What we collect, why we collect it, and the choices that remain yours.
When you enquire, we collect the details you share: your name, WhatsApp number, travel month, party size, interests and notes. When you message our WhatsApp business number, those messages are stored so your concierge can serve you without asking twice. When you pay, the payment is processed by a regulated payment provider — we never see or store your card details.
For one purpose: designing and managing your journey. We use your details to respond to your enquiry, craft your itinerary, coordinate the partners who serve you, and keep your Journey Hub current. We do not sell your information, and we do not share it beyond the partners delivering your journey.
Your information is stored with Supabase, our database provider, protected by row-level security and accessible only to XAATI staff. Journey Hub pages are private, unlisted links — share yours only with your travelling party.
The site sets no marketing cookies. We use Cloudflare Turnstile on the enquiry form to keep bots out; it may set a functional cookie for that purpose alone. Anonymous performance analytics, when enabled, contain no personal information.
Ask us at any time to see, correct or delete the information we hold about you — one message to your concierge on WhatsApp is enough. Deletion requests are honoured within 30 days, except records we must keep for tax or legal reasons.
XAATI · Valiyaparamba, North Malabar, Kerala, India · Last updated July 2026