Privacy policy
Last updated: 12-10-2026
This policy explains how Just Travel India Software Private Limited handles personal data, in line with India's Digital Personal Data Protection Act, 2023.
Two kinds of data
- Agency account data – the name, mobile number and email of agency owners and staff, billing details and GSTIN. For this data we are the data fiduciary.
- Your customers' data – travellers, leads, suppliers and drivers that your agency enters. For this data your agency is the data fiduciary and Just Travel India acts as a data processor on your instructions (see our DPA).
What we collect and why
| Data | Purpose |
|---|---|
| Name, mobile, email of agency users | Login, security alerts, billing reminders |
| Agency name, address, GSTIN | Your tax invoices and account |
| Payment status from Razorpay | Activating and renewing your plan (we never see full card numbers) |
| Usage logs and device information | Security, fixing errors, improving the product |
| Demo and contact form details | Replying to you and scheduling demos |
How we protect data
- Data is stored in India-region cloud servers with encryption in transit (HTTPS) and at rest for sensitive fields such as traveller ID numbers, API keys and payment credentials.
- Each agency's data is isolated; staff permissions control who sees cost prices and bank details.
- When AI features are used, customer mobile numbers, emails and ID numbers are never sent to the AI provider.
Consent for WhatsApp marketing
Trip updates, payment reminders and documents for a booking are sent because they are needed to deliver the service. Offers and promotions are sent only with consent: a checkbox (unticked by default) on agency enquiry forms, a switch in the customer portal, or consent recorded by the agency. We store when and where consent was given. Anyone can withdraw it at any time by replying STOP or turning it off in the portal; withdrawing is as easy as giving consent.
Sharing
We share data only with service providers needed to run Just Travel India (cloud hosting, email delivery, WhatsApp providers, Razorpay), under contracts that protect it, or when required by law. We do not sell personal data.
Retention
- Agency data is kept while the account is active. After an account is paused it is kept for 90 days and the owner is notified before deletion.
- Agencies can choose to erase customers who never booked after 12–60 months. The agency is notified at least 14 days before any record is erased.
- When an owner closes an account, all agency data is deleted after a 30-day grace period, during which a full export can be downloaded.
- Tax invoices and billing records are kept as long as tax law requires (currently 8 years), even after an erasure request.
- Encrypted backups are stored in India-region cloud storage and kept for up to 2 years. Erased data disappears from backups as they expire; backups are only used to recover from a disaster.
Your rights
- Agency users: you can access, correct or export your agency's data in the app (Settings → Privacy & data), withdraw consent for marketing messages, or ask us to close your account.
- Travellers: your agency is responsible for your data. In the agency's customer portal you can download a copy of your data, turn WhatsApp offers on or off, and ask the agency to erase your data. You can also contact the agency directly; we help agencies respond within 30 days.
- You can nominate another person to exercise these rights on your behalf in case of death or incapacity by writing to the grievance officer.
Contact
Grievance officer: [email protected], Just Travel India Software Private Limited, Saket, New Delhi 110017. We respond within 30 days.