Privacy Policy

VoyagerOS ("we", "our", "us") is a travel agency management platform operated from India. Our platform is available at voyageros.in and enables travel agencies to manage enquiries, bookings, packages, quotations, and customer relationships.

VoyagerOS is part of a suite of SaaS applications developed and released by VortexCones, our parent company. VortexCones is responsible for the overall data governance and privacy practices that apply across all its products, including VoyagerOS.

For privacy-related questions, contact us at support@vortexcones.com.

We collect information in two categories:

Agency account data

• Name, email address, and phone number of the account holder
• Agency name, business address, and GST/tax details
• Subscription and billing information (processed by our payment provider)
• Login credentials (passwords are hashed and never stored in plain text)

Data your agency enters

• Customer names, emails, phone numbers, and travel preferences
• Booking details, quotations, and payment records
• Tour itineraries, packages, and destination content
• Vendor and B2B partner information

You own all data you enter. We are the data processor; you are the data controller for your customers' information.

• To provide, maintain, and improve the VoyagerOS platform
• To process your subscription and send billing-related communications
• To send product updates, release notes, and support responses
• To detect and prevent fraud, abuse, or security incidents
• To comply with legal obligations under Indian law

We do not sell your data or your customers' data to third parties.

Your data is stored on Supabase (PostgreSQL) hosted on secure cloud infrastructure. We apply row-level security so each agency can only access its own data. All data is encrypted in transit (TLS 1.2+) and at rest.

We retain your account data for the duration of your subscription plus 90 days after cancellation, after which it is permanently deleted on request.

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Your browser session is maintained via a secure, HTTP-only cookie.

We use the following sub-processors:

• Supabase — database and authentication
• Amazon SES — transactional email delivery
• MSG91 — SMS notifications
• Razorpay — payment processing
• Vercel — application hosting and CDN

Each sub-processor is contractually bound to protect your data and may not use it for their own purposes.

Under the Digital Personal Data Protection Act 2023 (India) and applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Object to processing in certain circumstances

To exercise any of these rights, email us at support@vortexcones.com with the subject line "Data Request". We will respond within 30 days.

We may update this policy from time to time. When we make material changes, we will notify account holders by email and update the "Last updated" date at the top of this page. Continued use of the platform after the effective date constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or how your data is handled, please reach out: