Privacy policy.

What we collect when you use Spotplans, why, and how to see or delete it. In short: only what the site needs to work, never sold.

Last updated 8 October 2026

Who we are

Spotplans (spotplans.com) is run by Team Spotplans in Bengaluru, Karnataka, India. For anything about your data, including complaints, email founder@spotplans.com. That address also reaches our grievance contact under India's Digital Personal Data Protection Act, 2023.

What we collect

  • Your Google account details when you sign in: name, email address and profile picture. We never see your Google password.
  • Your trips: the destination, dates, budget and preferences you enter, the plans made for you, the trips you save, your Travel DNA answers and the creators you follow.
  • Newsletter and alerts: your email address if you sign up for new guides or ask to hear when a feature reaches a destination.
  • Creators: your public profile (name, handle, bio, photo, social links) and the Spots and photos you submit, which are shown publicly once approved. If we invited you to join, we keep the public contact details we used and notes on our conversation.
  • Upgrades and plan checks: if you ask for Premium, Pro or a plan check, we record what you asked for and its status. Spotplans doesn't take payments, so we hold no payment or card details.
  • Usage: our own visit log stores a random visitor id, a random session id, the page, the site you came from and simple actions (such as “plan made”). It isn't linked to your name and is skipped if your browser sends Do Not Track. We also use Google Analytics, which sets cookies to count visits.

Why we use it

  • To sign you in, make and save your plans, and show them on any device.
  • To share a plan by link when you choose to share it.
  • To send the newsletter or alerts you asked for (unsubscribe any time by emailing us).
  • To run Premium, Pro and plan checks when you ask for them.
  • To understand which pages help people, fix problems and keep the site secure.

We don't sell your data, and we don't use it for advertising.

Who processes it for us

  • Supabase: our database and Google sign-in.
  • Vercel and Render: host the website and the planner.
  • AI providers (OpenRouter and the model providers it routes to, or Anthropic): receive your trip details to write the plan. We don't send your name or email.
  • Google: sign-in and Analytics.
  • Unsplash: photos load from Unsplash's servers, which see your IP address like any image host.

Some of these services store data outside India.

Cookies and local storage

We use a sign-in cookie to keep you logged in, browser storage for the random ids in our visit log, and Google Analytics cookies. Blocking cookies stops sign-in from working but you can still read guides.

How long we keep it

Account data and trips stay until you delete them or ask us to delete your account. Newsletter addresses stay until you unsubscribe.

Your choices and rights

You can ask to see, correct or delete your data, or withdraw consent, by emailing founder@spotplans.com from the address you signed in with. We reply within 30 days. Plans you shared by link stay viewable until you delete them.

Children

Spotplans is meant for people aged 18 and over. Don't sign up if you're younger.

Changes

If we change this policy we'll update the date at the top. See also our terms.