Privacy policy
What we collect, why, and the control you have over it.
Last updated 18 October 2026In short
- We collect what’s needed to book and support your travel, and we never sell your data.
- Location is optional and used once to find your city. Only the city name is saved, in your browser.
- We don’t store card details. Payments go through Razorpay.
- You can access, correct or delete your data at any time.
Who we are
This policy explains how wagotravel (“wago”, “we”) collects, uses and protects your personal data when you use our website, apps and services. We process personal data in line with India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
What we collect
You give us
- Account: your mobile number, name and email.
- Bookings: traveller names, age, gender (needed for rooming and some tickets), ID details where a provider requires them, and emergency contacts.
- Enquiries: what you share in lead forms, chats and emails.
Collected automatically
- Device and usage: pages viewed, searches, browser and device type, used to improve the site and prevent fraud.
- Approximate location (optional): if you allow it, we use your device location once to find your nearest city, so we can suggest trips and prefill searches. Only the city name is saved in your browser. Your coordinates aren’t sent to or stored on our servers.
From partners
- Payment status from our payment partner (Razorpay). We never see or store full card numbers.
How we use it
- To create your account, make and manage bookings, and send tickets, invoices and trip updates.
- To provide customer support and on-trip safety, for example sharing your details with your captain.
- To process payments, refunds, wagoCash and offers.
- To personalise suggestions, such as trips from your city.
- To prevent fraud and abuse, and to meet legal and tax obligations.
- To send offers and newsletters, only with your consent. You can unsubscribe anytime.
How long we keep it
We keep your data while your account is active and as long as needed for the purposes above. Booking and invoice records are kept for the period required by tax and accounting laws, usually 8 years. When data is no longer needed, we delete or anonymise it.
Your rights
Under the DPDP Act you can:
- Access a summary of the personal data we hold about you.
- Correct or update inaccurate data. Most of it can be changed in your Profile.
- Erase your data, except where we must keep it by law.
- Withdraw consent for marketing at any time.
- Nominate someone to exercise your rights if you’re unable to.
- Raise a grievance with us, and then with the Data Protection Board of India.
To make a request, email help@wagotravel.in from your registered email, or WhatsApp us from your registered number. We respond within 30 days.
Security
We use HTTPS encryption, hashed session tokens, access controls with role-based permissions and audit logs for our team, and we work with PCI-DSS compliant payment partners. No system is perfectly secure, but we work hard to protect your data and will notify you and the authorities of any breach as the law requires.
Children
wago accounts are for adults (18+). Children can travel on bookings made by a parent or guardian, who provides their details and consents for them.
Grievance officer & contact
For any privacy question or complaint, contact our Grievance Officer:
Grievance Officer, wagotravel
New Delhi, India
Email: help@wagotravel.in
We acknowledge complaints within 48 hours and aim to resolve them within 30 days. We may update this policy, and the date at the top shows the latest version.