Privacy policy

Last updated 1 September 2026

Who this covers

This policy is about the data Musafy holds. Your travellers' data belongs to your agency — you decide what happens to it, and we only process it on your instructions.

What we collect from you

Your name, agency name, phone number and email when you sign up. Your billing details, held by our payment processor rather than by us. Basic records of how you use the panel, so we can support you and keep the service upright.

What we hold on your behalf

Your packages, your customers, your enquiries and your bookings. We do not sell it, mine it, market to your travellers, or move it into any other agency's account. Each agency's data is isolated at the database itself.

Who else touches it

Our hosting provider, our email delivery provider, our payment processor, and our error-monitoring service. Each one is under contract to process data only for us. We will name them in writing on request.

Where it lives

On servers in India. Backups are encrypted and kept for thirty days.

How long we keep it

While your account is open. After you close it, ninety days — long enough for you to change your mind — then deleted, except invoice records we are required to keep for eight financial years.

Your rights

Export everything you hold with us at any time, from the panel, without asking. Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. We answer within thirty days.

Grievance officer

Write to privacy@musafy.in, or to the Grievance Officer, Safar Technologies Private Limited, Hyderabad. Required under the Digital Personal Data Protection Act.

Template wording. A starting point drafted for Musafy, not legal advice. Have your own lawyer review it before you publish.