inbox messages.

Technical data. IP address, browser and device information, and product usage logs needed to operate and secure the service.

3. How we use information

We use this information to provide the platform; send and receive messages on behalf of the connected agency; show conversations in the dashboard inbox; run optional agency-configured WhatsApp automation; process payments; prevent abuse; and meet legal obligations. We do not sell personal information. We do not use WhatsApp, Messenger, or Instagram message content to advertise to those individuals on Meta.

4. Sharing and subprocessors

We share data with service providers who help us operate the product:

• Gupshup / OneDirect — WhatsApp Business Platform (Solution Partner).
• Meta — WhatsApp Cloud API (when used), Lead Ads, Facebook Login, Pixel / Conversions API on ontripper.com, and future Messenger / Instagram inbox connections.
• Amazon Web Services — hosting in the Asia Pacific (Mumbai) region.
• Cloudinary — storage of WhatsApp and other media when that feature is enabled.
• Razorpay — subscription and guest payment processing.

We may also disclose information when required by law, to protect our rights, or in connection with a merger or acquisition.

5. Retention

Account, billing, and operational records are kept while the agency subscription is active. After suspension we may retain the account for recovery for up to 180 days, as described in our Terms of Service, then apply our deletion process unless law requires a longer period.

WhatsApp, Messenger, and Instagram messages and attachments are kept for as long as the agency account remains active so consultants can continue the trip conversation. When media storage is enabled, copies live in Cloudinary under the agency's tenant until the conversation or account is deleted. Provider links from WhatsApp expire; we do not rely on those links as the system of record after ingest.

6. Your rights and deletion

Depending on your location, you may request access, correction, deletion, or restriction of personal data. Agency administrators can disconnect WhatsApp or Meta channels in the dashboard, which stops new processing for that connection. Step-by-step deletion instructions, including how to remove Facebook Login access, are at /data-deletion.

7. Cookies and tracking

We use cookies and similar technologies to operate the site and measure marketing performance. This includes the Meta (Facebook) Pixel and related Conversions API events on ontripper.com (for example page views, contact form submissions, and sign-ups). You can control cookies in your browser settings.

8. Security

We use access controls, encryption in transit, and encrypted storage of provider tokens. No method of transmission or storage is completely secure.

9. Changes

We may update this policy by posting a new version on this page and changing the last-updated date above. Material changes will be posted before they take effect where required.

10. Contact

Privacy questions: mail@ontripper.com.