Privacy Policy

Seatzo is operated by SEATZO INNOVATION LABS PRIVATE LIMITED ("Seatzo", "we", "us" or "our"). This Privacy Policy explains how we collect, use, disclose, retain and protect information when you use Seatzo.

For applicable Indian data-protection law, the company may act as the entity determining the purposes and means of processing personal data for the Service. The exact statutory classification and obligations applicable to a particular processing activity depend on the law and circumstances in force at the relevant time.

Account and identity information: mobile number, authentication identifiers, name, username, email address where supplied, profile photo, and other profile fields.

Travel and marketplace information: metro line, train number, coach number, travel context, ladies-coach selection, listings, exchange records, connection timestamps, cancellations, ratings, Karma and reward activity.

Communications: messages, feedback, support tickets, reports and information you choose to provide when contacting Seatzo.

Payment information: order identifiers, payment status, package information, transaction references, refunds or chargeback information and other reconciliation data. Payment credentials may be handled directly by the payment provider rather than by Seatzo.

Device and security information: session identifiers, device information, IP/network information, timestamps, security events, rate-limit signals, fraud-prevention signals and technical diagnostics.

Location information: depending on the feature and your device settings, Seatzo may receive precise or derived location information. Location is not required merely because the device can provide it, and we aim to collect and retain only what is reasonably required for the relevant feature, safety, security or legal purpose.

We receive information directly from you, from the device/browser you use, from your interactions with the Service, and from service providers supporting authentication, payments, hosting, communications, notifications and security.

Where a third party provides information to Seatzo, such as authentication or payment status, we use the information required to provide the requested feature, reconcile the transaction, prevent fraud, or comply with law.

We use information to authenticate users, create and maintain accounts, show relevant seat availability, coordinate connections, provide chat and support, process Connect Pass purchases, maintain Karma and reward features, prevent abuse and fraud, secure the Service, improve reliability, communicate important service information, comply with law, and handle disputes.

We may also use aggregated or de-identified information for service analytics, capacity planning, product improvement and security research where it no longer reasonably identifies an individual.

Depending on the activity and applicable law, Seatzo may process personal data because it is necessary to provide a service you requested, because you have provided consent where consent is required, because processing is necessary for security or fraud prevention, because we must comply with a legal obligation, or for another lawful purpose recognized by applicable law.

Where processing is optional and based on a user choice, the relevant product surface will seek the required permission or consent. Withdrawing a permission may disable the feature that depends on it.

Seatzo's core matching model can use metro and train context to show relevant availability. Some location-enabled features may use device location to improve relevance, safety or security.

We do not intend to expose your precise live GPS coordinates to another commuter merely because you create or view a listing. The user-facing product should expose only the information necessary for the interaction.

Location information may be reduced, generalized, separated from other records, deleted, or retained only as long as necessary for the stated purpose, subject to legal, security, dispute and operational needs.

Depending on the feature, other eligible users may see information such as your display name, username, profile photo, rating, relevant travel/coach context and listing information.

Seatzo does not intend to publish your authentication credentials, OTPs, payment credentials, internal security identifiers, or private support information to other users.

Seatzo may use third-party providers for authentication, payment processing, hosting, email, push notifications and other infrastructure. For example, Firebase may support authentication and a payment provider may process Connect Pass purchases.

These providers may process personal information on Seatzo's behalf or independently under their own legal terms. Seatzo shares only the information reasonably required for the applicable integration, subject to contractual, technical and legal controls.

You should also review the privacy notices of third-party services when those services independently determine how they process your information.

We may disclose information to service providers supporting the Service; authentication and payment partners; security, fraud-prevention or communications providers; professional advisers; auditors; or authorities where disclosure is required or permitted by law.

We may also disclose information when reasonably necessary to protect users, prevent fraud or abuse, investigate violations, enforce our Terms, respond to a lawful request, or protect the rights and safety of Seatzo or others.

