

Legal

Itenera Privacy Policy

Last updated: 30 October 2026

1. Who we are

Itenera (https://itenera.app) is an AI automation and WhatsApp messaging platform for businesses. It is operated by SponsoredTrip Private Limited, a company registered in India (CIN: U79110UP2025PTC222726), registered office at N4-601, 6th Floor, Eros Sampoornam, I. A. Surajpur, Gautam Budh Nagar, Noida, Uttar Pradesh 201306, India ("Itenera", "we", "us").

This Policy applies to itenera.app, the Itenera dashboard and the Itenera services. Our consumer travel app SponsoredTrip has its own policy at https://sponsoredtrip.app/SponsoredtripPrivacy.

Contact: itenera@sponsoredtrip.app

2. Our role: controller and processor

Controller: for data about our own clients and website visitors (for example account details, billing and demo requests), we decide how the data is used.

Processor: when a business ("Client") uses Itenera to talk to its own customers ("End Users"), the Client decides what is collected and why. We process that data only on the Client's instructions and to provide the service. End Users should read the Client's own privacy policy and contact the Client first about their data.

3. Information we collect as controller

Website, demo requests and newsletter: name, business name, email, phone number, message.

Client accounts: name, email, phone, business name, GST details, login data, team members.

Billing: invoices and payment status. Payments are processed by Razorpay; we do not store card, UPI PIN or bank login details.

Usage and device data: IP address, browser, pages visited, actions in the dashboard, error logs.

4. Information we process for Clients (as processor)

End User contact details: name, phone number, WhatsApp profile name, email if provided.

Message content: WhatsApp messages, media, call recordings and transcripts, quotations and follow-up notes that the Client and its End Users exchange through Itenera.

Lead and CRM data the Client uploads or creates.

5. WhatsApp and Meta Platform Data

Itenera connects to the WhatsApp Business Platform (Cloud API) provided by Meta Platforms, Inc. and WhatsApp LLC. When a Client connects its WhatsApp Business Account through Meta's Embedded Signup, we receive from Meta:

the Client's WhatsApp Business Account ID, phone number ID, business name and display name;

an access token that lets Itenera send and receive messages and manage message templates for that account;

incoming messages, message status updates and template status updates (webhooks).

We use Meta Platform Data only to provide the Itenera features the Client has turned on, in line with the Meta Platform Terms (https://developers.facebook.com/terms), the Meta Developer Policies and the WhatsApp Business Messaging Policy (https://whatsappbusiness.com/policy/). We do not sell Meta Platform Data, use it for advertising, or share it with data brokers. Access tokens are stored encrypted. A Client can disconnect WhatsApp at any time from the Itenera dashboard (Settings > WhatsApp > Disconnect), which stops all access; see https://itenera.app/data-deletion.

6. How we use information

to provide, run and support the Itenera services;

to send and receive WhatsApp messages, make AI calls, and run automations the Client sets up;

to bill Clients and keep accounting records;

to keep the service secure and prevent spam, fraud and misuse;

to improve Itenera using aggregated, de-identified usage data;

to comply with law.

Clients are responsible for getting End Users' opt-in before messaging or calling them, as the WhatsApp Business Messaging Policy requires. End Users can reply "STOP" to opt out of a Client's WhatsApp messages.

7. AI processing

Itenera uses AI models through paid business APIs to draft replies, summarise conversations, transcribe calls and run voice agents. Under the terms of these APIs, the providers do not use data sent through them to train their models. We do not use Client or End User data to train our own or third-party models.

8. Sharing and service providers

We share data only with service providers who work for us under contract and confidentiality, and only as needed:

Amazon Web Services (AWS): hosting and storage, Mumbai region, India;

MongoDB Atlas: database, hosted on AWS in the Mumbai region, India;

Google Workspace: email;

Meta Platforms, Inc. / WhatsApp: WhatsApp Business Platform messaging;

Sarvam AI (India): Indian-language voice and calling;

OpenAI (OpenAI API), Google (Gemini API) and Anthropic (Claude API): AI language models;

2Factor (India): login one-time passwords by SMS;

Razorpay Software Private Limited: payments.

We may also disclose data where Indian law requires it, to protect rights and safety, or to a successor in a merger or acquisition under this Policy. We do not sell personal data.

9. International transfers

Our main hosting is in India (AWS Mumbai). Some providers (Meta, Google, OpenAI and Anthropic) may process data in the United States. We use providers with contractual data protection commitments and send only the data needed for the task.

10. Data retention

Client account and billing data: while the account is active, and billing records for up to 8 years as Indian tax law requires.

Client message, call and lead data: while the Client's account is active, or until the Client deletes it. Deleted within 30 days after the account is closed.

Demo and enquiry data: up to 12 months after the last contact.

Security logs: up to 180 days.

Backups: overwritten within 60 days.

11. Security

HTTPS for all data in transit, encryption at rest for databases and access tokens, role-based access, audit logs and regular security reviews. If a personal data breach occurs, we notify affected Clients, and the Data Protection Board of India where required.

12. Your rights

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you can ask to access, correct or delete your personal data, withdraw consent, nominate a person to act for you, and raise a grievance. End Users of a Client should contact that Client first; we help the Client respond. Email itenera@sponsoredtrip.app. We respond within 30 days. Deletion steps: https://itenera.app/data-deletion

13. Cookies

We use essential cookies to keep you logged in and secure, and basic analytics cookies to understand website use. You can block non-essential cookies in your browser.

14. Children

Itenera is a business service for people aged 18 and over. We do not knowingly collect data from children.

15. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023:

Name: Pankaj Bhaskar

Designation: Grievance Officer

Email: itenera@sponsoredtrip.app

Address: N4-601, 6th Floor, Eros Sampoornam, I. A. Surajpur, Gautam Budh Nagar, Noida, Uttar Pradesh 201306, India

We acknowledge grievances within 48 hours and resolve them within 30 days.

16. Changes and contact

We may update this Policy. The latest version and date are always on this page, and we tell Clients about material changes by email.

SponsoredTrip Private Limited (Itenera)

CIN: U79110UP2025PTC222726

Address: N4-601, 6th Floor, Eros Sampoornam, I. A. Surajpur, Gautam Budh Nagar, Noida, Uttar Pradesh 201306, India

Email: itenera@sponsoredtrip.app

Website: https://itenera.app