Privacy Policy

1. Introduction

Welcome to Safar Sathi ("we", "us", or "our"). We operate the website thesafarsathi.com and related services that help you discover, compare, and book tour packages, hotels, vehicles, and travel-related services across India.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what choices you have. By using our website, mobile experience, AI travel assistant, or booking services, you agree to the practices described in this policy.

We are committed to handling your data responsibly and in line with applicable Indian laws, including the Information Technology Act, 2000 and applicable rules, and the Digital Personal Data Protection Act, 2023 (DPDP Act), where applicable to our processing activities.

2. Information We Collect

We may collect the following categories of information:

2.1 Information you provide directly

• Account details: name, email address, phone number, password (stored in encrypted form), and profile preferences.
• Booking details: travel dates, destinations, number of travelers, hotel preferences, vehicle requirements, special requests, and government ID details where required for travel or invoicing.
• Payment information: billing name, transaction references, and payment status. Full card or UPI credentials are processed by authorized payment gateways; we do not store complete payment card numbers on our servers.
• Communications: messages sent via contact forms, email, WhatsApp, phone support, and AI assistant conversations.
• Reviews and feedback: ratings, comments, and survey responses you choose to submit.

2.2 Information collected automatically

• Device and usage data: IP address, browser type, device identifiers, pages viewed, referral URLs, session duration, and interaction events.
• Location data: approximate location derived from IP address or, with your permission, more precise location for relevant travel suggestions.
• Cookies and similar technologies: see Section 8 below.

2.3 Information from third parties

• Payment gateways confirming successful or failed transactions.
• Hotels, transport operators, and tour partners confirming availability or service delivery.
• Authentication providers if you sign in using supported third-party methods.

3. How We Use Your Information

We use personal information for the following purposes:

• Processing and confirming bookings for packages, hotels, vehicles, and related services.
• Sending booking confirmations, invoices, itinerary updates, and customer support responses.
• Verifying identity, preventing fraud, and maintaining platform security.
• Operating and improving our AI travel assistant and personalized recommendations.
• Analyzing website performance, visitor trends, and service quality.
• Sending promotional offers, travel tips, and newsletters where you have given consent.
• Complying with legal, tax, and regulatory obligations.
• Resolving disputes, enforcing our Terms of Service, and protecting our legal rights.

We process your data only where we have a lawful basis, such as performance of a contract (fulfilling your booking), legitimate business interests (improving our services), compliance with law, or your consent where required.

4. AI Assistant & Personalization

Safar Sathi offers an AI-powered travel assistant that can answer questions, suggest packages, and help you plan trips. When you use this feature, we may process:

• Your chat messages and travel queries.
• Session identifiers and device information to maintain conversation context.
• Booking history and browsing activity to provide relevant suggestions.

AI responses are generated to assist your planning and do not replace official confirmations fromSafar Sathi or third-party suppliers. We may use anonymized or aggregated chat data to improve response quality and train our systems. You may contact us to request limitation of AI personalization linked to your account.

5. How We Share Your Information

We do not sell your personal data. We share information only when necessary:

• Service providers: hotels, resorts, vehicle operators, drivers, tour guides, and activity partners need guest names, contact details, and travel dates to deliver booked services.
• Payment processors: Razorpay and other authorized gateways to process payments securely.
• Technology partners: hosting, analytics, email delivery, customer support tools, and cloud storage providers bound by confidentiality obligations.
• Legal and safety: when required by law, court order, or government authority, or to protect the rights, property, or safety of Safar Sathi, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate safeguards for your data.

Third-party suppliers may have their own privacy practices. We encourage you to review their policies where applicable, especially for international travel components.

6. Payment Data

Payments on Safar Sathi are processed through PCI-DSS compliant payment partners. We receive confirmation of payment status, transaction IDs, and limited billing metadata needed for accounting and customer support.

We do not store your full debit/credit card number, CVV, or UPI PIN. Never share OTPs, passwords, or payment credentials with anyone claiming to represent Safar Sathi outside our official website and verified contact channels.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy:

• Booking records: typically up to 7 years for tax, accounting, and legal compliance.
• Account data: while your account is active and for a reasonable period after closure.
• Marketing data: until you unsubscribe or withdraw consent.
• Analytics logs: in aggregated or anonymized form where possible.

When data is no longer required, we securely delete or anonymize it in accordance with our retention schedule and applicable law.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in and remember your preferences.
• Maintain shopping and booking session state.
• Measure site traffic, page performance, and marketing effectiveness.
• Improve security and detect suspicious activity.

You can control cookies through your browser settings. Disabling essential cookies may affect booking functionality, login, and checkout. We may use analytics tools that collect anonymized usage statistics.

9. Data Security

We implement administrative, technical, and organizational measures designed to protect your personal information, including:

• HTTPS encryption for data transmitted between your browser and our servers.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Secure authentication and role-based permissions for admin systems.
• Regular monitoring and updates to our infrastructure and applications.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. Please use strong passwords and notify us immediately if you suspect unauthorized access to your account.

10. International Data Transfers

Our primary operations and data processing are based in India. Some technology service providers may process data on servers located outside India. When this occurs, we take reasonable steps to ensure appropriate contractual and security safeguards are in place consistent with applicable data protection requirements.

11. Children's Privacy

Safar Sathi is not directed at children under 18 years of age. We do not knowingly collect personal information from minors without verifiable parental or guardian consent. If you believe a child has provided us personal data, please contact us and we will take steps to delete such information.

Bookings for minors may be made by a parent or legal guardian who provides necessary traveler details for ticketing and accommodation purposes.

12. Your Rights & Choices

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of data where legally permitted.
• Withdraw consent for marketing communications at any time.
• Object to or restrict certain processing activities.
• Receive a copy of your data in a portable format where applicable.
• Lodge a grievance with us regarding our data handling practices.

To exercise these rights, email us at support@thesafarsathi.comwith the subject line "Privacy Request" and include your name, registered email or phone, and a description of your request. We may verify your identity before responding and will aim to reply within 30 days.

13. Marketing Communications

With your consent, we may send promotional emails, SMS, or WhatsApp messages about offers, new packages, and travel deals. You can opt out at any time by:

• Clicking the unsubscribe link in marketing emails.
• Replying STOP to promotional SMS where supported.
• Contacting us at support@thesafarsathi.com.

Even if you opt out of marketing, we will still send transactional messages related to your bookings, payments, and account security.

14. Third-Party Links

Our website may contain links to third-party websites, maps, payment pages, or partner portals. We are not responsible for the privacy practices or content of those external sites. We recommend reviewing their privacy policies before providing personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business practices. The "Last updated" date at the top of this page will indicate when revisions were made. Material changes may be communicated via email or a notice on our website.

Continued use of our services after updates constitutes acceptance of the revised policy.

16. Contact & Grievance

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact:

• Safar Sathi
• Address: D-34, Sector 49, Noida 201301, India
• Email: support@thesafarsathi.com
• Phone: +91 9217290871

We will acknowledge grievances promptly and work to resolve them in accordance with applicable Indian data protection regulations.