Privacy Policy

Last updated: April 2025

1. Who we are

YatraHQ ("we", "our", "us") provides a cloud-based CRM platform for travel businesses in India. Our registered address is India. For privacy queries, contact us at hello@yatrahq.com.

2. What data we collect

We collect the following data when you use YatraHQ:

  • Account data: Name, email address, phone number, and password (hashed).
  • Business data: Lead information, notes, call logs, and activity history that you enter into the platform.
  • Usage data: IP address, browser type, pages visited, and feature usage for improving the service.
  • Access request data: Name, company, phone, and email submitted via our request access form.

3. How we use your data

  • To provide and operate the YatraHQ platform
  • To send follow-up reminders and digest emails to agents
  • To contact you about your access request or account
  • To improve and secure the platform
  • To comply with legal obligations

We do not sell your data to third parties.

4. Data storage and security

Your data is stored on MongoDB Atlas servers (AWS infrastructure). We use industry-standard encryption in transit (TLS) and at rest. Passwords are hashed using bcrypt and never stored in plain text. API tokens are stored as SHA-256 hashes.

5. Third-party services

We use the following third-party services to operate YatraHQ:

  • Vercel — hosting and deployment
  • MongoDB Atlas — database
  • Resend — transactional emails
  • AiSensy — WhatsApp Business API messages
  • Twilio — call recording (if enabled)
  • Razorpay — payment processing (if enabled)

Each provider has its own privacy policy governing how they handle data.

6. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Withdraw consent for marketing communications at any time
  • Request a copy of your data in a portable format

To exercise these rights, email us at hello@yatrahq.com.

7. Cookies

We use session cookies for authentication (managed by NextAuth.js). We do not use third-party advertising or tracking cookies.

8. Changes to this policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email. Continued use of YatraHQ after changes constitutes acceptance.

9. Contact

For any privacy-related questions or requests: hello@yatrahq.com