Seatzo does not sell personal information merely for advertising purposes. If that position changes, the applicable policy and required disclosures will be updated before the change takes effect.

Seatzo's public website may display third-party advertising when advertising is enabled. The advertising formats and vendors used on a particular page depend on the live configuration. Seatzo does not treat a countdown timer or an internal reward screen as an advertisement or as proof that an advertising impression occurred.

If Google AdSense or another Google advertising service is enabled, Google and participating third-party vendors may place and read cookies in your browser and may use web beacons or pixels, IP addresses, advertising identifiers, browser/device signals and ad interactions to deliver, measure, limit, protect against invalid activity, or personalise ads where permitted and configured. These technologies may recognise a browser or device across visits. The exact data and purposes depend on the advertising service, vendor and settings in use.

Read How Google uses information from sites or apps that use its services and Google's advertising technologies policy for more information. For available advertising controls, visit Google My Ad Center. Choices may depend on your location, account and device.

Where consent, a certified consent management platform, or other notices and choices are required by law or Google's publisher requirements, Seatzo must provide them before enabling the relevant advertising. This policy should be kept aligned with the advertising vendors and settings actually deployed on the website.

We retain information for as long as reasonably necessary for the purpose for which it was collected, including providing the Service, maintaining transaction histories, supporting users, preventing fraud, resolving disputes, maintaining security, and complying with legal or accounting requirements.

Different categories may have different retention periods. For example, security and payment records may need to be retained longer than transient application state. When information is no longer required, Seatzo may delete it, anonymize it, or otherwise de-identify it subject to applicable law and legitimate retention requirements.

Seatzo uses technical and organizational measures intended to protect personal information, including secure authentication, access controls, server-side authorization, encrypted transport, rate limiting, transaction integrity controls, fraud-prevention mechanisms, logging and security monitoring.

No online service can guarantee absolute security. You should never share OTPs, passwords, recovery codes or payment credentials with another person or through Seatzo chat.

Seatzo may use cookies and browser/device storage that are necessary to authenticate sessions, remember preferences, maintain application state, support security features and provide the Service.

Where optional technologies are introduced for analytics, personalization or other non-essential purposes, Seatzo will provide the notices and choices required by applicable law.

Depending on the law applicable to you, you may have rights relating to access, correction, deletion/erasure, withdrawal of consent, grievance redressal, or other controls over personal data.

To request help, use Seatzo Support. We may need to verify your identity before responding to a request involving personal information or an account.

Rights can be subject to legal exceptions, security needs, third-party rights, or records that Seatzo must lawfully retain.

Seatzo is not designed to encourage children to meet unknown adults or to bypass parental, guardian, school or transit safety rules. Where the law requires age-specific safeguards, consent, or restrictions, those requirements apply.

We may restrict accounts or features where we reasonably believe that a user is not eligible for a particular activity or that a safety risk exists.

Because Seatzo relies on cloud and technology providers, personal information may be processed or stored in jurisdictions outside India. Where applicable, Seatzo will use contractual, technical or other safeguards required by law for such processing.

If Seatzo becomes aware of a security incident affecting personal information, we will assess, contain, investigate and respond in accordance with applicable law and our incident-response procedures.

Security reports and privacy complaints should be sent through the Support channel as soon as possible. Please do not include secrets such as OTPs, passwords or payment credentials in a report.

We may update this Privacy Policy to reflect changes in the Service, law, vendors, processing purposes or security practices. The current version will show its "Last updated" date.

Where applicable law requires advance notice, renewed consent, or another communication mechanism for a material change, Seatzo will use the required mechanism.

Privacy-related requests are handled by SEATZO INNOVATION LABS PRIVATE LIMITED.

Use Seatzo Support for privacy requests, account questions, data concerns and grievances. Where applicable law requires publication of a specific grievance officer or privacy contact, Seatzo will publish the designated details through the Service and/or the applicable notice.