HappyFares Privacy Policy
Effective date: 29 October 2026
Updated 30 October 2026
On this page
- 1. Who we are
- 2. What this policy covers
- 3. What we collect and why
- 4. Payments
- 5. Passport reader, PAN and voice
- 6. Who we share your data with
- 7. Messages, calls and marketing
- 8. Meera, Radha and other AI features
- 9. Data kept on your own device
- 10. Security, fraud prevention and the booking origin record
- 11. How long we keep data
- 12. Your rights
- 13. Children
- 14. Data sent outside India
- 15. Grievance Officer and contact
- 16. If something goes wrong with your data
- 17. Changes to this policy
- 18. Law and courts
In short
HappyFares is run by Travelogy Online Private Limited, an Indian company. We sell travel bookings: flights today, and other travel services as we add them.
We collect what we need to book and look after your trip: names, contact details, travel documents where the airline or the law needs them, and what you choose to buy. We never see your full card number, CVV, UPI PIN or bank password.
We use AI to answer chats, calls and voice searches. We always tell you when you are talking to an AI, and a person is always available. Meera and Radha are in beta and can make mistakes.
We do not sell your data. We share it with the airline and other travel suppliers, the companies that help us run bookings, payments, messages, calls and our website, and the authorities only when the law requires it.
We use your email and phone number, turned into a code (a hash), to measure our adverts and to show our offers on the platforms where we advertise. A hash is still your personal data, because the platform can use it to find your account. You can stop this at any time.
To prevent fraud, we keep a confidential record of where each booking was made from (internet address, network, city and device) for three years.
You can ask to see, correct or delete your data, or take back your consent, at any time: write to help@happyfares.in. We acknowledge within 48 hours and answer within 30 days.
1. Who we are
HappyFares is the travel booking brand of Travelogy Online Private Limited, a company registered in India (CIN U79120AS2024PTC026117), with its registered office at A4, Level 1, Krine Vista, Anand Nagar, Lane 3, GS Road, Guwahati, Assam 781005.
In this policy "HappyFares", "we" and "us" mean Travelogy Online Private Limited. "You" means anyone who uses HappyFares, and every traveller on a booking. We decide how your personal data is used for the purposes below.
2. What this policy covers
This policy covers personal data we handle when you use www.happyfares.in on a computer or phone, the HappyFares app, HappyFares inside ChatGPT, our WhatsApp numbers, our phone lines (including calls answered or made by our AI assistant), our emails and SMS. It does not cover an airline's or any other company's own website or app, even when we link to it.
3. What we collect and why
We ask only for what we need. We do not ask for your religion, caste or similar sensitive details. If you choose to tell us about a medical need or a disability, or to send a medical document, so that the airline can help you or we can assess a medical cancellation or refund, that is optional. We ask for your agreement, with a box you tick yourself, before you send it. You see that box when you ask for a wheelchair or other special assistance (on the booking page or our additional services page), for a stretcher, oxygen or a medical escort, or for a medical cancellation, and before you upload a medical document. We use it only for that request, and share what is necessary with the airline and the services that handle that request. Please leave out anything that is not needed. Without it we may be unable to support that request, but your ordinary fare rights stay the same. You can take back your agreement by writing to help@happyfares.in; that does not undo what was already done. We never use it for advertising.
| What | Where it comes from | Why we use it | Do you have to agree? | How long we keep it |
|---|---|---|---|---|
| Name, title, mobile number and email of the person booking | You | To make the booking, send your ticket and updates, and help you. Turned into a code (a hash), the email and mobile number also help us measure our adverts and show our offers (sections 6 and 7) | No, to make the booking. For adverts, you can stop it any time (section 7) | 8 years, with the booking record |
| Each traveller's name, title, gender, date of birth or age, nationality | You | To issue and manage each ticket, as the airline requires | No, needed for the ticket | 8 years, with the booking record |
| Passport number, expiry and issuing country (international trips) | You type it, or our passport reader fills it in (section 5) | The airline needs it to issue an international ticket and for border checks | No, needed for the trip | 1 year after the last flight on the booking, unless needed for a dispute or a legal duty |
| PAN (some international fares) | You | Needed for the payment to the overseas ticket supplier on those fares (section 5) | No, needed on those fares | 8 years, with the booking record |
| ID details for special fares, such as an armed forces service ID, a student ID or proof of age | You | The airline asks for it to give you that fare | No, needed for that fare | 1 year after the last flight on the booking |
| Frequent flyer number (optional) | You | To pass it to the airline with your booking | No, you choose whether to add it | With the booking record |
| GST name and GSTIN (optional) | You | To put your business on the invoice | No, you choose whether to add it | 8 years, with the invoice |
| Seats, meals, baggage and other services you choose | You | To book them with the airline or provide them | No, needed for what you chose | 8 years, with the booking record |
| Visa application details and documents, if you buy our e-visa service: passport details and scan, photo, travel plans and what the destination country's form asks for | You | To prepare, submit and follow up your e-visa application | Yes, without them we cannot apply | 1 year after the decision (section 11) |
| Name and WhatsApp number or email of a person you add to flight alerts | You | To send them this trip's alerts | No, you choose whether to add them. Add only someone who has agreed to receive them. They can reply STOP at any time | Until the trip ends |
| Payment confirmation and masked payment details: payment method, card network and type, issuing bank, last 4 digits of the card, masked UPI ID, bank reference numbers. We do not keep the name on the card | Our payment partners (never your full card number, CVV, UPI PIN or bank password) | To confirm your payment, send refunds, settle disputes and prevent fraud | No, needed for payment and the law | 8 years with the booking record; the fraud record 3 years (section 10) |
| Where the booking was made from: internet (IP) address, network owner and type, city, region, postcode, country and time zone worked out from the IP address, device and browser, language | Collected automatically when you hold a booking, start a payment and reach the confirmation page | To prevent and investigate fraud, and to answer lawful requests from the authorities | No, to prevent fraud and meet the law | 3 years, confidential (section 10) |
| How you use our website and app: searches, pages, clicks, filters you choose, the steps of your booking, errors you meet, recordings of your visit with what you type masked. We do not record the steps where you enter traveller, passport, PAN, payment or health details | Collected automatically | To keep the website working, fix problems and make booking easier | Needed to run the site. You can switch recording off with the "Do not record my visits" link in the footer. For analytics and recording, see our Cookie and Tracking Notice for how to limit them | See section 11 |
| Advertising click identifiers (the code in the address when you arrive from an advert or a travel comparison site) | Collected automatically | To know which advert or site led to a booking, and pay that site its due | No, but you can limit it (section 7 and the Cookie and Tracking Notice) | 13 months |
| A copy of what was shown and accepted for the booking: the fare rules, price breakdown, terms and the time you accepted them, and the steps of the booking as you made it | Collected automatically | To prove what you were shown and agreed to, and fix problems | No, to keep a fair record of the booking | Fare rules, price, terms and acceptance time: with the booking record. Step-by-step record: 120 days (section 11) |
| Your messages with us, Meera and Radha | You, on the website, the app, WhatsApp, ChatGPT, email or SMS | To answer you, help with your booking, and check the quality of our answers | No, if you use the assistants | 3 years |
| Calls with us or Meera: the recording, the written transcript, the number you called from, and what you confirmed | You, on our phone lines or a call we make | To help you, record what you asked us to do, check quality, settle disputes and prevent fraud | Calls we make because you asked: yes, only if you tick the box, and the tick lasts 7 days. Calls to us: you are told the call is recorded | Recordings 120 days; transcripts 1 year; what you confirmed (the recorded yes), 8 years with the booking record |
| Your voice when you use voice search or talk to Meera online, and voice messages you send on WhatsApp | You | To turn your voice into text so we can understand you | No, you choose to use voice | The recording is not kept by us; the text is kept like a chat message |
| Price alerts: the route, your email and, if you add it, your WhatsApp number | You | To tell you when that fare moves | No, you ask for it | Until the alert fires or you cancel it |
| Feedback and reviews | You | To improve HappyFares and, if you agree, to show your review | No, you choose to send it | Until you ask us to remove it |
| Details you type into the booking page before you pay (contact, trip, fare seen) | You | To remind you about this trip by email or WhatsApp if the booking is not finished (section 7) | No. You can stop the reminders at any time | 90 days |
| Your HappyFares account: mobile number, login records | You, when you sign in with a one-time code | To keep your account secure and show your bookings | No, needed for your account | Until you delete your account, then 30 days |
We work out your approximate location (your city) from your internet address, to suggest the nearest airport and for the fraud record above. We do not use your device's GPS or exact location.
