Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, mobile number, password
• Booking details: guest names, check-in/check-out dates, travel preferences
• Payment information: payment method type (we do not store full card numbers — these are handled by PCI-DSS compliant gateways)
• Communications: messages sent to our support team
• Reviews and ratings: content you submit about properties

1.2 Automatically Collected Information

• Device identifiers (device type, OS, browser, IP address)
• Usage data (pages visited, search queries, click events)
• Location data (only when you grant permission)
• Cookies and similar tracking technologies (see Section 6)

1.3 Information from Third Parties

• Social login data (name, email) when you sign in with Google or Facebook
• Payment confirmation data from our payment gateway partners (Cashfree, Stripe, Paytm)

2. How We Use Your Information

We use the collected information to:

• Process and confirm bookings, and send booking confirmation and vouchers
• Process payments and issue invoices and refunds
• Send transactional notifications via email, SMS, and WhatsApp
• Provide customer support and resolve disputes
• Personalise search results, recommendations, and pricing displays
• Detect and prevent fraud, abuse, and security incidents
• Improve our Platform through analytics and A/B testing
• Send promotional offers and newsletters (only with your consent; you may opt out at any time)
• Comply with legal and regulatory obligations

3. Sharing of Information

We do not sell your personal data. We may share your information in the following circumstances:

3.1 Service Providers

We share necessary data with third-party vendors who perform services on our behalf, including payment gateways, cloud hosting providers, SMS/WhatsApp providers, and analytics platforms. These vendors are contractually bound to protect your data.

3.2 Hotel / Transport Partners

To fulfil your booking, we share your name, contact details, and booking information with the relevant hotel, bus operator, or cab provider.

3.3 Legal Requirements

We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of ZygoTrip, our users, or the public.

4. Data Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS 1.3
• Passwords are hashed using bcrypt with a high work factor
• Payment data is processed through PCI-DSS Level 1 certified gateways
• Access to production systems is restricted to authorised personnel only
• Regular security audits and penetration testing are conducted

While we take all reasonable precautions, no method of transmission over the Internet is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

5. Your Rights

Subject to applicable Indian data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
• Portability: Request your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, please email privacy@zygotrip.com. We will respond within 30 days.

6. Cookies Policy

We use cookies and similar technologies to enhance your experience on the Platform. Cookies help us remember your preferences, keep you logged in, and understand how you use our Platform.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

7. Children's Privacy

ZygoTrip is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at privacy@zygotrip.com.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Booking records are retained for a minimum of 7 years for accounting and tax compliance purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Platform at least 14 days before the change takes effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related queries or to exercise your data rights, contact our Data Protection Officer: