Privacy Policy

1. Overview & Scope

Sukhyatri ("we", "our", "us") provides a complete digital platform for bus transport operators, fleet managers, conductors, drivers, and passenger ticketing. Our services include real-time ticket issuance via Android POS devices, permit tracking, route management, expense accounting, and administrative analytics.

This Privacy Policy applies to all users accessing Sukhyatri services via our web application (sukhyatri.com), mobile applications, progressive web app (PWA), and dedicated POS handheld terminals.

2. Data We Collect

To provide efficient ticketing and fleet management, we collect data directly from transport operators, assigned staff, and automatically via application telemetry.

3. How We Use Data

We process collected data exclusively for valid business and legal purposes:

• Core Service Operation: Processing conductor ticket sales, managing passenger manifests, and calculating stop-to-stop fares.
• Offline Ticket Synchronization: Storing ticket transactions locally on mobile POS devices when cell coverage is unavailable and syncing seamlessly once connected.
• Fleet & Revenue Analytics: Providing fleet operators with real-time financial reporting, net profit calculations, fuel expense logs, and permit expiry reminders.
• Security & Anti-Fraud: Monitoring trip editing permissions, audit trail logging, and preventing unauthorized ticket modifications.
• Customer Support: Assisting conductors and operators with device configuration and transaction reconciliation.

4. Offline Mode & Local Data Storage

Sukhyatri is engineered with an offline-first architecture to operate reliably in remote regions with poor cellular connectivity.

5. Data Sharing & Third Parties

We respect your operational privacy. We do not sell, rent, or trade personal or operational fleet data to third-party advertisers or data brokers.

Data is shared only under the following limited circumstances:

• With Authorized Transport Operators: Staff trip data, ticket logs, and collection reports are accessible by the fleet owner/operator who manages the respective bus permit.
• Government & Regulatory Compliance: If mandated by statutory transport departments (RTO/State Transport Authorities) or valid court orders under Indian law.
• Infrastructure Service Providers: Trusted cloud hosting providers (e.g., Supabase, Vercel) operating under strict data protection agreements.

6. Data Security & Encryption

We implement multi-layered technical and organizational safeguards:

• Encryption in Transit: All data transmitted between POS devices, web browsers, and servers is encrypted using 256-bit TLS 1.3 (HTTPS).
• Authentication Security: Staff PINs are salted and hashed using cryptographic standards. Google OAuth 2.0 is enforced for Operator and Admin accounts.
• Role-Based Access Control (RBAC): Conductors can only access their assigned bus trips, while Operators view only their fleet.
• Daily Backups: Database snapshots are automatically backed up and stored in geo-redundant encrypted storage.

7. Data Retention & Account Deletion

We retain operational trip data, ticket records, and financial accounting logs for a period required by statutory tax and motor vehicle compliance laws (typically up to 7 years for financial records).

Account Deletion Request: Fleet owners or staff members may request account termination and personal data erasure by contacting privacy@sukhyatri.com. Upon verification, non-statutory personal identifiers will be purged within 30 days.

8. Your Rights Under DPDP Act 2023

Under Indian Data Protection law, users have the right to:

• Right to Access: Request a copy of personal data processed by Sukhyatri.
• Right to Correction & Updating: Request correction of inaccurate phone numbers, staff names, or fleet details.
• Right to Erasure: Request deletion of personal data subject to legal retention obligations.
• Grievance Redressal: Seek resolution for data protection concerns through our designated Grievance Officer.

9. Policy Updates

We may update this Privacy Policy periodically to reflect enhancements in technology, statutory regulations, or new platform features. Notice of material changes will be published within the app interface or sent via email to registered transport operators.

10. Contact Us & Grievance Redressal

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Team: