Privacy policy

Who this covers

Daywise is software that travel agencies use to draft and share itineraries. Agencies are our customers. Their clients (the travellers) see itineraries through links and PDFs the agency sends. For travellers' details the agency decides what is entered and why; Daywise processes that data on the agency's behalf, as a data processor under India's Digital Personal Data Protection Act, 2023.

What we store

• Agency account: agency name, contact details, logo and branding, and the email address used to sign in.
• Itineraries: trip requests, days, places, hotels, prices the agent typed, and the traveller details the agent enters (name, phone, email, city, number of travellers).
• Link views: when a shared link is opened we record the time and whether it was a phone or a computer. To count a device once per hour we keep a salted one-way hash of its IP address and browser; the IP address itself is never stored, and these rows are deleted within hours.
• Activity log: sign-ins and important changes (share links turned on or off, deletions, account changes), with the user who made them.
• Usage counts: how many drafts, AI calls, place lookups and PDFs an agency uses each month, for limits and billing.

Photos of places are not stored. They are fetched from Google when an itinerary is viewed, with the photographer credited. PDFs are generated on request and deleted after download.

Cookies

One cookie: a sign-in session for agency users (HTTP-only, secure, 30 days). Travellers opening a shared link get no cookies. There is no advertising or analytics tracking.

Who else processes data

• AI drafting (Groq, Google Gemini): the trip request and brief. Traveller names, phone numbers and emails are not sent.
• Google Maps Platform: place and hotel names, to verify them and fetch photos.
• Resend: the agency user's email address, to send sign-in links.
• Cloudflare R2: logos and encrypted-in-transit nightly database backups.
• Sentry: error reports, which can include the page address and technical details of the failure.
• Hostinger: the server in Mumbai that runs Daywise and its database.

How long we keep it

Agency data is kept while the account is active. Nightly backups are kept for 14 days. If an account is suspended, its shared links stay readable for 30 days and then stop working; the data stays until the agency asks for deletion. Sign-in links expire after 15 minutes.

Your choices

Agencies can download all of their data from Settings → Your data at any time, and can ask us to delete their account; deletion removes itineraries, links, logins, usage records and logos, and backups containing them expire within 14 days. Travellers who want their details corrected or removed should contact the agency that sent the itinerary, or write to us and we will pass the request on.

Contact

Questions or requests: support@smallsoftware.in.