We do not use your voice, face or fingerprints to identify you.
4. Payments
You pay on our payment partner's own secure page, not on a HappyFares page. Our payment partners are Razorpay, Easebuzz, PayU and Snapmint (pay in parts). They handle your card, UPI or bank details under the Reserve Bank of India's rules.
We never see or store your full card number, CVV, UPI PIN or net banking password, and we do not save cards. We receive only the masked details listed in section 3. Our assistants never take payments by phone or chat; they send you a link to the payment partner's page.
Refunds go back to the payment method you used. If you paid with Snapmint, your refund goes to your Snapmint account.
5. Passport reader, PAN and voice
Passport reader. On international bookings you can upload a photo of your passport's photo page instead of typing. An AI service reads the photo and fills in your passport details. We do not keep the photo, and the service we use is bound not to keep it either. Check the details before you continue. We accept JPEG, PNG, WebP or PDF files up to 4 MB.
PAN. Some international fares are paid to a ticket supplier outside India through a bank. Under India's foreign exchange rules, the bank must have the PAN of the person making that payment. We ask for PAN only on those fares, share it only as that payment needs, and keep it with your booking record. A company or a sponsor can give its PAN instead, with a short declaration. Travellers who are not Indian nationals give passport details instead.
Voice. When you speak to search or to Meera, a speech service turns your voice into text. HappyFares does not keep your recording, and the speech service we use is bound not to keep it or use it to train its systems. On some screens the microphone uses your browser's own speech service instead; your browser's maker handles that audio under its own terms. Calls are covered in section 7.
6. Who we share your data with
We do not sell your personal data. We share it only as below, and each company gets only what it needs for its part.
| Who | What they get | Why |
|---|---|---|
| The airline you fly with (and, as we add them, the hotel or other travel supplier you book), and for some fares the ticketing system or ticket supplier that issues the ticket | Traveller and contact details, documents, services you chose, frequent flyer numbers | To issue your ticket, check you in and carry out your choices |
| Our booking technology provider | Your search, booking, account and payment status | It runs the booking engine, the account system and the ticket record for us |
| Our payment partners (Razorpay, Easebuzz, PayU, Snapmint) | Payment and refund details | To take your payment and send refunds |
| The destination country's visa authorities, and an authorised visa partner where one submits for us | Your e-visa application details and documents | To submit and decide your visa application. Some are outside India |
| The insurance company named on the insurance offer, if you buy cover | Traveller names, dates of birth, contact and trip | To issue and service your policy |
| The bank that pays an overseas ticket supplier (some international fares) | Traveller name, passport number, PAN, and the details of the person who paid | To make and report the payment abroad |
| Messaging and calling services: WhatsApp, SMS, email, app notifications, and the voice and telephone services that carry our calls | Your name, number or email, the message, and call audio | To send tickets, updates, alerts and replies, and to make and answer calls |
| AI service providers, some of them outside India | Your messages, call audio and transcripts, voice clips, passport photo, and the booking details needed to answer you. These can include health or money details if you type or say them | To power Meera, Radha, our phone line, the passport reader and voice search |
| Website services: hosting and security (including the check that tells people from automated programs), analytics, session recording and error monitoring | How you use our pages, device and network details | To run the website securely, measure use and fix problems |
| Advertising platforms we advertise on: Google (Google Ads), Meta (Facebook and Instagram), OpenAI (ChatGPT), and travel comparison sites | That a visit or booking happened, its value and booking reference, and the advert's click id, sent from the page or from our servers. From the confirmation page, the tags of the search engine and the social networks we advertise on also receive the booking contact's email and phone number as a hash (a code made from them), to match the booking to an advert. A hash is still personal data, because the platform can use it to find your account if you have one. These platforms may also use this for their own purposes, such as measuring and improving their own advertising, under their own privacy terms | To measure which adverts lead to bookings, and pay travel comparison sites their due |
| The same advertising platforms, for our own adverts (customer lists) | From time to time, the hashed email addresses and phone numbers of past customers, so the platform can show them our offers or leave them out of an advert. For these lists, the platform uses the hashes only to find matching accounts and deletes them after matching. We never send travellers' names, dates of birth or any details of children, and never plain contact details | To show our offers to people who have booked with us |
| Government and the courts | What the law requires | Only when the law requires it, or to protect someone's safety. For international flights, airlines must send booking and passenger details (including name, contact, payment, itinerary, travel agency, frequent flyer number, passport details, seat and baggage) to Indian Customs under the Passenger Name Record Information Regulations, 2022. We give these details to the airline; we do not send them to Customs ourselves |
| Our lawyers, auditors and accountants | What they need | Under a duty of confidence, to run the company properly |
Some advertising and analytics companies use the data their tags collect under their own privacy terms too, for example to measure and improve their own services. That is why the confirmation-page tags are different from the customer lists above. Our Cookie and Tracking Notice lists the tags and explains how to limit this, and you can write to us for the name of any company in it.
