Privacy Policy

Digital Yatra Pvt. Ltd. ("we", "our", "us") operates the eYaatri platform — including the mobile application and the website at eyaatri.com. We are committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data.

This Privacy Policy explains what personal data we collect when you use our Platform, why we collect it, how it is used, and what rights you have in relation to it. By using eYaatri, you consent to the practices described in this Policy.

We collect information in the following categories:

Where required to complete a booking (such as identity verification for certain transportation or travel services), we may collect limited sensitive personal data, such as government-issued identification.

We use the data we collect to:

• Create and manage your eYaatri account
• Process bookings and send confirmations and booking details
• Handle payment transactions securely
• Provide customer support and respond to your enquiries
• Send important service notifications (booking updates, cancellations, date or availability changes)
• Improve our Platform, fix bugs, and develop new features
• Prevent fraud, abuse, and security incidents
• Comply with legal obligations under applicable Nepalese law
• Send promotional offers or app updates (only with your consent, and you may opt out at any time)

We do not use your data for automated decision-making or profiling that produces legal or significant effects on you.

We share your personal data only in the following limited circumstances:

• Booking & Travel Partners: We share your name, contact details, and booking information with the relevant operator to facilitate your booking. Their use of your data is governed by their own privacy practices.
• Payment Providers: Transaction data is shared with our payment gateway partners to process payments securely.
• Service Providers: We may engage trusted third-party vendors (e.g., SMS/email notification services, cloud infrastructure) who process data only on our instructions.
• Legal Requirements: We may disclose your data to government authorities, courts, or law enforcement if required to do so by applicable Nepalese law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, with adequate notice given to you.

eYaatri uses trusted third-party payment gateways to process all transactions. We do not store your full card number, CVV, or digital wallet credentials on our servers.

Payment data shared with us is limited to transaction identifiers, amount, and payment status required to confirm and manage your booking. All payment transmissions are encrypted using industry-standard TLS (Transport Layer Security) protocols.

By making a payment through the Platform, you also agree to the privacy policies of the respective payment service provider.

We retain your personal data for as long as your account is active, or as necessary to provide services to you. Specifically:

• Account data is retained for the duration of your account and for up to 2 years after account deletion, for legal and audit purposes.
• Booking and payment records are retained for a minimum of 5 years to comply with financial record-keeping obligations under Nepalese law.
• Device and usage logs are retained for up to 12 months.
• Support communications are retained for up to 3 years.

After the applicable retention period, your data is securely deleted or anonymised.

We take the security of your personal data seriously. Our measures include:

• Encryption of data in transit using TLS/HTTPS
• Secure password hashing using industry-standard algorithms
• Role-based access controls limiting internal data access to authorised personnel only
• Regular security reviews and monitoring of our systems

While we implement appropriate safeguards, no system is entirely immune to risk. In the event of a data breach that affects your rights, we will notify affected users and relevant authorities as required by applicable law.

You are also responsible for keeping your account credentials secure. Do not share your password with anyone.

As a user of eYaatri, you have the following rights with respect to your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update your account information directly in the app, or contact us to correct inaccuracies.
• Deletion: You can request deletion of your account and associated data, subject to our legal retention obligations.
• Opt-out of Marketing: You may unsubscribe from promotional communications at any time via app settings or by emailing us.
• Data Portability: You may request a copy of your data in a commonly used format.
• Withdraw Consent: Where we rely on your consent to process data (e.g., location access), you may withdraw it at any time through your device settings.

To exercise any of these rights, please contact us at info@yatra.digital. We will respond within 30 days.

eYaatri is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their personal information without parental consent, please contact us immediately and we will take steps to delete the data.

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your data, please reach out to us:

We may update this Privacy Policy periodically. The latest version will always be available at eyaatri.com/privacy-policy. Continued use of the Platform after any update constitutes your acceptance of the revised Policy.