Privacy Policy

This policy applies when you visit BookMyYaan, create an account, sign in with Google or Facebook, search for or purchase travel, manage a booking, request support, or otherwise communicate with us.

• Account data such as your name, email address, mobile number and login identifiers.
• Social-login data: Facebook may provide your Facebook user ID, name and email address; Google may provide corresponding account information. We never receive your social-media password.
• Booking data such as routes, dates, hotel stays, passenger or guest details, contact details and identity information when a supplier requires it.
• Transaction data such as amount, currency, payment status, gateway references, refunds and invoices. Payment credentials are handled by the payment provider, not stored by BookMyYaan.
• Technical and security data including IP address, browser or device details, session records, authentication events, request identifiers and fraud-prevention logs.
• Preferences, consent records, support correspondence and feedback.

We use personal data to create and protect accounts; authenticate users; search, reserve and fulfil bookings; process payments and refunds; issue tickets and vouchers; send service messages; provide support; prevent fraud and misuse; maintain audit records; improve reliability; and comply with legal, accounting and regulatory obligations.

Marketing communications are sent only where you have made the relevant choice.

We share only necessary information with bus operators, hotels and inventory providers; payment gateways and banks; communication, hosting, security and analytics providers; professional advisers; and authorities where legally required. These recipients may apply their own privacy terms.

We do not sell personal data.

We use an essential HTTP-only session cookie to keep you signed in. We may use analytics to understand site usage and diagnose problems. Blocking the essential session cookie prevents account login.

Account data is generally retained while an account is active. Booking, invoice, payment, refund, security and fraud-prevention records may be kept for periods required by law or needed to resolve disputes. After the applicable period, data is deleted or anonymised.

We use access controls, encrypted transport, restricted server-side secrets, hashed credentials and session tokens, and security logging. Please contact us promptly if you suspect unauthorised activity.

Subject to applicable law, you may request access, correction or deletion; withdraw optional consent; object to certain processing; or disconnect social login. We may verify your identity before acting.

Read our user data deletion instructions.

Accounts must be created by people legally able to agree to the terms. Traveller details for minors must be supplied by an authorised adult solely for the booking.

We may update this policy when services or legal obligations change. The date above identifies the current version.

Privacy and data requests: support@bookmyyaan.com

General enquiries: info@bookmyyaan.com