Privacy Policy

This policy applies when you visit BookMyYaan, create an account, sign in with Google or Facebook, search for or purchase travel, manage a booking, request support, or otherwise communicate with us.

• Account data such as your name, email address, mobile number and login identifiers.
• Social-login data: Facebook may provide your Facebook user ID, name and email address; Google may provide corresponding account information. We never receive your social-media password.
• Booking data such as routes, dates, hotel stays, passenger or guest details, contact details and identity information when a supplier requires it.
• Transaction data such as amount, currency, payment status, gateway references, refunds and invoices. Payment credentials are handled by the payment provider, not stored by BookMyYaan.
• Technical and security data including IP address, browser or device details, session records, authentication events, request identifiers and fraud-prevention logs.
• Preferences, consent records, support correspondence and feedback.

We use personal data to create and protect accounts; authenticate users; search, reserve and fulfil bookings; process payments and refunds; issue tickets and vouchers; send service messages; provide support; prevent fraud and misuse; maintain audit records; improve reliability; and comply with legal, accounting and regulatory obligations.

Marketing communications are sent only where you have made the relevant choice.

We share only necessary information with bus operators, hotels and inventory providers; our payment aggregator and banks; communication, hosting, security and analytics providers; professional advisers; and authorities where legally required. These recipients may apply their own privacy terms.

Payments are processed by Razorpay, a payment aggregator authorised by the Reserve Bank of India. To take a payment or issue a refund we pass them the order amount, currency and booking reference, and the name, email address and mobile number on the booking. Your payment credentials go to Razorpay and never to us — card numbers, CVV, expiry, UPI PIN, net-banking passwords and one-time codes are collected in their own interface, within their PCI DSS scope. We receive the amount, the status and their reference for the transaction. Razorpay processes that data as its own controller under its privacy policy, and may retain it for the periods payment regulation requires.

Travellers' details are passed to the operator or property you booked with, because they cannot carry you or accommodate you otherwise.

We do not sell personal data.

We use an essential HTTP-only session cookie to keep you signed in. We may use analytics to understand site usage and diagnose problems. Blocking the essential session cookie prevents account login.

Account data is generally retained while an account is active. Booking, invoice, payment, refund, security and fraud-prevention records may be kept for periods required by law or needed to resolve disputes. After the applicable period, data is deleted or anonymised.

We use access controls, encrypted transport, restricted server-side secrets, hashed credentials and session tokens, and security logging. Please contact us promptly if you suspect unauthorised activity.

Subject to applicable law, you may request access, correction or deletion; withdraw optional consent; object to certain processing; or disconnect social login. We may verify your identity before acting.

Read our user data deletion instructions.

If you are unhappy with how a request was handled, or with our processing generally, write to support@bookmyyaan.com with “Privacy complaint” in the subject line. We will acknowledge it with a reference and aim to resolve it within 30 days of that acknowledgement.

Full contact routes, and what to include so a request can be answered first time, are on our contact page. Under the Digital Personal Data Protection Act 2023 you may also complain to the Data Protection Board of India if our answer does not satisfy you.

Accounts must be created by people legally able to agree to the terms. Traveller details for minors must be supplied by an authorised adult solely for the booking.

We may update this policy when services or legal obligations change. The date above identifies the current version.

Privacy and data requests: support@bookmyyaan.com

General enquiries: info@bookmyyaan.com