Legal
Privacy policy
Last updated 2 Nov 2026
This policy explains what personal data StrangersGo (“we”, “us”) collects when you use this website and book a trip, why we need it, and the choices you have. It follows India's Digital Personal Data Protection Act, 2023.
What we collect
Your account
- Name and email address, and a password if you set one.
- Optional profile details: phone number, date of birth, gender, city and an emergency contact.
When you book a trip
- For every traveller on the booking: full name (as on their ID), age, gender (optional) and an emergency contact's name and phone.
- For the lead traveller: phone number and email address.
- ID documents: a photo or PDF of each traveller's ID (passport, driving licence, voter ID, PAN or Aadhaar). We need these to confirm who is on the trip and for hotels and transport along the way.
- Payment records: amount, status, payment method type (such as UPI or card) and the payment provider's reference. We never see or store your card, UPI PIN or bank login; you enter those on Razorpay's secure checkout.
When you contact us
- The name, email or phone and message you send through the contact form.
Automatically
- Cookies that keep you logged in, and basic technical logs (such as IP address and browser) that our hosting providers keep for security.
- Analytics, only if you accept them (see Cookies).
Why we use it
- To create and run your account and log you in.
- To take bookings and payments, issue tickets, and run the trip (rooming, transport, check-ins and emergencies).
- To send messages about your bookings: confirmations, payment problems, cancellations, refunds and reminders.
- To answer your questions and handle cancellations and refunds.
- To keep the service secure, prevent fraud and meet our legal and tax obligations.
- If you accept analytics cookies: to understand how the site is used and improve it.
We do not sell your personal data, and we do not use it for ads.
Who we share it with
We share personal data only with the services that help us run StrangersGo, and only what each one needs:
| Service | What for |
|---|---|
| Supabase | Database, logins and file storage (including ID documents), hosted in Mumbai, India |
| Vercel | Hosting the website |
| Razorpay | Taking payments and sending refunds |
| Resend | Sending emails about your account and bookings |
| Google Analytics, Microsoft Clarity | Website analytics, only if you accept analytics cookies |
Some of these providers may process data outside India. Trip partners such as hotels and transport operators receive traveller names and ID details only when a trip needs them. We may also share data when the law requires it.
ID documents
- Stored privately. Only you (for your own booking) and our team can open them, through links that expire within minutes.
- Every time our team opens or deletes an ID, it is logged.
- You can upload a masked Aadhaar (only the last 4 digits visible) instead of the full card.
- We delete ID documents after the trip. You can ask us to delete them sooner by contacting us.
How long we keep it
- Account and profile: until you ask us to delete your account.
- Bookings and payment records: as long as tax and accounting law requires, even after an account is deleted.
- ID documents: until after the trip (see above).
- Messages to support: as long as needed to answer them.
Cookies
- Necessary cookies keep you logged in and the site secure. They are always on, because the site cannot work without them.
- Analytics cookies (Google Analytics and Microsoft Clarity) show us which pages are used and where people get stuck. Clarity can record how pages are used (clicks and scrolling), with everything typed into forms hidden. These are off unless you accept them in the cookie banner, and the site works the same either way.
- We remember your choice in your browser. You can change it at any time: .
Your rights
You can ask us to:
- tell you what personal data we hold about you;
- correct or update it (most of it you can edit in your account);
- delete it, except what the law requires us to keep (such as payment records);
- withdraw a consent you gave, such as for analytics.
You can also name someone to act for you if you are unable to. To make a request or raise a complaint, contact us. We reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.
Children
Accounts and bookings must be made by adults. A traveller under 18 can join a trip only on a booking made by their parent or guardian.
Changes to this policy
When we change this policy, we update the date at the top. If a change affects how we use your data, we will tell you by email or on the site first.