Privacy Policy

1. Overview

QuoteMyTrip.in ("we," "our," or "us") is a travel quotation marketplace that connects Indian travelers with verified travel agencies. When you use our platform, we collect certain personal information to provide our services effectively.

We believe your personal data belongs to you. We collect only what we need, use it only for the purposes we explain, and do not sell it to third parties under any circumstances.

Our practices comply with the Information Technology Act 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, and the Digital Personal Data Protection Act 2023 (DPDP Act). If you have concerns about your data, please contact us at sales@xigmapro.com.

2. Information We Collect

We collect information in three ways: information you provide to us, information generated by your use of our platform, and information from third parties.

Information You Provide

• Name and email address — collected during registration
• Phone number — required for account verification and agency contact
• Trip details — destination, travel dates, budget, number of travelers, preferences
• Payment information — for agency subscription payments; card details are processed by our payment processor and not stored on our servers
• Agency credentials — GST number, trade license, business address (agencies only)
• Reviews and feedback — ratings and written reviews you submit

Usage Data

• IP address, browser type, operating system, device type
• Pages viewed, time spent on pages, clicks and interactions
• Search queries within the platform
• Referral URL and exit pages

Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to recognize you, remember your preferences, and improve your experience. See Section 5 for full details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery — creating and managing your account, processing trip submissions, and enabling quote delivery
• Quote matching — sharing your trip details with relevant verified agencies so they can send you personalized quotes
• Communications — sending you quote notifications, booking updates, promotional emails (with your consent), and important service messages
• Payment processing — processing agency subscription payments and issuing invoices
• Analytics — understanding how users interact with the platform to improve features and performance
• Fraud prevention and safety — detecting and preventing fraudulent activity, spam, and abuse
• Legal compliance — complying with applicable laws, court orders, and regulatory requirements

4. Information Sharing

We do not sell your personal data. We share your information only in the following limited circumstances:

With Travel Agencies

When you submit a trip requirement, verified agencies with active subscriptions can view your trip details (destination, dates, budget, group size, preferences) to prepare a quote. Your direct contact information — phone number and email — is not shared with agencies until you explicitly initiate contact by accepting or responding to a quote.

With Payment Processors

We use third-party payment processors (such as Razorpay) to handle agency subscription payments. These processors receive your payment details directly and are independently PCI-DSS compliant. Their use of your information is governed by their own privacy policies.

With Law Enforcement

We may disclose your information to government authorities, courts, or law enforcement agencies if required by applicable Indian law or a valid legal order.

With Service Providers

We work with trusted third-party vendors (email delivery, cloud hosting, analytics) who process data on our behalf under strict data processing agreements. These vendors are prohibited from using your data for any purpose other than providing services to us.

5. Cookies & Tracking

We use the following categories of cookies:

• Essential cookies — required for core functionality such as login sessions and security. These cannot be disabled.
• Analytics cookies — help us understand how users navigate the platform (e.g., Google Analytics). These collect anonymous, aggregated data.
• Marketing cookies — used to show relevant advertisements and track campaign effectiveness. These are only set with your consent.

How to opt out: You can manage cookie preferences in your browser settings. Disabling analytics or marketing cookies will not affect core platform functionality. You can also opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

6. Data Security

We take the security of your personal data seriously and implement industry-standard technical and organizational measures including:

• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls — employees access only data necessary for their role
• Regular security audits and penetration testing
• Multi-factor authentication for administrative access

Breach Notification: In the event of a data breach that is likely to result in a risk to your rights, we will notify affected users within 72 hours of becoming aware of the breach, as required under applicable law. We will also notify the relevant authorities as mandated by the DPDP Act 2023.

7. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy or as required by law. Our retention schedule:

8. Your Rights

Under the DPDP Act 2023 and general principles of data protection, you have the following rights regarding your personal data:

• Right to Access — request a copy of the personal data we hold about you
• Right to Correction — request correction of inaccurate or incomplete data
• Right to Deletion — request deletion of your personal data (subject to legal retention obligations)
• Right to Data Portability — receive your data in a machine-readable format
• Right to Opt-Out of Marketing — unsubscribe from marketing emails at any time via the link in any email or by emailing sales@xigmapro.com
• Right to Withdraw Consent — where processing is based on consent, you may withdraw at any time without affecting prior processing

To exercise any of these rights, email us at sales@xigmapro.com. We will respond within 30 days.

9. Children's Privacy

QuoteMyTrip.in is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at sales@xigmapro.com.

Upon confirmation, we will delete the minor's information from our systems within 7 business days.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users via email
• Show a prominent banner on the Platform for 30 days

Your continued use of the Platform after the effective date of the revised policy constitutes your acceptance of the changes.

11. Contact Us

For any privacy-related questions, requests, or complaints, please contact our Data Protection Officer: