Privacy Policy

Last updated: June 2025

Khojo ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we use it. We are compliant with India's Digital Personal Data Protection Act, 2023 (DPDPA).

1. Information We Collect

  • Waitlist signups: name, email address, city, travel style preference
  • Story submissions: name, email, city, story content, category
  • Usage data: pages visited, time on site, device type (via standard analytics)

We do not collect payment information, government IDs, or sensitive personal data at this stage.

2. How We Use Your Data

  • To notify you when Khojo launches (waitlist communications)
  • To review and publish community travel stories
  • To improve the platform based on usage patterns
  • To respond to your enquiries

We do not use your data for advertising, sell it to third parties, or share it with any organisation without your explicit consent.

3. Data Storage and Security

Your data is stored securely on Supabase servers (hosted on AWS in ap-south-1, Mumbai region). All data is encrypted in transit (TLS) and at rest. Access is restricted to the founding team and protected by multi-factor authentication.

4. Your Rights

Under the DPDPA 2023, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Withdraw consent for communications at any time

To exercise any of these rights, email us at teamkhojo@gmail.com. We will respond within 7 business days.

5. Cookies

We use minimal, essential cookies only — for session management and basic analytics. We do not use advertising or tracking cookies. You can disable cookies in your browser settings without affecting your ability to use the site.

6. Third-Party Services

  • Supabase — database and authentication (supabase.com/privacy)
  • Vercel — website hosting (vercel.com/legal/privacy-policy)
  • Google Fonts — typeface loading (policies.google.com/privacy)

7. Children's Privacy

Khojo is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

8. Changes to This Policy

We may update this policy as the platform evolves. We will notify waitlist members of material changes via email. The date at the top of this page reflects the most recent update.

9. Contact

For any privacy-related questions: teamkhojo@gmail.com
Khojo, India