Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how Chief Experience Officer (CExO) collects, uses, stores and protects personal information through chiefexperienceofficer.in, its Explorer and Provider portals, experience submissions, enquiries, support channels and booking features when available.

Who we are

Chief Experience Officer (CExO) is the brand operating this website and its experience-discovery ecosystem. Until the business is incorporated, references to “CExO”, “we”, “us” or “our” mean the CExO brand and website team. The full legal company name, CIN, registered office address and formal grievance-contact details will be added after incorporation.

Information we collect

Website visitors: We may receive technical information such as IP address, browser and device type, approximate location, referring page, pages viewed, interactions, dates and times of access, cookie identifiers and security logs. This information supports analytics, performance, fraud prevention and website security.

Explorers: When you register or use an Explorer account, we may collect your name, email address, phone number, country and city. Gender and date of birth are optional. We also store the experience preferences, wishlist, experience goals, calendar activity and Experience Portfolio information you choose to add, including completion dates or approximate dates, places, captions, photographs and Instagram or YouTube links.

Providers: When you apply or operate a Provider account, we may collect the applicant’s or business’s name, contact details, country, city, business and location information, application and approval records, experience descriptions, pricing, availability, capacity, inclusions, exclusions, photographs and booking-related information. We also retain communications concerning reviews, corrections, support, cancellations, refunds and settlements.

Bookings and payments: When booking and payment functions are enabled, we may process booking references, selected experiences, dates, participant details, amounts, taxes, payment status, cancellations, refunds and settlement records. Full card, UPI or bank credentials are handled by the payment gateway displayed at checkout and are not intended to be stored by CExO.

Communications: We retain information you send through forms, email, WhatsApp or support channels where necessary to respond to your request, operate your account, resolve a dispute or maintain an appropriate service record.

How we use information

  • To create, verify, secure and administer Explorer and Provider accounts.
  • To personalise experience recommendations and operate wishlists, calendars and Experience Portfolios.
  • To review, approve and display Provider experiences and Explorer-contributed information.
  • To manage enquiries, bookings, payments, cancellations, refunds, check-ins and settlements when those services are available.
  • To send account, security, service and support communications and any optional notifications you request.
  • To understand website usage, improve performance, develop features and prevent misuse or fraud.
  • To comply with applicable legal obligations and establish, exercise or defend legal claims.

Cookies and analytics

The website uses essential cookies for functions such as login, account security, session continuity and saved preferences. If you select “Remember Me”, the login may remain active for a longer period. Logging out removes the active login cookies from that browser.

We use Google Analytics and may use similar measurement tools to understand visits, approximate geographic distribution, traffic sources, device types and interactions with the website. These services may set or read cookies and process technical information under their own privacy terms. Browser settings can restrict cookies, although doing so may affect login and other account functions.

Photographs, uploads and public information

Explorer portfolio photographs, Founding Explorer profiles, social links and Provider listing content may be displayed publicly only where the relevant feature, submission and approval status make them public. Information kept within a private dashboard is not intended to be publicly displayed.

Photographs can contain embedded metadata, including the device and precise GPS location where a photograph was taken. You should remove sensitive metadata before uploading. Where a direct Instagram, YouTube or other external link is supplied, visitors who open that link will be subject to the external service’s privacy practices.

Embedded content and external websites

Pages may contain maps, videos, social-media posts, images, booking links or other content from external websites. Those services may collect technical information, use cookies or track interaction with their content, particularly if you are logged into the external service. CExO does not control the privacy practices of external websites.

Who we share information with

We share personal information only where reasonably necessary for the service or permitted by law. Recipients may include Hostinger and other hosting or infrastructure providers; analytics, email-delivery, security, anti-spam and support services; the payment gateway when payments are enabled; and an Explorer or Provider where information is necessary to complete an enquiry, booking, cancellation, refund or settlement.

We may also disclose information when required by law, a court, regulator or lawful authority; to protect users, CExO or the public; or as part of a genuine restructuring or transfer of the business, subject to appropriate safeguards. CExO does not sell personal information.

Where account data is stored

CExO’s primary website, account database and uploaded account information are hosted on Hostinger infrastructure whose active website endpoints are currently located in Mumbai, India. Some service providers may process or retain limited information in other locations, subject to their respective privacy and security arrangements.

Security

We use reasonable administrative and technical measures to protect account information, including controlled administrative access, account authentication, security monitoring, backups and software updates. No internet service can guarantee absolute security. Users are responsible for protecting their passwords and for notifying CExO promptly if they suspect unauthorised account activity.

Account closure and retention

While an account is active, we retain the information needed to provide its features. When an Explorer or Provider account is closed, CExO may retain associated account information for up to six months to complete deletion, respond to disputes, maintain security and meet applicable legal obligations.

After that period, the information will be deleted or anonymised unless a longer period is required for transaction records, taxation, fraud prevention, legal claims or another lawful purpose. Backup copies may remain for a limited additional period as part of routine disaster-recovery processes and will not be restored for ordinary use.

Your choices and privacy rights

You may ask to access, correct, complete or update your personal information; withdraw consent where consent is the basis of processing; close your account; or request deletion of information that CExO is not required or permitted to retain. Withdrawal or deletion may prevent us from continuing account features that depend on that information and does not affect processing already lawfully completed.

To make a privacy request, email reachus@chiefexperienceofficer.in. We may need to verify that the request relates to your account before acting on it.

Minimum age

Explorer and Provider accounts are available only to individuals who are at least 18 years old. By creating or operating an account, you confirm that you meet this minimum-age requirement.

Changes to this policy

We may update this Privacy Policy when CExO’s services, providers, legal identity or applicable requirements change. The date at the top of the page will show the latest revision. Material changes affecting registered users may also be communicated through the website, account dashboard or registered email address.