Privacy Policy

Table of Contents

• 1. Information We Collect
• 2. How We Use Your Information
• 3. Information Sharing and Disclosure
• 4. Data Security
• 5. Data Retention
• 6. Cookies and Tracking Technologies
• 7. Third-Party Services
• 8. Your Rights and Choices
• 9. Children's Privacy
• 10. International Data Transfers
• 11. Changes to This Privacy Policy
• 12. Contact Us

1. Information We Collect

1.1 Information You Provide Directly

• PNR Numbers: When you check PNR status, we temporarily process your 10-digit PNR number to fetch reservation details
• Train Search Queries: Train numbers or names you search for to get train information
• Contact Information: Name, email address, and message when you contact us through our contact form
• Journey Details: Date calculations and booking reminders you set up

1.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, referral sources
• Location Data: General geographic location based on IP address
• Technical Data: Server logs, error reports, performance metrics

1.3 Local Storage Data

• Search History: Previous PNR checks and train searches stored locally in your browser
• User Preferences: Settings and preferences to enhance your experience
• Session Data: Temporary data to maintain your session across page visits

2. How We Use Your Information

2.1 Primary Purposes

• Service Provision: To provide PNR status checking, train search, and railway information services
• API Integration: To fetch real-time data from Indian Railway APIs and third-party services
• User Experience: To personalize and improve your experience on our platform
• Communication: To respond to your inquiries and provide customer support

2.2 Secondary Purposes

• Analytics: To analyze usage patterns and improve our services
• Security: To protect against fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations
• Business Operations: To maintain and improve our technical infrastructure

2.3 Legal Basis for Processing

We process your personal information based on:

• Consent: When you voluntarily provide information
• Legitimate Interest: To provide and improve our services
• Legal Obligation: To comply with applicable laws
• Contract Performance: To fulfill our service obligations

3. Information Sharing and Disclosure

3.1 We Do Not Sell Personal Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3.2 Limited Sharing Scenarios

• API Providers: PNR numbers are shared with authorized Indian Railway API providers to fetch status information
• Service Providers: Technical service providers who help maintain our website and services
• Legal Requirements: When required by law, court order, or government request
• Safety Protection: To protect the rights, property, or safety of our users or others

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the business transaction.

4. Data Security

4.1 Security Measures

• Encryption: Data transmission is protected using SSL/TLS encryption
• Secure Servers: Our servers are protected with industry-standard security measures
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Updates: Security patches and updates are applied regularly

4.2 Data Protection Practices

• PNR numbers are not stored permanently on our servers
• Search history is stored locally in your browser, not on our servers
• Regular security audits and vulnerability assessments
• Employee training on data protection and security practices

4.3 Incident Response

In case of a data breach, we will notify affected users and relevant authorities as required by law within 72 hours of discovery.

5. Data Retention

5.1 Retention Periods

• PNR Queries: Not stored permanently; processed in real-time only
• Contact Forms: Retained for 2 years for customer service purposes
• Server Logs: Retained for 90 days for security and technical purposes
• Analytics Data: Aggregated data retained for 26 months

5.2 Local Storage

• Search history stored locally can be cleared by users at any time
• Browser cookies expire based on their individual settings
• Users can clear all local data through browser settings

5.3 Data Deletion

We automatically delete or anonymize personal information when it's no longer needed for the purposes outlined in this policy.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality
• Performance Cookies: Help us understand how users interact with our site
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us improve our services through usage analysis

6.2 Local Storage

We use browser local storage to:

• Save your search history for quick access
• Remember your preferences and settings
• Improve your user experience across sessions

6.3 Managing Cookies

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

7. Third-Party Services

7.1 Railway APIs

• RapidAPI: For accessing Indian Railway data and PNR status
• Indian Railway APIs: Official and authorized third-party railway data providers
• These services have their own privacy policies and data practices

7.2 Analytics Services

• Google Analytics: For website usage analysis and improvements
• Performance Monitoring: For technical performance and error tracking

7.3 Advertising

We may display advertisements from third-party networks. These partners may use cookies and similar technologies to serve relevant ads.

8. Your Rights and Choices

8.1 Data Subject Rights

• Access: Request information about personal data we hold about you
• Rectification: Request correction of inaccurate personal information
• Erasure: Request deletion of your personal information
• Portability: Request transfer of your data in a structured format
• Objection: Object to processing of your personal information
• Restriction: Request limitation of processing activities

8.2 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section.

8.3 Local Data Management

• Clear search history through the website interface
• Manage cookies through browser settings
• Delete local storage data through browser developer tools

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

Parents and guardians who believe their child has provided personal information to us should contact us immediately.

10. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses approved by regulatory bodies
• Certification schemes and codes of conduct
• Other legally recognized transfer mechanisms

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will:

• Post the updated policy on this page
• Update the "Last Updated" date
• Notify users of material changes through email or website notice
• Provide a reasonable notice period before changes take effect

We encourage you to review this Privacy Policy periodically to stay informed about our data practices.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at: privacy@trainjankari.com

Regulatory Authorities

You have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

13. Additional Information

13.1 Compliance

This privacy policy is designed to comply with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• India's Personal Data Protection Bill
• Other applicable data protection laws

13.2 Definitions

• Personal Information: Any information that can identify you as an individual
• Processing: Any operation performed on personal data
• Data Controller: The entity that determines the purposes and means of processing
• Data Processor: The entity that processes data on behalf of the controller