Legal

Privacy Notice

What MERIDIAN Atlas (desijapan.com) collects, why we collect it, and what you can ask us to do with it.

Last updated 17 August 2026

01Who is responsible

Rohit Chokhani, an individual (sole proprietor) based in India, trading online as MERIDIAN Atlas (desijapan.com), is the data controller for personal data described here — we decide what is collected and why. Contact us about privacy at hello@desijapan.com.

02What we collect and why
  • Contact details — your email address, given when you buy a plan or send an enquiry. Used to deliver your plan, send your private access link, and reply to you. Legal basis: performance of our contract with you.
  • Your trip brief and uploads — dates, cities, budget, dietary needs, and any itinerary document or text you paste. Used solely to generate and revise your itinerary. Legal basis: contract; where you volunteer dietary or health-related preferences, your explicit consent by choosing to submit them.
  • Assistant messages — questions you type into the free assistant, processed to answer them. Legal basis: legitimate interests in operating the service you requested.
  • Order records — order reference, plan purchased, amount, date and country of purchase, received from our reseller. We do not receive or store your full card number. Legal basis: contract and legal obligation (tax and accounting records).
  • Usage and technical data — pages viewed, aggregate visit counts, approximate location from IP, device and browser information, error logs. Used for security, abuse and fraud prevention, and to improve the site. Legal basis: legitimate interests.

Payment card data is collected and processed by Paddle, not by us; the coffee "near me" feature reads your browser location only when you press the button and sends it straight to a map link, never to our servers.

03Who we share it with
  • Merchant of Record — Paddle.com, for the sale of our product, payments, invoicing, tax compliance, refunds and buyer support.
  • Hosting and database providers — to run the site and store orders and plans.
  • AI model providers — your brief, uploaded itinerary text and assistant messages are sent to model providers to generate answers and plans. We do not send your name or payment details.
  • Professional advisers — accounting or legal advisers where necessary.
  • Authorities — where we are legally required to disclose.

We do not sell your personal data or share it for third-party advertising.

04International transfers

Our hosting, database and AI providers operate outside India, including in the United States and the European Economic Area, so your data may be processed abroad under those providers' contractual safeguards (such as standard contractual clauses).

05How long we keep it
  • Trip briefs, uploads and generated plans: retained so you can return to your private link, and deleted or anonymised on request, or within 24 months of purchase.
  • Order and tax records: retained as long as required by Indian tax law.
  • Enquiries: up to 24 months after the conversation ends.
  • Aggregate visit counts and logs: short-lived, and not linked to a person.
06Your rights

Subject to the law that applies to you, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, port it to another provider, or withdraw a consent you gave. Email hello@desijapan.com and we will respond within one month. If you are in the UK or EEA you may also complain to your data protection supervisory authority; in India you may raise a grievance with us first at the same address.

07Security

We use appropriate technical and organisational measures: encryption in transit, access controls on the database, row-level restrictions on stored orders and plans, private unguessable access links, and least- privilege server credentials. No system is perfectly secure, so please avoid sending us sensitive documents you do not need us to see.

08Cookies and local storage

We use only essential storage: your browser's local storage keeps your route-planner drafts, assistant usage count and access token on your own device, and our reseller sets cookies needed for checkout. We do not run advertising or cross-site tracking cookies. Clearing your browser storage removes local drafts and counters.

09Children

The site is not directed at children under 16, and we do not knowingly collect their personal data.

10Changes

We may update this notice; the date above changes when we do. Material changes affecting paid plans will be noted on this page.