Privacy notice | InfiniaTrips

Who we are

InfiniaTrips (“we”, “us”) operates infiniatrips.com. For the purposes of India’s Digital Personal Data Protection Act, 2023 and the rules made under it (together, the “DPDP Act”), we are the Data Fiduciary for the personal data we process to provide our services. Our registered legal name and address will be stated here before launch.

You can contact us about privacy at hello@infiniatrips.com.

What we collect

Information you give us

Your name, email address and phone number.
Traveller details exactly as they appear on identity documents, and passport or ID details where a supplier or government requires them for a booking.
Dates of birth where fares, room rules or age limits depend on them.
Preferences, and any assistance needs you choose to share so we can arrange them.
Messages you send us, and the email address you give if you subscribe to the InfiniaTrips letter.

Booking and payment information

What you book, from which supplier, booking references and payment status. Payments are collected by a payment provider through its hosted or tokenised forms. We do not store full card numbers or card security codes.

Technical information

A small number of essential settings stored in your browser, described in our cookies notice, and server logs such as IP address, browser type and pages requested, kept for security and troubleshooting.

Information from others

Confirmations, schedule changes and refund updates from suppliers, and traveller details provided by someone booking on your behalf. If you book for other people, please make sure they are happy for you to share their details with us.

Health details and children

Health details. We ask only for what is needed to arrange travel, such as wheelchair assistance or a step-free room, and only with your consent. We do not ask for medical records, and our forms are not designed for them. For medical travel, records go directly to your hospital through its own secure channel.

Children. Under the DPDP Act, a child is anyone under 18. We process a child’s data only for bookings made by a parent or lawful guardian, or by an authorised institution role, with verifiable consent. We do not track, behaviourally monitor or target advertising at children.

How we use it

To plan, book, change and manage your trips, including sharing the necessary details with each supplier.
To send service messages, such as confirmations, schedule changes and refund updates.
To provide support and resolve problems, including keeping a record of support cases.
To keep the service secure and to prevent fraud and misuse.
To meet legal obligations, such as tax and accounting records or lawful requests from authorities.
With your consent, to send the InfiniaTrips letter. You can unsubscribe at any time.

We do not sell personal data, and we do not use it for third-party advertising.

Consent and legitimate uses

We process personal data on the basis of your consent, given for a specific purpose, or for the legitimate uses the DPDP Act allows, such as when you voluntarily provide data for a purpose you have asked us to fulfil, or when the law requires us to process it. You can withdraw consent at any time, as easily as you gave it. Withdrawal does not affect processing that has already happened, but it may mean we cannot complete a booking that depends on that data.

Suppliers who provide the services you book: airlines, railways, hotels, transport and tour operators, and insurers.
Payment providers who process your payments.
Service providers who act for us, such as hosting, email and support tools, under contracts that limit their use of your data.
AI providers that process ATLAS chats to produce answers, as set out in ATLAS conversations.
Authorities where the law requires it. For example, airlines share passenger information with immigration and border authorities.

If InfiniaTrips is ever reorganised or sold, personal data may transfer to the new owner, who would remain bound by this notice.

Transfers outside India

When you book international travel, your details must reach suppliers in other countries. The DPDP Act permits transfers outside India except to countries the Central Government restricts. We share only what each supplier needs, and we choose service providers with appropriate safeguards.

ATLAS conversations

ATLAS is the InfiniaTrips travel AI. When you chat with it, your messages and its replies are processed by the AI providers whose licensed models produce the answers. They act as our service providers and may process the chat outside India.

What we keep. The conversation, your country and language, any plan ATLAS drafts, the feedback you give on its replies, and a one-way hash of your IP address used for message limits. If you are signed in, the chat is linked to your account.
Card and passport numbers. ATLAS removes numbers that look like card numbers, and passport numbers written next to the word passport, before a chat is stored or sent for an answer. Please don’t type them, and please don’t share medical records or other documents in the chat.
Who can see it. Authorised InfiniaTrips staff can open a chat to support you, handle a hand-off and check that ATLAS answers accurately and safely.
How long. A chat is kept for 180 days after your last message, then deleted. “Help improve ATLAS” is off unless you turn it on. When it is on, a copy may also be used to improve and test future versions of ATLAS, including as a training example, and we keep the chat for 2 years after your last message.
Deleting a chat. Choose “Delete this chat” in the chat panel to remove the conversation and its messages from our systems at any time. If “Help improve ATLAS” was on, deleting cannot undo improvements already made from the chat. A plan you saved to your account stays there; write to us if you would like it removed.
Sharing a plan. Anyone with the link to a plan you share can view that plan, so share it only with people you choose.
Voice. If you use the microphone button, your browser’s own speech service turns your speech into text; we receive only the text.
Passing a chat to our team. If you confirm a hand-off to a travel designer or care coordinator, the summary and the contact details you approve reach our team as a request.
Medical chats. In care mode, ATLAS helps coordinate travel around treatment, such as hospitals, costs, visas and the journey. It is not medical advice, and medical decisions stay with the hospital’s doctors.

How long we keep it

We keep personal data only as long as it is needed for the purpose it was collected for, then erase it, unless the law requires us to keep it longer, as with tax and accounting records. Newsletter details are kept until you unsubscribe, and careers introductions until you ask us to delete them. ATLAS chats follow the times set out in ATLAS conversations.

How we protect it

We use encryption in transit, access controls on a need-to-know basis, tokenised payments, purpose-bound document storage and audit logs. No system is perfectly secure. If a personal data breach occurs, we will inform the Data Protection Board of India and affected people as the DPDP Act requires.

Your rights

Under the DPDP Act you have the right to:

obtain a summary of the personal data we process about you and how we process it;
have your data corrected, completed, updated or erased;
withdraw consent;
have your grievances addressed; and
nominate another person to exercise your rights if you die or become incapable of doing so.

If you live outside India, you may have further rights under local law. To exercise any right, write to hello@infiniatrips.com from the email address linked to your account or bookings. We may need to verify your identity first.

Grievances and complaints

Contact details for our grievance officer will be published here before launch. If you are not satisfied with our response, you may complain to the Data Protection Board of India, once you have used our grievance process first, as the DPDP Act requires.

Changes to this notice

We will update this notice when our practices or the law change. The date at the top shows the latest version, and we will tell you about significant changes before they take effect.