Skip to content
FirfireyFirfirey

Privacy Policy

What we collect, why, who we share it with, and how to reach us about your data.

Last updated

Draft pending legal review

This text is a working draft prepared for review by a qualified lawyer in Nepal. It will be updated before Firfirey opens payments to the public.

Who is responsible

Nepfex Innovations Pvt. Ltd. operates Firfirey and is responsible for the personal information described here. Contact: info@nepfex.com. We aim to handle personal information in line with the laws of Nepal, including the Individual Privacy Act, 2075 (2018).

What we collect

  • Account details: name, email address, and the role of your account.
  • Requests and bookings: the details you enter (dates, number of travellers, phone number, notes) and which partner they go to.
  • Identity documents: only where a partner must record them by law (for example hotel check-in). We collect the minimum the partner needs and explain why at the point of collection.
  • Payments: payment status and references from the payment provider. We do not store wallet PINs or card numbers.
  • Planner prompts: what you type into the AI trip planner.
  • Technical data: basic logs (IP address, browser, pages requested) used for security and rate limiting.

Why we use it

  • To pass your requests to partners and send you copies by email.
  • To run your account, show your trips and keep the platform secure.
  • To verify payments with the payment provider before marking anything as paid.
  • To improve the platform, using aggregated information where possible.

Who we share it with

  • Partners you send a request to receive what they need to answer it.
  • Service providers who host or process data for us: database hosting (Supabase), web hosting (Vercel), file storage and email (Amazon Web Services, Resend), payment providers (eSewa, Khalti, IME Pay), and the AI planner (Google Gemini API, which receives your planner prompt and the Firfirey listings used to answer it).
  • Authorities where the law requires it.

We do not sell personal information.

Cookies and local storage

We use essential cookies to keep you signed in. The site stores small preferences in your browser (theme, recent searches, a draft trip plan). We do not use advertising cookies.

How long we keep it

We keep request and booking records for as long as needed to provide the service and meet legal and accounting duties, then delete or anonymise them. [Retention periods to be confirmed with counsel.]

Your choices

You can ask to see, correct or delete your personal information, or object to a use of it, by emailing info@nepfex.com. We will reply within a reasonable time.

Security

We use access controls, encryption in transit and server-side verification of payments. No system is perfectly secure; tell us at once if you notice a problem.