Privacy Policy

1. Information We Collect

a) Information you provide directly

• Name, mobile number, email address
• Journey details (origin, destination, travel dates, preferred modes)
• PNR numbers, booking references, or ticket details you choose to share
• Payment information (processed via our payment partner; we do not store card/UPI credentials)
• Feedback, support queries, and communications with us

b) Information collected automatically

• Device information (device ID, OS, browser type, app version)
• Location data (with your permission), used for door-to-door ETA and nearby-station features
• Usage data (features used, search queries, session duration, click patterns)
• Log data (IP address, timestamps, crash reports)

c) Information from third parties

• Publicly available or licensed schedule, fare, and status data from railway, flight, and bus data providers
• Data from B2B2C partners (e.g., booking platforms) where you access Yatrix through their interface, limited to what's needed to power our journey intelligence features
• We do not access or store your IRCTC login credentials, and do not use any unofficial or unauthorized access to third-party booking systems

2. How We Use Your Information

• Provide journey predictions, Safe Connection Scores, delay risk, and reverse (arrival-time-based) search
• Calculate true door-to-door ETAs across modes
• Send journey alerts, disruption notifications, and rebooking suggestions
• Improve our AI/ML prediction models (using aggregated or de-identified data where possible)
• Process payments for premium features
• Provide customer support
• Detect fraud, abuse, or security threats
• Comply with legal obligations

3. Legal Basis for Processing

Under the DPDP Act, we process your personal data based on:

• Consent — for most features, collected at signup or point of use
• Legitimate use — e.g., responding to a support request you initiate

You may withdraw consent at any time via app settings or by contacting us, though this may limit certain features.

4. How We Share Your Information

We do not sell your personal data. We may share data with:

• Service providers: payment processors, cloud hosting, analytics, and SMS/notification providers, bound by confidentiality obligations
• B2B2C partners: only journey-relevant data needed to deliver features you access through their platform
• Legal authorities: when required by law, court order, or to protect rights, safety, or prevent fraud
• Business transfers: in case of a merger, acquisition, or asset sale, with notice to you

5. Data Retention

We retain personal data only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Your data is removed once you raise a data deletion request at yatrix.in/deletemydata, subject to legal retention requirements.

6. Your Rights

Under the DPDP Act, you have the right to:

• Access a summary of personal data we hold about you
• Correct or update inaccurate/incomplete data
• Withdraw consent
• Request erasure of your data (subject to legal exceptions)
• Nominate another individual to exercise your rights in case of death or incapacity
• Register grievances (see Section 10)

To exercise these rights, contact us at akashydv@yatrix.in.

7. Data Security

We implement reasonable security practices under the IT Act, 2000 and applicable rules, including encryption in transit, access controls, and regular security reviews. However, no system is 100% secure, and we cannot guarantee absolute security.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to remember preferences, analyze usage, and improve the Platform. You can manage cookie preferences through your browser or device settings.

9. Children's Privacy

Yatrix is not intended for individuals under 18. We do not knowingly collect personal data from children. If we learn we have collected such data, we will delete it promptly.

10. Grievance Officer

In accordance with the IT Act, 2000 and DPDP Act, we have appointed a Grievance Officer:

Grievances will be acknowledged and resolved within the timelines prescribed by law.

11. Data Protection Board

If you're unsatisfied with our response, you may approach the Data Protection Board of India as constituted under the DPDP Act.

12. International Data Transfers

If data is transferred outside India (e.g., cloud infrastructure), we ensure adequate safeguards are in place consistent with DPDP Act requirements.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via the app, email, or website. Continued use after changes constitutes acceptance.

14. Contact Us