Your plans, your data โ protected
BahirChalo is a free travel discovery and planning platform. We do not take payments and we do not store card or wallet information โ so the most sensitive financial data never touches our systems. What we do hold (your account, saved trips and planner prompts) is protected with strong encryption and a defence-in-depth architecture.
What data we hold
If you create an account, we store your email, preferences and any trips you save. The AI Trip Planner processes the prompts and travel preferences you submit. We do not collect CNIC, passport or payment details.
AI Trip Planner safety
Prompts and itineraries are processed through hardened AI pipelines. We strip personal identifiers from data used to improve our models and never sell prompts to third parties.
Outbound partner sites
When you click "Book on โฆ", you leave BahirChalo and continue on a third-party site that has its own security and privacy practices. Verify the URL is legitimate (e.g. the official airline or hotel domain) before entering any payment details.
Privacy by design
We collect only what we need to deliver the planning experience. For full details see our Privacy Policy.
Responsible disclosure
If you believe you have found a vulnerability, we want to hear from you. Please email hello@bahirchalo.com with the subject "Security Disclosure" and include:
- A clear description of the issue and affected URL.
- Steps to reproduce and any proof-of-concept.
- Your contact details so we can follow up.
Please do not exploit the issue, access other users' data, or run automated scans. We acknowledge valid reports within 72 hours and credit researchers in our hall of fame.
What you can do
- Use a strong, unique password and enable 2FA on your account.
- Never share OTPs or payment codes with anyone โ including people claiming to be from BahirChalo.
- Verify emails come from @bahirchalo.com before clicking links.
- Before paying on a partner site, double-check its URL and SSL padlock.