01
Information We Collect
When you use SplitMitra, we collect information you provide directly to us such as your name, email address, and profile details and information about the plans, expenses, and notes you create within the platform.
We automatically collect certain telemetry data, such as IP addresses, browser types, and usage patterns to ensure stability and security of our services.
When you sign up, sign in, reset or change your password, or change other account-security settings, we record the IP address, an approximate location worked out from that IP address (city, region and country), your device and browser type, and the time. We never use your device’s GPS for this and never ask for location permission. The location lookup runs on our own servers, so your IP address is not sent to anyone else for it. We use this record only to protect your account (for example, to warn you about a sign-in from a new device or country) and to meet our legal obligations. You can see your recent account activity in your profile’s security settings.
02
How We Use Your Information
- To provide, maintain, and improve our services.
- To process transactions and send related information, including payment confirmations and receipts.
- To send technical notices, updates, security alerts, and support messages.
- To generate AI itineraries via our Semantic Kernel integration. AI prompts do not include personally identifiable information (PII).
- To enforce subscription quota limits and credit pack balances tied to your account.
- To keep your account secure: spotting sign-ins that aren’t you, emailing you about a sign-in from a new device or country, investigating fraud or abuse, and meeting our legal duties, such as the CERT-In directions on keeping security logs. We never use your IP address, location or device details for advertising, marketing or profiling.
04
Payment and Credit Pack Data
When you purchase a subscription or a one-time credit pack, we record the Razorpay order ID, payment ID, pack type, and amount in our database to verify and fulfil your purchase. This record is used for idempotency (ensuring you are never charged twice) and for customer support.
Credit balances (AI Packs) are stored against your user account and never expire. They are consumed automatically when you use the corresponding feature beyond your tier’s included quota. A Trip Pass upgrades one plan for a fixed period (the period shown when you buy it) and ends automatically when that period is over.
05
Data Security
SplitMitra takes reasonable technical and organisational measures to protect your information from loss, theft, misuse, unauthorised access, disclosure, alteration, and destruction. All traffic between your browser and our servers is encrypted via TLS. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
06
Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal profile, plans, and expenses within 30 days, except where we are required by law to retain certain records (e.g., financial transaction logs for tax compliance).
AI usage logs are retained for 90 days for abuse detection and quota auditing, then purged.
Account-security records (IP address, approximate location, device and time of sign-ups, sign-ins and password changes) are kept for 180 days after they were last seen, as the CERT-In directions require for security logs, or longer only where Indian law requires it. They are kept for that period even if you delete your account or ask us to erase your data, are used for nothing else, and are then deleted.
08
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us at support@splitmitra.com. We will respond within 15 business days. To delete your whole account, see how to delete your account. You can see your recent sign-ins and account changes yourself, in your profile’s security settings.
You may also withdraw your consent at any time (by deleting your account or emailing us), and nominate another person to exercise these rights for you if you die or become unable to. Withdrawing consent does not affect processing done before it, or records we must keep by law, such as payment records and account-security records for the periods given above.
If you are not satisfied with how we handle a complaint, you may complain to the Data Protection Board of India after contacting our Grievance Officer.
09
Grievance Officer
In accordance with the Digital Personal Data Protection Act, 2023, the following Grievance Officer has been designated to address any complaints or concerns regarding the processing of your personal data:
Suman Singh, Grievance Officer
Email: grievance@splitmitra.com
Phone: +91-9117606090
We will acknowledge grievances within 48 hours and resolve them within 30 days, as required under the DPDP Act.
10
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and, where required, the appropriate data protection authority (including the Indian Data Protection Board under the DPDP Act, 2023) within 72 hours of becoming aware of the breach. Notification to you will be sent to your registered email address and, where possible, via in-app notice.
11
Children
SplitMitra is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has created an account, email support@splitmitra.com and we will delete the account and its data.
12
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top and, where appropriate, notify you by email or in-app notice.
13
Contact Us
If you have any questions about this Privacy Policy, please contact us at support@splitmitra.com.