This Privacy Policy explains how PNR Decode ("we", "us", "our") collects, uses, shares and protects your personal information when you use our website and services. By using PNR Decode you agree to this policy.

1. Information We Collect

Account data: your name and email address when you create an account.
Payment information: billing details and card metadata (e.g. card brand and last four digits) processed for subscriptions. Full card numbers are handled by our payment processor and are not stored on our servers.
Usage data: itineraries you convert, layouts and branding you configure, API usage, log-in timestamps, IP address, browser and device information.
Communications: messages you send us via the contact form or by email.

2. How We Use Your Information

To provide, operate and maintain the service, including converting and rendering itineraries.
To authenticate you, secure your account and prevent fraud or abuse.
To process subscriptions, send transactional emails (verification codes, receipts) and provide support.
To improve our features, monitor performance and understand how the service is used.
To comply with legal obligations.

3. How We Share Information

We do not sell your personal data. We share it only with:

Service providers that help us operate (hosting, email delivery, payment processing, analytics), bound by confidentiality obligations.
Authorities where required by law, regulation or valid legal process.
Successors in the event of a merger, acquisition or asset sale, subject to this policy.

4. Data Retention

We keep your account and usage data for as long as your account is active. Billing and transaction records are retained for up to 7 years to meet accounting and legal requirements. If you delete your account, we remove or anonymise your personal data within 30 days, except where longer retention is legally required.

5. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data ("right to be forgotten").
Object to or restrict certain processing, and request data portability.

To exercise any of these rights, contact us at support@pnrdecode.com.

6. Security

We use industry-standard measures — encryption in transit, hashed passwords, optional two-factor authentication and access controls — to protect your data. No method of transmission or storage is 100% secure, but we work hard to safeguard your information.

7. Contact

For any privacy-related queries or requests, email support@pnrdecode.com.