Privacy Policy

At Paatheya Solutions, we prioritise the confidentiality and safety of your travel agency data. This Privacy Policy outlines our guidelines for capturing, storing and encrypting customer records, consolidator credentials and API data.

1. Information we collect

We collect necessary B2B registration details to onboard travel operators, including:

• Business profile details (agency name, contact names, emails, mobile numbers, city).
• Verification data (GSTIN, travel licenses, reference operators).
• System integration tokens (API credentials and tokens for MakeMyTrip, Akbar Travels, Yatra or IRCTC).
• Operational client lists (traveller names, hotel vouchers and flight numbers synced for CRM automation).

2. How we use information

Collected details are used solely to deliver B2B travel operations enablement, specifically to:

• Onboard and verify your agency to unlock wholesale ground DMC pricing.
• Auto-generate invoice templates, digital receipt PDFs and voucher structures under your brand name.
• Trigger automated WhatsApp status updates and morning sightseeing schedules to your travellers.
• Analyse cost sheets and margin restructurings to optimise your niche package yields.

3. Data protection & security

We maintain strict security protocols to prevent unauthorised access, alteration or disclosure of data. Consolidator credentials and float-balance API tokens are encrypted in bank-grade lockers. Passenger files (e.g. passport copies) are encrypted and stored in private cloud buckets with strict employee access-control logs.

4. Sharing of information

Paatheya does not sell, trade or rent travel agency or client traveller lists. Data is shared with consolidators and local ground DMCs only as necessary to execute booking confirmations and voucher issues as requested by your staff.

5. Contact information

If you have questions regarding data encryption or how traveller records are secured, please write to us at Connect@paatheya.com or visit our Bangalore studio in Sector 6, HSR Layout.