Privacy policy

Who this covers

This policy is about the data Musafy holds. Your travellers' data belongs to your agency — you decide what happens to it, and we only process it on your instructions.

What we collect from you

Your name, agency name, phone number and email when you sign up. Your billing details, held by our payment processor rather than by us. Basic records of how you use the panel, so we can support you and keep the service upright.

What we hold on your behalf

Your packages, your customers, your enquiries and your bookings. We do not sell it, mine it, market to your travellers, or move it into any other agency's account. Each agency's data is isolated at the database itself.

Visits to your website

We count how many people look at your agency's website, and at which page, so your panel can show you. We set no cookie to do it. Each day a visitor is recognised by a fingerprint made from their internet address and their browser, mixed with a random value we throw away within about a day; the address and the browser are never written down, and a fingerprint cannot be turned back into them. Search engines and other programs are not counted. The daily counts are kept for 400 days.

Who else touches it

Our hosting provider, our email delivery provider, our payment processor, and our error-monitoring service. Each one is under contract to process data only for us. We will name them in writing on request.

Where it lives

On servers in India. Backups are encrypted and kept for 30 days.

How long we keep it

While your account is open. After you close it, 30 days — long enough for you to change your mind, and you can reopen a website yourself in that time — then it is deleted: every row and every file you uploaded. What we keep after that is the billing record: your invoices and what you paid, which we are required to hold for eight financial years.

Your rights

Export your data at any time, from the panel, without asking — your packages, visa services, customers, enquiries, leads, bookings, pages, blog posts, a list of your images and where they are, your team. What you cannot export is anything holding a password or a key, such as your email or payment settings; those we never put in a file.

Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. We answer within thirty days.

Grievance officer

Write to privacy@musafy.in, or to the Grievance Officer, Safar Technologies Private Limited, Hyderabad. Required under the Digital Personal Data Protection Act.

Template wording. A starting point drafted for Musafy, not legal advice. Have your own lawyer review it before you publish.