Privacy Policy

• Account: your sign-in identity from Clerk (an account id, and your e-mail address).
• Trips: the trips you save, the places in them, and any share links you create.
• Searches: the destinations you research. Destination results are shared across all visitors. When you are signed in, we record which account started a new destination search or a video search, to enforce rate limits and prevent abuse; deleting your account removes that link.
• Pro and Trip Unlock: your plan, subscription status and dates, Trip Unlock purchases (amount and date), and Razorpay’s subscription, customer, order and payment ids. Payment details stay with Razorpay.
• Abuse protection: a salted hash of your IP address, used to rate-limit searches. We do not store the address itself. Search records are kept while needed for abuse prevention.
• Name and profile photo: if you sign in with Google or add them to your account, Clerk holds them and shows them in the account menu. We do not copy them into our database.
• Bot-check signals: at sign-in, Cloudflare Turnstile (through Clerk) looks at your IP address and browser signals. We do not receive or store them.
• On your device: the cookies and browser storage listed under Cookies and browser storage below (theme, sidebar, guest trip drafts and trip-list view).

Without an account, trips you start are kept only in your own browser (local storage) until you sign in and import them.

To provide MapMyStops to you, to keep it secure, and to process Pro payments. Your trips are private to you unless you share a link. We do not use your data for advertising and do not sell it.

What each item is for, and why we may use it:

• Account id and e-mail (from Clerk): to sign you in and tie your trips to you. Basis: voluntarily provided to create your account (s.7(a)).
• Name and profile photo (held by Clerk): to show who is signed in. Basis: voluntarily provided to create your account (s.7(a)).
• Trips, places and share links: to store and show your trips and to let you share them. Basis: you provide them for that purpose (voluntarily provided, DPDP Act s.7(a)).
• Searches and the account that started them: to enforce rate limits and prevent abuse. Basis: you request the search (voluntarily provided, s.7(a)).
• Plan, subscription and purchase records: to give you Pro or a Trip Unlock and keep payment records. Basis: to perform the purchase you asked for, and to meet tax and accounting record-keeping law.
• Salted IP hash: to rate-limit searches and prevent abuse. Basis: you make the search request (voluntarily provided, s.7(a)).
• Turnstile bot-check signals (held by Cloudflare): security processing to keep bots out of sign-in. Basis: voluntarily provided to create your account (s.7(a)).
• Theme, sidebar, guest-draft and trip-list items on your device: to remember your choices and unsaved trips. Basis: your own action in choosing them.

If we add analytics we will ask for your consent first.

• Clerk: Sign-in and account management. Clerk holds your e-mail address and, if you add them or sign in with Google, your name and profile picture (shown in the account menu; we do not copy them into our database), and runs a Cloudflare Turnstile bot check on sign-in.
• Supabase: Our database: your account record, saved trips, share links and subscription status.
• Vercel: Hosting of the website and app servers.
• Razorpay: Payments for Pro and trip unlocks. When you start a checkout, we read your sign-in e-mail address from Clerk and pass it to Razorpay only to pre-fill the payment form, so Razorpay can send you its payment confirmation. We do not store it in our database or logs; Razorpay keeps it with its payment record. Razorpay collects your payment details; we never see or store card numbers or UPI details.
• Google (Places API): Matching places to Google Maps and showing their photos and ratings. Receives destination and place names, not your account details.
• Tavily: Web search for travel articles about a destination. Receives the destination name only.
• Anthropic (AI models): Picking places out of public travel articles for the AI research features. Receives the destination name and the public article text, never your account details or trips. If we switch to another AI model provider (such as OpenAI) or route these requests through the Vercel AI Gateway, that provider receives only the same data.
• Cloudflare Turnstile (via Clerk): A bot check on the sign-in page, run by Cloudflare through Clerk. It receives your IP address and browser signals (such as device and browser characteristics) to tell people from bots. We do not receive or store these signals.
• YouTube (Google): Finding video guides for a destination and playing them in an embedded player, which loads only when you press play. Video thumbnails load from i.ytimg.com when you open a destination page, before you press play, so Google may see your IP address.

Some of these providers process data outside India, under their own privacy terms.

No analytics or advertising cookies or trackers. We use only the functional cookies and browser storage below.

