DPDP Compliance

Our role

For agency and team data: TraWe is the data fiduciary. For traveller data your agency uploads: your agency is the fiduciary, TraWe is the processor.

Rights we honour

• Right to access and copy your personal data.
• Right to correction, completion and updation.
• Right to erasure once the processing purpose is complete.
• Right to nominate another individual to exercise rights on your behalf.
• Right to grievance redressal.

Submit a privacy or account deletion request. In your workspace: Settings → Privacy & account deletion. Identity and authority are verified before data is released or changed.

Consent

The account data notice appears before first dashboard access and your acceptance is recorded. Contact and privacy forms ask separately for permission to process the request; neither subscribes you to marketing. Use the privacy request form to request withdrawal of consent.

Security safeguards

• HTTPS for connections to the service.
• Row-level security isolating every agency's data.
• Role-based access and optional branch restrictions.
• Restricted access to contact and privacy submissions for platform administrators.

Sub-processors

Services used depend on the features and connections enabled. This overview does not guarantee India-only hosting; provider and location details require review against current contracts.

Grievance officer (India)

Atul Bharti

Submit a grievance or privacy request

Data breach notification

We notify the Data Protection Board and affected principals as required, with facts, likely consequences, and mitigation applied.