Privacy Policy

Welcome to Yatriva ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy applies to all information collected through our website (https://yatriva.app) and any related services (collectively, the "Services").

1. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and services, when you participate in activities on the Services, or otherwise when you contact us.

• Account and Authentication Information: We use Google OAuth via NextAuth.js for authentication. When you sign in with Google, we collect your name, email address, and profile picture provided by Google. We do not receive or store your Google password.
• Booking and Reservation Information: When you book accommodations, activities, or transportation through Yatriva, we collect necessary information to process the reservation, including traveler names, contact details, and dates of travel.
• Travel and Planning Information: Any preferences, saved destinations, created trips, travel polls, and chats you engage in while using our trip planning tools are stored in our database.
• Uploaded Files and Images: If you upload avatars, travel documents, or property images (as an owner), these files are securely stored.

2. Payment Processing

All financial transactions are securely processed by our third-party payment provider, Razorpay. We do not store or process complete credit card numbers, CVV codes, or full banking credentials on our servers. When making a payment, your billing information is transmitted directly to Razorpay.

3. Third-Party Service Providers

To operate our platform and provide a seamless travel experience, we integrate with the following third-party services:

• Supabase: Provides our secure database and cloud storage infrastructure.
• Google Cloud: Provides authentication (OAuth).
• Razorpay: Handles secure payment processing.
• Resend: Manages our transactional email delivery (e.g., booking confirmations).
• Google Gemini AI: Powers our AI trip planner. We send travel-related queries and destination context to Gemini to generate itineraries. Your personally identifiable information (PII) is not used to train external AI models.
• RapidAPI (IRCTC / Indian Railways): Used to fetch live train status, schedules, and PNR details.
• Open-Meteo: Provides location-based weather forecasts.
• Nominatim (OpenStreetMap) & OSRM: Powers our mapping, geocoding, and routing services.
• WhatsApp: Cab booking requests are currently redirected to a WhatsApp operator via an API link. No financial or booking data is automatically transmitted without your explicit interaction.

4. Cookies and Session Technologies

We use cookies and similar tracking technologies (managed via NextAuth.js) to maintain your authenticated session, remember your preferences, and keep you logged in securely. You can control cookie preferences through your browser settings, but disabling them may affect your ability to use authenticated features of the site.

5. Data Storage and Security

Your data is stored securely in our Supabase PostgreSQL database and Supabase Storage buckets. We implement appropriate technical and organizational security measures designed to protect the security of any personal information we process, including Row Level Security (RLS) on our database tables and secure server-side API communication.

6. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

7. User Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, update, or request deletion of your data. To exercise these rights, please contact us using the information provided below.

8. Children's Privacy

Our Services do not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us.

9. Third-Party Links

Our Services may contain links to third-party websites or services (such as external property websites or transportation providers). We are not responsible for the privacy practices or the content of these third-party sites.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have questions or comments about this policy, you may email us at notifications@yatriva.app.