Privacy Policy
Effective from 1 January 2026
At AVOOTA, your privacy is fundamental to how we build our platform. This policy explains what data we collect, how we use it, and the choices you have. AVOOTA Travel Technologies Pvt. Ltd. ("AVOOTA", "we", "us") is the data controller. By using our platform, including our website, mobile apps, and related services, you agree to this policy. If you do not agree, please discontinue use of our platform.
Security first
Industry-standard encryption and PCI-DSS compliant payment handling.
We don't sell your data
We never sell your personal information to advertisers or third parties.
You're in control
Access, correct, or delete your personal data anytime by contacting us.
Information We Collect
We collect the following categories of personal information to provide, improve, and personalise our hotel booking services:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality | Account creation, booking, ID verification |
| Contact Data | Email address, phone, mailing address | Booking confirmations, customer support, notifications |
| Booking Data | Check-in/out dates, room type, number of guests, special requests | Reservation management, hotel communication |
| Payment Data | Card type, masked number, UPI ID, transaction ID | Payment processing (full card numbers not stored) |
| Usage Data | Pages visited, searches, clicks, session duration | Platform improvement, personalisation |
| Device & Technical Data | IP address, browser type, OS, device ID, location (if permitted) | Security, fraud prevention, performance optimization |
| Communications Data | Support transcripts, emails, call recordings | Customer service, dispute resolution, quality assurance |
| Preferences & Reviews | Saved hotels, wishlist, reviews, ratings | Personalised recommendations, community trust |
How We Collect Your Information
2.1 Directly from You
When you register for an account, make a booking, contact our support team, submit a review, or fill in any form on our platform, you provide us with personal data directly.
2.2 Automatically
As you use AVOOTA, we automatically collect technical and usage data via cookies, web beacons, pixels, and similar tracking technologies.
2.3 From Third Parties
- Hotel & supply partners (TBO and others) — for availability and pricing
- Payment gateways — for transaction confirmation
- Social login providers — if you sign in with Google or another social account, we receive your name and email as per your social profile settings
- Analytics providers — aggregated, anonymised insights using Google Analytics and similar tools
- Fraud prevention services — to protect against fraudulent transactions
How We Use Your Personal Data
We use your data, under a legitimate legal basis (contract, consent, legal obligation, or legitimate interest), to:
- Processing your bookings — confirming reservations, issuing vouchers, communicating with hotels
- Account management — creating and maintaining your AVOOTA profile
- Payment processing — facilitating secure transactions and refunds
- Customer support — resolving queries, complaints and disputes
- Platform improvement — analysing how users interact with AVOOTA
- Communications — sending booking confirmations, check-in reminders, offers (with your consent), and policy updates
- Legal compliance — meeting obligations under Indian tax, law regulations and requirements
- Fraud & security — detecting and preventing fraudulent activity
Personalisation & Advertising
AVOOTA personalizes your experience using search history, past bookings and browsing behaviour. Partner advertisements (airlines, insurance, car rentals) display based on contextual and interest-based signals.
You can manage your personalisation and marketing consent in your Account Settings → Privacy.
Your Privacy Rights
Under applicable data protection law (including the Digital Personal Data Protection Act, 2023), you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Correction
Ask us to correct inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data, subject to legal retention requirements.
Right to Object
Object to processing of your data for direct marketing or profiling.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Restrict
Request restriction of certain processing activities while a complaint is under review.
Withdraw Consent
Withdraw any previously given consent for marketing or data processing at any time.
Right to Complain
Lodge a complaint with the Data Protection Board of India.
To exercise any of these rights, contact our Privacy Team at privacy@avoota.com. We will respond within 30 days.
Data Retention
- Booking records — Retained for 7 years, as required by Indian tax and financial regulations
- Account data — Retained for the duration of your account plus 2 years after closure
- Communications — Support emails and chat transcripts retained for 3 years
- Analytics data — Aggregated, anonymised analytics data may be retained indefinitely
When your data is no longer required, we securely delete or anonymise it.
Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:
- SSL/TLS encryption for all data transmitted between your device and our servers
- PCI-DSS compliant payment processing — we do not store full card numbers on our systems
- Regular security audits and penetration testing
- Role-based access controls limiting who within AVOOTA can access your data
- Multi-factor authentication options for user accounts
Children's Privacy
AVOOTA's services are intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If we become aware that a minor has provided us with personal information, we will promptly delete that data and close the associated account.
If you believe a child under 18 has registered on AVOOTA, please contact us immediately at privacy@avoota.com.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will:
- Update the "Effective from" date at the top of this page
- Send you an email notification if the changes significantly affect how we process your data
- Display a prominent notice on our platform for at least 30 days before changes take effect
We encourage you to review this policy periodically. Continued use of AVOOTA after changes take effect constitutes your acceptance of the revised policy.
Contact Us & Grievance Officer
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, contact:
Grievance Officer — Data Privacy
AVOOTA Travel Technologies Pvt. Ltd.
Tirupati, Andhra Pradesh, India
Email: privacy@avoota.com
Support: support@avoota.com
Response time: within 30 business days
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, our Grievance Officer will acknowledge your complaint within 24 hours and resolve it within 30 days.
You have the right to escalate complaints to the Data Protection Board of India if you feel your concerns have not been adequately addressed.