If HappyFares is ever merged with or sold to another company, your data moves to the new owner under this policy, and we tell you before that happens.
7. Messages, calls and marketing
Service messages are part of your booking: your ticket, payment and refund updates, schedule changes, boarding passes and the alerts you ask for. We send them by email, SMS, WhatsApp and, in the app, as notifications. You can ask us to stop WhatsApp messages altogether by writing to help@happyfares.in; we then send the same information by SMS or email.
A reminder about an unfinished booking. If you enter your contact details on the booking page and do not finish, we may remind you about that trip by email or WhatsApp. Reply STOP on WhatsApp, use the unsubscribe link in the email, or write to help@happyfares.in, and we stop. Meera's calls to customers are not available yet.
Calls about your booking. Our team may call you about a booking you made, for example when the airline changes or cancels your flight. Meera does not call customers yet.
Our phone line. When you call us, Meera may answer first. She says she is an AI and that the call is recorded, and you can ask for a person at any time. Before she shows or changes a booking she checks it is you, and she acts only on your clear yes (see our AI Assistants, Voice and Phone Services page).
Stopping calls. Say "do not call me" on any call, or write to help@happyfares.in, and we stop calls of that kind. We keep your choice so that we respect it.
Marketing, such as fare sales and offers, may come by email and WhatsApp to people who have booked with us or signed up. Every marketing email has an unsubscribe link. On WhatsApp, reply STOP or write to help@happyfares.in, and we stop.
Our offers on social networks and other advertising platforms. We may show our offers to past customers on the platforms where we advertise, using the hash of their email and phone number as described in section 6. Browser settings only limit cookies on one device. They do not stop us sending hashes from our servers or customer lists. To stop all of that for your email and phone number, unsubscribe from our emails, reply STOP on WhatsApp, or write to help@happyfares.in with "Privacy" in the subject. We then stop sending your hashes in tag events and customer lists, leave you out of future lists, and ask the platforms to remove you from lists already in use, within 2 working days where the platform allows it. A platform may keep what it has already lawfully processed under its own terms. This does not affect your booking or the service messages about it. You can also limit personalised adverts in each platform's own ad settings.
Price alerts need your email; WhatsApp is optional. We message you only when the fare really moves.
App notifications need your permission on your phone. Turn them off in your phone's settings at any time.
8. Meera, Radha and other AI features
Meera is our AI travel assistant on the website, the app, inside ChatGPT and on our phone line. Radha answers on WhatsApp. They search flights, explain fare rules, read your bookings to answer questions about them, help you book, change or cancel, and pass you to a person whenever you ask or they cannot help. They never take payments.
They see your messages or calls and, when relevant, your booking record. On our website, app, WhatsApp and phone line, they run on AI services from providers in India and abroad, which process your conversations for us under contract and are not allowed to use them for their own purposes. When you use HappyFares inside ChatGPT, what you type is first received by ChatGPT's provider under ChatGPT's own terms and privacy policy, which we do not control. We receive what is needed to search, book and help you, and we handle it under this policy. We review a sample of conversations to check and improve our answers. We do not sell your conversations or use them for advertising.