• Clerk sign-in cookies and local storage (set by Clerk, only if you use sign-in): keep you signed in and secure the session. The cookies last for your session, up to the period Clerk sets for its sessions. Clerk’s local storage items include __clerk_environment, __clerk_protect_pid and __clerk_protect_st; how long they last is set by the provider.
• Cloudflare Turnstile: the bot check on sign-in may set its own cookie or storage in your browser, under Cloudflare’s terms.
• Razorpay Checkout cookies and local storage: set by Razorpay while you pay on the pricing page, to complete and secure the payment. Razorpay’s local storage items include rzp_checkout_anon_id, rzp_device_id and rzp_stored_checkout_id; how long they last is set by the provider, and they can remain on your device after checkout until you clear them.
• mms_sidebar (our cookie): remembers whether the researched-destinations sidebar is open or collapsed. Lasts 1 year.
• theme (local storage): your light or dark choice. Kept until you clear it or pick system default.
• mapmystops.guestTrips (local storage): trips you start without an account, until you sign in and import them or clear your browser data.
• mms:trips:last-count (local storage) and mms:trips:view (session storage): the size of your trip list and your My trips filter and sort. The session item ends when you close the tab.

You can clear any of these in your browser settings; the app then falls back to its defaults.

• Account and trips: as long as your account exists. Deleting your account deletes your account record, your trips and the places in them, and turns off their share links.
• Billing records: Razorpay keeps its payment records as the law requires. We keep copies of payment records (such as Razorpay exports and invoices), and our record of each Trip Unlock purchase (amount, date and Razorpay order and payment ids), for as long as Indian tax and accounting law (such as the Income-tax Act and, where applicable, GST law) requires, even after you delete your account. When you delete your account, those purchase records are kept without any link to your account. The subscription record in our own database is deleted with your account.
• Abuse-prevention records: records of destination research jobs (including a salted, hashed form of your IP address) and video searches are kept to enforce rate limits and budgets. When you delete your account they stay, but are no longer linked to you.
• Logs and backups: Security and access logs are kept for at least one year, as the DPDP Rules require, unless another law requires longer, and then deleted. Copies in our database provider’s backups expire on its rolling schedule and cannot be removed selectively.

You can delete your account at any time:

• Open the account menu (your profile picture, top right), choose manage account, and delete your account, where that option is available. If you cannot find it, or prefer not to, write to support@mapmystops.com and we will delete the account for you.
• What happens: your saved trips, their items and notes, and any share links are permanently deleted, and the links stop working. Your Pro subscription, and any other live subscription, is cancelled immediately and no further charges are made; the unused part of the paid period is not refunded (see Refunds & cancellation).
• What we keep: purchase and billing records (orders, receipts, refunds), without any link to your account, because Indian tax and accounting law (such as the Income-tax Act and, where applicable, GST law) requires it; abuse-prevention records, unlinked from you, as described above; security and access logs for at least one year, as the DPDP Rules require, unless another law requires longer, and then deleted; copies in our database provider’s backups until they expire on its rolling schedule, as they cannot be removed selectively.
• Deleting your account is permanent and cannot be undone. You can still use the free features without an account.

You can also stop using a single feature without deleting your account: for example, stop researching new destinations or searching for videos, and unshare any trip to switch off its share link.

You can delete a trip or stop sharing it at any time. To get a copy of your data, correct it, or delete your account and everything in it (except the billing records described above), write to support@mapmystops.com. Deleting an account with an active Pro subscription cancels it; the unused part of the paid period is not refunded (see Refunds & cancellation).

Right to nominate. You have the right to nominate another person to exercise your rights over your data if you die or become unable to exercise them yourself. To nominate someone, write to support@mapmystops.com from the e-mail address of your account with the nominee's name and contact details. We confirm by replying to the e-mail address of your account and note the nomination against your account. There is no form or setting in the app for this; it is done by e-mail. You can revoke or change a nomination at any time the same way, by writing to support@mapmystops.com from the e-mail address of your account.

A nominee exercises your rights by writing to support@mapmystops.com with proof of the nominee relationship and evidence of the death or incapacity (for example a death certificate). The nominee must pass a document check and identity verification before we act, and we keep a record of that check. Copies of identity documents are deleted once verification is complete. We respond within 15 days of receipt.

This service is for adults: you must be 18 or older to create an account. We do not knowingly collect personal data from children (anyone under 18). If we learn that an account belongs to someone under 18, we will delete it and its data.

Our Grievance Officer, Grievance Officer, MapMyStops, is your contact for privacy questions, requests to use your data rights under the DPDP Act, and complaints about content or the handling of your data: support@mapmystops.com. We acknowledge complaints within 48 hours and resolve them within 15 days of receipt.

You may complain to the Data Protection Board of India through its official channel, after first raising it with our Grievance Officer.