Privacy Policy

Who this covers

This policy explains how BusGrid handles personal data. It covers two groups: the operators who use the platform, and the passengers who book through operator booking sites and counters.

Our role

For an operator's own account data, BusGrid is the data fiduciary. For passenger data created when someone books a trip, the operator is the data fiduciary and BusGrid processes that data on the operator's behalf.

What we collect

• •Operator account data: business name, staff names, work email, phone, and login records.
• •Passenger booking data: name, phone, email, seat, trip, and payment status, collected to issue and manage the ticket.
• •Device and telematics data: vehicle location and camera data where those features are used.
• •Usage data: logs, device, and browser information needed to run and secure the service.

How we use data

We use data to run reservations and booking sites, issue tickets, process payments, provide tracking and reporting, support you, prevent fraud, and meet legal duties. We do not sell personal data, and we do not use passenger data for our own marketing.

Who we share data with

We share data only with the service providers who help us run the platform, such as the payment gateway, the SMS and WhatsApp senders, and our hosting and telematics providers, and only as far as needed. We may disclose data where the law requires it.

Storage and retention

Data is stored on our hosted infrastructure in secured databases, with each operator's data isolated from every other operator. We keep data while your account is active and for as long as the law or a valid business need requires, then delete or anonymise it.

Security

We use access controls, encryption in transit, tenant isolation, and audit logging. No system is perfectly secure, so we also rely on operators to protect their own logins.

Your rights

Subject to law, you can ask to access, correct, or delete personal data, and operators can export the data they hold at any time. See the Data Policy for how export works. To make a request, contact [email protected].

Cookies

Our sites use only the cookies needed to sign in and keep the service working. We do not use advertising trackers.

India data protection

We aim to handle personal data in line with India's Digital Personal Data Protection Act, 2023 and other applicable law. Where an operator is the fiduciary, the operator is responsible for its own lawful basis and for the notices it gives passengers.

Changes and contact

We will post updates to this policy here. Privacy questions go to [email protected].