Privacy Policy

1. Information we collect

We collect information you choose to provide through contact, enquiry, feedback, service-interest, account, and Founder Partner application forms.

• Contact and enquiry details, such as your name, mobile number, email address, message, destination, travel dates, pickup or service requirements, and the page or campaign connected with your enquiry.
• Account and authentication details, such as a mobile number, provider-issued user identifier, and session information when you use a login feature.
• Founder Partner application details, including business and contact information and any identity or business documents you voluntarily upload for verification.
• Technical and security information, such as request time, browser or device information, referring page, IP address or an IP-derived identifier, consent preferences, and identifiers used to prevent duplicate or abusive submissions.

2. Why we use this information

• To record and review your enquiry or application and follow up through the contact details you provide when appropriate.
• To operate login, form, business-listing, direct-contact, enquiry-routing, fraud-reporting, and other requested website features.
• To prevent spam, fraud, duplicate submissions, security incidents, and misuse of the website.
• To understand website performance, popular pages, content quality, traffic sources, technical issues, and user behavior through analytics.
• To improve destination guides, hotel and cab information, travel tools, search experience, page speed, and website usability.
• To maintain records, enforce our terms, and comply with applicable legal obligations.

3. Where information is stored and processed

Enquiry records are stored in Traviya's restricted-access Supabase systems. A limited operational copy may also be stored in Google Firebase/Firestore and, when the legacy integration is configured, Google Sheets. Founder Partner documents are stored in a private Supabase Storage bucket with related access-controlled records.

We also use hosting, content-delivery, security, authentication, rate-limiting, analytics, and email providers where needed to operate the website. These providers process information for us under their own security and contractual arrangements and may process it outside your state or country.

4. Cookies, local storage, and analytics

Essential browser storage is used for security, sessions, consent preferences, and core site functions. Site analytics, including Google Analytics or Google Tag Manager when configured, may run so we can measure performance, understand visitor behavior, find technical issues, and improve travel content. Advertising, AdSense, affiliate campaign measurement, and marketing pixels load only after marketing consent where required.

You can choose Accept, Required only, or Customize in the cookie panel. The saved consent preference is configured to last for up to 180 days. You can remove it sooner through your browser settings to make the panel appear again. Blocking essential storage may prevent some features from working correctly.

5. When we share information

We do not sell your personal information. Some listings show a provider's contact details so you can contact that provider yourself; Traviya does not transmit your form data in that direct-contact flow. Where you ask for a provider-specific service, quote, callback, hotel, cab, guide, package, business listing, or similar travel enquiry through Traviya, we may share only the relevant information reasonably needed with that vendor or listed provider so they can respond to your request. We do not share your enquiry details with vendors for unrelated services unless you ask us to do so or consent through your request.

Third-party booking or affiliate links take you to another provider. That provider controls its own booking, payment, and privacy practices, so please review its terms and privacy notice before submitting information there.

6. Retention

We keep enquiry and account records only for as long as reasonably needed for the stated purpose, security, dispute handling, or a legal requirement, and review them for deletion or anonymisation when they are no longer needed. Founder Partner documents are scheduled to expire after the configured retention period, normally 180 days; the system permits an operational range of 30 to 730 days. Consent preferences may remain in your browser for up to 180 days. Backups and security records may remain for a limited additional period before deletion or replacement.

7. Security

We use reasonable technical and organisational safeguards, including restricted server-side access, private document storage, validation, rate limits, and access controls. No internet or storage system is completely secure, so we cannot promise absolute security.

8. Your choices and requests

You may ask what personal information we hold about you, request a correction or deletion, withdraw consent for consent-based processing, or raise a privacy grievance. We may need enough information to verify your identity and locate the relevant record, and we may retain information where applicable law requires it.

Send privacy and grievance requests to contact@traviya.com. Please use the subject 'Privacy Request' and include the mobile number or email used in the relevant submission. We aim to respond as soon as reasonably practical and no later than 90 days, subject to identity verification and any shorter period required by applicable law.

9. Children's privacy

Traviya's forms and account features are not directed to children under 18. If you believe a child has submitted personal information without appropriate parent or guardian involvement, contact us so we can review and delete it where appropriate.

10. Changes to this policy

We may update this policy when our services, providers, or legal obligations change. The current version and its last-updated date will be published on this page.

11. Administrative and privacy contact

Website operator and data fiduciary: Traviya, an independently operated India-based online platform. Privacy and Grievance Contact: Website Administrator, Traviya. The designated electronic correspondence address for privacy requests, grievances, legal notices, image-rights concerns, listing corrections, and business enquiries is contact@traviya.com. This mailbox is not a customer-support, booking-assistance, emergency, or during-trip assistance service. Messages are reviewed when operationally possible, and no response time is promised except where applicable law requires one.