OpenYatra

Privacy Policy

Last updated: June 2026

1. Information We Collect

We collect information you provide directly to us, such as your name, email address, phone number, and payment information when you create an account or make a booking. We also collect usage data including pages visited, searches performed, and features used.

2. How We Use Your Information

We use your information to process bookings, communicate with you about your reservations, improve our services, send marketing communications (with your consent), and comply with legal obligations. We never sell your personal data to third parties.

3. Data Sharing

We share your information with trek operators and suppliers only to the extent necessary to fulfill your booking. Payment information is processed by Khalti and Stripe — we do not store card details. We may share data with service providers who assist us in operating OpenYatra.

4. Cookies

We use essential cookies to maintain your session and authentication. We may use analytics cookies to understand how you use our platform. You can control cookie settings through your browser.

5. Data Retention

We retain your account information as long as your account is active. Booking records are retained for 7 years for legal and accounting purposes. You may request deletion of your personal data by contacting us.

6. Your Rights

You have the right to access, correct, or delete your personal information. You may also request data portability or object to certain processing. Contact us at [email protected] to exercise these rights.

7. Security

We implement industry-standard security measures including HTTPS encryption, JWT authentication, and regular security audits. However, no system is 100% secure and we cannot guarantee absolute security.

8. Contact Us

For privacy concerns, contact our Data Protection Officer at [email protected] or write to us at OpenYatra Pvt. Ltd., Thamel, Kathmandu, Nepal.