Meera and Radha are in beta. Like any AI, they can make mistakes. Check fares, rules and deadlines before you rely on them.
9. Data kept on your own device
To make booking faster, our website keeps some details in your browser, on your device only: saved travellers, your saved contact details, the people you booked for last time, your last search, and display choices such as Easy Read. Passport details are saved on your device only if you tick a box asking us to save them, and they are deleted from your device the first time you open our booking page after 90 days. Saved travellers and contact details are written to your device when you continue with a booking. We do not hold any of these on our servers unless you use them in a booking. Clear them in your browser's settings, or from the "Saved on this device" options on the booking page. Anyone who uses the same device and browser can see them, so do not use a shared or public device for booking.
If you have a HappyFares account, your account details and bookings are also held by our booking technology provider for us.
10. Security, fraud prevention and the booking origin record
We protect your data with encryption on every page, access limited to the staff who need it, firewalls and rate limits, a check that keeps automated programs away from our searches, and regular reviews of our systems.
To prevent fraud, we keep limited booking, payment, device and network information (the internet address, network, approximate place and device a booking was made from, and the masked payment details in section 3) and run simple checks on it. We keep this confidential record for three years. Only a small team can read it, and only to investigate fraud or a payment dispute, or to answer a lawful request from the police, a court or a regulator. We do not publish our security rules.
These checks never cancel a booking on their own. If a booking is held because of them, a person reviews it, we may ask you to verify some details, and you can ask us to explain and to review the decision.
No system is perfectly safe. If something goes wrong, section 16 says what we do.
11. How long we keep data
We keep data only as long as we need it, then delete it or make it anonymous.
| Data | How long |
|---|---|
| Booking and invoice records (bookings, travellers, contact, services, payments, refunds, PAN) | 8 years with the booking record. Company and tax law require the accounting records and invoices to be kept for set periods (up to eight financial years); we keep the rest of the booking record for the same time to handle refunds, claims and disputes |
| Passport details and special-fare ID details | 1 year after the last flight on the booking, unless needed for a dispute or a legal duty |
| E-visa application details and documents | 1 year after the visa decision, unless needed for a dispute or a legal duty |
| Files you send with a help request (medical documents, ID and birth proofs, passport copies, company letters) | Medical documents 180 days after the request is closed; other files 1 year after it is closed; longer only while a dispute or a legal duty needs them |
| The fraud record of where a booking was made from, and the masked payment trail | 3 years |
| The step-by-step record of a booking as it was made | 120 days; the technical payment steps 30 days |
| The fare rules, price breakdown and terms shown to you, and the time you accepted them | With the booking record |
| Details typed into the booking page when the booking was not finished | 90 days |
| Checkout and service activity linked to a phone number or email | 180 days |
| Advertising click identifiers kept with a booking | 13 months |
| The hf_uid cookie, and the unfinished-booking details it links to | 90 days |
| Chats with Meera, Radha and our team | 3 years |
| Call recordings | 120 days |
| Call transcripts | 1 year. The recorded yes (anything you confirmed on a call, such as a booking, cancellation or change) is kept 8 years with the booking record, to settle any dispute about what was agreed |
| Voice search recordings and passport photos | Not kept by us |
| Recordings of website visits (not made on the steps where you enter traveller, passport, PAN, payment or health details) | 30 days; a small sample and recordings we mark to fix a problem, up to 9 months |
| Website analytics | Up to 14 months |
| Website error reports | 90 days |
| Security logs | At least 180 days, as India's cyber security rules require |
| Price alerts | Until the alert fires or you cancel it |
| Marketing consent and "do not call" choices | Until you change them; an opt-out is kept so we never contact you again against your wish |
| Account details | Until you delete your account, then 30 days |
| Backup copies | Each copy is deleted after 90 days |
These periods are subject to any longer period the law requires. We keep records longer where a law, a court or a government authority requires it, and we give records to an authority when the law requires it. A record may also be kept longer while a claim or investigation is open. From 13 May 2027, Indian law may also require us to keep certain personal data, the related traffic data and processing logs for at least one year after we use them, and to erase them after that unless another law needs them longer. Where that applies we keep a restricted copy, only so we can answer lawful requests, and we do not use it for anything else, including advertising. We delete or anonymise data when its period and any hold end.
