Your conversational inquiries, personal travel prompts, and PNR inputs are never written to permanent billing ledgers or sold to third-party data brokers.
MCP personal API keys are cryptographically hashed using SHA-256 before storage. Raw keys are never retained on our servers.
1. Scope & Applicability
This Privacy Policy outlines how ConfirmRoute ('we', 'us', or 'our') collects, utilizes, stores, and safeguards personal data when you visit our website, use our AI railway assistant, purchase Traveler subscriptions, or interact with our Developer MCP APIs.
2. Information We Collect
We collect only data reasonably necessary to deliver travel intelligence and meter quotas:
2.1 Account Credentials & Google User Data
Email addresses, hashed passwords, or OAuth tokens supplied during registration via Supabase Auth.
Google User Data Disclosure: When you sign in using Google OAuth, ConfirmRoute accesses only basic profile information (specifically your verified email address, full name, and avatar URL) provided by Google APIs strictly to authenticate your account and personalize your session. ConfirmRoute does not request access to any sensitive Google scopes or private data (such as Gmail, Google Drive, or Calendar).
Google API Limited Use Compliance: ConfirmRoute's use and transfer of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never sold, shared with third-party advertisers or data brokers, or used for training generalized artificial intelligence models.
2.2 Railway & Travel Inquiries
Train numbers, station codes, travel dates, PNR numbers, and route queries submitted to obtain schedules, delays, or confirmation probabilities.
2.3 Query & Usage Metadata
Search volume counts, tool execution types, token usage, and capability modes (FAST, BALANCED, ADVANCED) recorded strictly for quota metering.
2.4 Payment & Transaction Records
Transaction IDs, payment status, amount, and plan identifier passed by RBI-authorized payment partners. ConfirmRoute never receives or stores full card numbers, CVVs, or UPI PINs.
2.5 Developer & MCP Identifiers
Cryptographically hashed MCP personal keys (cr_live_****), burst rate counters, and client tool execution logs.
2.6 Technical & Network Identifiers
Anonymized IP hashes for guest abuse prevention, browser user agent, operating system, and system diagnostic telemetry.
3. How We Use Information
We utilize collected data to authenticate users, deliver conversational railway guidance, calculate confirmation probabilities, manage quotas, process subscriptions, issue GST tax invoices, detect abuse, and safeguard infrastructure.
4. AI Processing, Chat Records & Quality Diagnostics
ConfirmRoute utilizes frontier AI models (including Google Gemini) to convert natural-language travel inquiries into structured railway tool calls and analytical guidance.
Traveler Chat History: For signed-in users, conversation history is preserved in your private account to allow seamless cross-device synchronization and review of past train comparisons. You can delete individual chat conversations or purge your entire chat history at any moment directly from the chat sidebar.
Quality Assurance & Operational Diagnostics: To verify that our AI models respond accurately, diagnose latency issues, capture tool execution errors, and prevent system hallucinations during railway searches, operational request telemetry (including inquiry text, model response status, and diagnostic error codes) is processed in secure internal logs accessible solely to authorized administrators.
Zero Advertising Exploitation & No Foundation Model Training: Your queries, travel reasoning, and PNR inputs are NEVER sold to third-party data brokers or advertisers, and are NEVER used by ConfirmRoute to train public generalized foundation models.
5. Legal Bases and Consent
We process personal data in compliance with the Digital Personal Data Protection Act (DPDP), relying on contractual necessity for paid subscriptions, legitimate interests for security, and voluntary consent for travel assistance.
6. Sharing of Information
We do not sell personal data. We share minimal information only with essential infrastructure sub-processors: cloud hosting providers, database infrastructure (Supabase), RBI-authorized payment aggregators, and AI compute providers.
Information may be disclosed to law enforcement authorities only when compelled by valid court orders or applicable Indian legal statutes.
7. Payment Gateway Security
Payment transactions are processed by PCI-DSS Level 1 certified payment partners. All sensitive financial data is transmitted directly to the gateway via TLS 1.3 encryption without touching ConfirmRoute application servers.
8. Data Retention & Pruning
Guest session chat history is stored strictly in your browser's local storage and auto-pruned after 72 hours. Registered user chat sessions remain in your private account until deleted by you or upon account closure.
Operational usage telemetry in our database ledger is automatically purged after 90 days via scheduled database maintenance routines.
Statutory tax and invoicing records are maintained for requisite statutory periods under Indian GST and Companies regulations.
9. Technical & Organizational Security
We enforce AES-256 and TLS 1.3 encryption in transit and at rest, role-based administrative access, cryptographic SHA-256 API key hashing, automated DDoS mitigation, and continuous vulnerability monitoring.
10. Developer API & MCP Telemetry
Developer requests are metered using non-reversible token signatures. Request payloads are executed in memory and not permanently retained in tool loggers.
11. Cookies and Similar Technologies
We utilize essential session cookies for authentication and CSRF security, alongside local storage for client UI preferences. Detailed classifications are provided in our Cookie Policy.
12. Children's Privacy
ConfirmRoute is not directed at children under the age of 18. We do not knowingly solicit or collect personal information from minors.
13. Your Rights and Choices Under DPDP
Under the Digital Personal Data Protection (DPDP) Act, 2023, you are entitled to the following statutory rights regarding your digital personal data:
1. Right to Access & Portability: You have the right to obtain a summary of personal data being processed by ConfirmRoute, and download a structured copy of your profile and search telemetry directly via 'Download My Data' in your Account Settings.
2. Right to Correction and Updating: You have the right to rectify or update incomplete or inaccurate personal data associated with your account.
3. Right to Erasure (Right to be Forgotten): You can permanently erase your account, chat sessions, API credentials, and saved journeys at any time via self-service deletion in Account Settings or by contacting [email protected].
4. Right of Grievance Redressal: You have the right to register a privacy complaint with our designated Grievance Redressal Officer, with guaranteed acknowledgement within 24 to 48 hours and resolution within 30 days.
5. Right to Nominate: You may designate an individual who, in the event of death or incapacity, can exercise your privacy rights.
14. Account and Data Deletion
You can request immediate account deletion directly within Account Settings or by submitting an email to [email protected]. Upon confirmation, your profile, authentication records, and MCP keys will be permanently erased within 30 days.
15. International Data Transfers
Where cloud compute providers process telemetry across secure global regions, ConfirmRoute ensures appropriate safeguards and encryption standards in compliance with Indian regulatory directives.
16. Third-Party External Links
Our platform may reference external railway websites (such as IRCTC or CRIS). We are not responsible for the privacy practices or content of third-party domains.
17. Changes to this Privacy Policy
We may update this policy as technical features or legal requirements evolve. Material updates will be highlighted on this page with an updated effective date.
18. Grievance Redressal Officer & Statutory Redressal
In accordance with the Information Technology Act, 2000 and Rule 13 of the Digital Personal Data Protection (DPDP) Rules, 2025, for any inquiries, data rights requests, or complaints regarding personal data handling, please contact our designated Grievance Officer:
Designated Officer: Grievance Redressal Officer, ConfirmRoute | Primary Privacy Email: [email protected] | Grievance Desk: [email protected] | Support: [email protected]
Statutory SLA: Formal acknowledgement is provided within 24–48 business hours, and complaints are investigated and resolved within 30 calendar days. If a data grievance remains unresolved, you have the right to approach the Data Protection Board of India.
Registered Office: As detailed on our official Contact & Support page.
19. Important Notice
This Privacy Policy forms an integral part of our Terms of Service and should be reviewed in conjunction with our Developer Terms, Acceptable Use Policy, and Cookie Policy.