Data Deletion
Last updated: 29 September 2026
You can ask us to delete your personal data at any time, and you do not need to give a reason. This page tells you how to ask, how long it takes, and — honestly — the few things we are not allowed to delete straight away.
1. How to ask
Email privacy@pathyatra.com from the email address on your account, or write from your registered mobile number, with:
- your name;
- the registered mobile number or email on the account;
- whether you want everything deleted or only something specific — for example, only your marketing consent, or only a pre-apply enquiry.
Once the apps are released, account holders will also be able to request deletion from within the app, without emailing anyone.
2. Verifying it is really you
We will confirm your identity before deleting anything, usually with a one-time password to your registered number or email. This is to stop someone else deleting your account. We will never ask for your password.
3. How long it takes
| Stage | Timeline |
|---|---|
| We acknowledge your request | Within 48 hours |
| We verify and action it | Within 30 days |
| Copies removed from backups | Within the backup cycle after deletion |
Backups exist so that data is not lost in an outage, and they are overwritten on a schedule rather than edited. Your data stops being used the moment we action the request, and is gone from backups when the cycle completes.
4. What we must keep, and why
Some records cannot be deleted on request, because the law requires us to hold them. Being straight about this is better than promising a clean wipe we cannot deliver:
- Payment, invoice and settlement records — retained for the period required under tax and accounting law.
- Booking records tied to a completed journey — retained where needed for tax, dispute resolution or a legal claim.
- Records of a complaint, safety incident or investigation — retained until it is closed, and for any period the law requires afterwards.
- Security and access logs — retained for the period required for security and lawful record-keeping.
- A record that you asked for deletion — we keep the minimum needed to show we honoured it, and to make sure we do not contact you again.
Anything kept for these reasons is locked down to that purpose only. It is not used for marketing, analytics or any active processing.
5. Our normal retention periods
Even without a request, we do not keep data indefinitely:
| What | How long |
|---|---|
| Pre-apply / early-access enquiries | Up to 24 months from submission, or until you ask us to delete it |
| Operator and staff account data | For as long as the account is active, then up to 12 months |
| Booking and ticket records | As required for tax, accounting and dispute resolution |
| Payment and settlement records | As required under tax and accounting law |
| Trip location history | A limited operational window, then aggregated or deleted |
| Server and security logs | A short rolling window, longer where law requires retention |
| Marketing consent records | Until withdrawn, plus a record of the withdrawal |
6. Smaller requests you may prefer
Deleting everything is not always what people actually want. You can instead ask us to:
- Stop marketing messages — withdraw the optional WhatsApp and SMS consent, keeping your account.
- Correct something — fix a wrong name, number or document.
- Get a copy — we will send you the personal data we hold about you.
- Delete a pre-apply enquiry only — if you filled in the early-access form and changed your mind.
7. If you are an operator with staff on the platform
Deleting your operator account also ends your staff members' access. Their own personal data is handled under the same rules, and they can make their own request directly to us. Settlement records and any amount owing between us are dealt with first — see the Operator Agreement.
8. Cookies are separate
Your cookie choice on this website is stored in your own browser, not in your account. You can change or withdraw it any time from the Cookie Policy page, and clearing your browser data removes it too.
9. If we cannot do what you asked
We will tell you plainly what we deleted, what we kept, and the reason for keeping it. If you disagree, escalate through Grievance Redressal, and you remain free to complain to the relevant data protection authority.