12. Your rights
You can ask us to:
- show you the personal data we hold about you and who we shared it with;
- correct or update anything wrong or out of date;
- delete your data, except what the law makes us keep, such as tax and accounting records, and what we need while a claim or dispute is open;
- stop using your data for anything that needs your consent, such as marketing, calls or advertising;
- let someone act for you, if you die or cannot act yourself; tell us who.
Write to help@happyfares.in from the email or mobile number on your booking, with "Privacy" in the subject. We may ask one or two questions to make sure it is you. We acknowledge within 48 hours, send you a copy of your request as we recorded it, and answer within 30 days.
To take back your consent: use the unsubscribe link in any marketing email, reply STOP on WhatsApp, say "do not call me" on any call, or write to us as above. We apply it to future use and, where advertising is concerned, as section 7 explains.
We look at each deletion or withdrawal request against the reason we hold the data and any legal duty to keep it. Where deletion is due, we delete or irreversibly anonymise the data that identifies you, including website visit recordings and analytics records we can link to you, and ask our service providers to do the same. If we must keep something, we tell you why and restrict how it is used. Backup copies expire on the schedule in section 11 and are not used again. Withdrawing consent does not undo what was done before. If the consent was needed for a booking that is not finished, we may not be able to finish it.
India's Digital Personal Data Protection Act, 2023 gives you these rights in law from 13 May 2027. We honour them now. From 13 May 2027 you can also give, review or take back your consent through a consent manager registered with the Data Protection Board of India, and we respond to requests made that way.
13. Children
You must be 18 or older to hold an account or make a booking. A traveller under 18 can be added only by their parent or lawful guardian, or by an adult booking with the parent's or guardian's consent. When you add a traveller under 18, you confirm this. Where the law requires verifiable parental or guardian consent (from 13 May 2027), we obtain and verify it before we process the child's personal data, and a declaration by the person booking may not be enough on its own. We use a child's details only to issue and manage their ticket, never for advertising, profiles or tracking their behaviour.
14. Data sent outside India
Some of the companies in section 6 store or process data outside India: website hosting and security, analytics and advertising, some AI services and the airlines' own systems. This includes the content of chats and calls with our AI assistants, which can contain health or money details if you share them. Where the information is sensitive personal data under Indian law, we send it outside India only to a recipient that ensures the same level of protection the Indian rules require, and only where it is necessary to carry out our contract with you or you have agreed. We check each recipient and use contracts and security safeguards, and we follow any restriction the Government of India places on sending data to a country.
15. Grievance Officer and contact
Grievance Officer: Sapan Jha, Head, Escalation Help Desk, Travelogy Online Private Limited. Escalation contact: Pratik Goswami, Escalation Satisfaction Manager, help@happyfares.in. Email grievance@happyfares.in, or call +91 7670060070. Address as in section 1. Our Grievance Redressal page at www.happyfares.in/grievance explains the steps and time limits: we acknowledge within 48 hours and answer within 30 days.
From 13 May 2027, if you are not satisfied with our answer on a data matter, you can also complain to the Data Protection Board of India.
16. If something goes wrong with your data
If your data is accessed, lost or shared without permission, we tell you without delay, by email or SMS: what happened and when, what it may mean for you, what we are doing, what you can do, and whom to contact. We report cyber security incidents to India's cyber security agency (CERT-In) within 6 hours of noticing them, as its rules require. From 13 May 2027 we also tell the Data Protection Board of India without delay and send it a full report within 72 hours, as the law requires.
17. Changes to this policy
We update this policy when we add a feature or a travel service, change a partner, or the law changes. The date at the top shows the latest version. If a change matters to you, we tell you by email, in the app or on the website before it takes effect.
18. Law and courts
Indian law governs this policy. The courts in Guwahati, Assam handle disputes about it. If you are a consumer, you can also go to the consumer commission where you live or work, as the Consumer Protection Act, 2019 allows; this policy does not take that right away.