Privacy Policy

1. Introduction

Welcome to Vizag Tourism ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

When you create an account or use our services, we may collect:

• Email address
• Name (first name and last name)
• Account credentials (encrypted password)
• User role and permissions
• Profile information you choose to provide

2.2 Automatically Collected Information

• IP address and device information
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Operating system information
• Cookies and similar tracking technologies

2.3 User-Generated Content

If you are an administrator, we collect information you provide when creating or managing:

• Attraction listings and descriptions
• Photo galleries and images
• Video content and links
• Itineraries and travel plans

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our website and services
• Create and manage user accounts
• Authenticate users and prevent unauthorized access
• Process and fulfill your requests for information
• Send administrative information, updates, and security alerts
• Improve and personalize user experience
• Analyze usage patterns and optimize our services
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms

4. Data Storage and Security

4.1 Infrastructure

We use Supabase, a secure and reliable database platform, to store your data. Supabase implements industry-standard security measures including:

• Encryption in transit (TLS/SSL)
• Encryption at rest
• Row Level Security (RLS) policies
• Regular security audits and updates
• Access controls and authentication protocols

4.2 Hosting

Our website is hosted on Vercel, which provides secure, scalable infrastructure with built-in DDoS protection and SSL certificates.

4.3 Security Measures

While we implement reasonable security measures to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

5. Third-Party Services

We use the following third-party services that may collect and process your data:

• Supabase: Authentication, database, and storage services.View Supabase Privacy Policy
• Vercel: Web hosting and deployment services.View Vercel Privacy Policy
• YouTube, Instagram, Facebook, Twitter, TikTok: We may embed videos from these platforms, which may use cookies and tracking technologies.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for authentication and core functionality
• Session Cookies: Maintain your logged-in state
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use certain features of our website.

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services (Supabase, Vercel) that help us operate our website
• Legal Requirements: When required by law, court order, or legal process
• Safety and Security: To protect the rights, property, or safety of our users or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

9. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided in the Contact section.

10. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

12. Links to Other Websites

Our website may contain links to third-party websites, including social media platforms and video sharing services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice on our website
• Sending you an email notification (for material changes)

Your continued use of our services after any changes indicates your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry within 30 days.

15. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Visakhapatnam, Andhra Pradesh, India.

16. Additional Information for EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your data based on consent, contract performance, legal obligations, and legitimate interests
• Data Protection Officer: You may contact our DPO at dpo@vizagtourism.com
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority
• Automated Decision-Making: We do not use automated decision-making or profiling