Vendor Privacy Policy
Ranthambore Trip, for vendors on the website and the RT Vendor app
Last updated: 11 November 2026
1. About this policy
This policy explains how Ranthambore Trip ("we", "us", "our") collects, uses, shares and protects the personal and business information of vendors ("you"). Vendors include hotels, safari booking agents, taxi operators and drivers, equipment rental providers, handicraft sellers, guides and other service providers who register on www.ranthamboretrip.com or use the RT Vendor Android app.
By registering as a vendor or using the RT Vendor app, you agree to this policy. It should be read together with our Terms and Conditions and the general Privacy Policy for customers.
2. Information we collect
Account information
- Your name, the owner's name, business name, email address, mobile number and password. Passwords are stored only in encrypted (hashed) form, and we can never see them.
Business information
- Business category, description, address, city, state, PIN code, map location, logo and photos.
- GST number and PAN, where provided.
- Commission settings that apply to your account.
Verification documents
- Documents you upload for approval, such as PAN card, GST certificate, driving licence, safari agency registration or authorisation, and any other documents our team asks for.
Bank and payout details
- Account holder name, bank name, account number and IFSC code. Your bank account number is stored in encrypted form.
Taxi details (taxi vendors only)
- Driver name, phone number, licence number and licence expiry.
- Vehicle name, category, registration number, seating and luggage capacity, insurance expiry, permit number and vehicle photo.
Listings and services
- Hotel rooms, rates and availability.
- Safari prices, taxi pricing, products, rental items and services.
- The photos and descriptions you publish.
Bookings, orders and payments
- Booking and order records, the amounts to be collected from guests, commissions, wallet balance, payout requests and payout transaction references.
Location data (taxi vendors only)
- See Section 4.
Device and usage information
- The device name and login token for the RT Vendor app.
- A push notification token, used to send you new-order alerts.
- IP address and login attempts, kept for security.
- A record of important account actions, such as updates to listings, orders and payouts.
Communications
- Support tickets, messages and emails you send to us.
3. How we use your information
We use your information to:
- create and manage your vendor account, and verify your identity and business before approval;
- publish your business profile and listings so customers can find and book you;
- send you bookings and orders, and notify you by app notification, email, SMS or WhatsApp;
- calculate commissions and the amount you collect from guests, and process wallet credits and payouts to your bank account;
- show customers your contact details after they book (see Section 5);
- show available taxis on the live taxi map, and let customers track their booked taxi;
- handle cancellations, refunds, disputes, reviews and customer support;
- prevent fraud, misuse and unauthorised access to your account;
- meet our legal, tax and accounting obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
4. Location data (taxi vendors only)
The RT Vendor app collects your device's location only if you are a taxi vendor and you allow location access.
- When it is collected: only while you are online in the app. A permanent notification is shown while location sharing is active, including when the app is in the background. Background location lets customers see your taxi and track their ride even when the app is not open on your screen.
- How often: about once every minute. On a day when you have a booked ride, it is collected every few seconds so the customer can track the ride smoothly.
- What is stored: only your latest position (latitude, longitude, accuracy, direction and speed). Each new position replaces the previous one. We do not keep a history of your movements.
- Who sees it: customers can see your taxi on the live taxi map. A customer with a booked ride can track that ride. A position older than 5 minutes is not shown.
- How to stop it: turn off "Online" in the app, log out, or remove the app's location permission in your phone settings. When you go offline, your stored position is deleted immediately. Any position not refreshed for 24 hours is deleted automatically.
Other vendor types (hotels, safari agents, shops and so on) do not share device location. Their map location is the business address they enter themselves.
5. What customers can see
Public profile
- Your business name, logo, description, photos, business address or area, listings, prices, ratings and reviews.
After a customer books you
- Your business name, contact person, phone number and email, so they can contact you about the booking.
- For taxi bookings: the driver's name, phone number and vehicle details, plus the live location of the taxi.
- For safari bookings: the agent's contact card, shown until the safari is completed.
We never show customers your documents, bank details, PAN, commission rates, earnings or payouts.
6. Customer information you receive
When a customer books you, we share the details you need to provide the service, such as the guest's name, phone number, email, travel date, pickup and drop points, delivery address and booking notes.
You must:
- use this information only to fulfil that booking or order;
- not use it for marketing, sell it, or share it with anyone not involved in the service;
- keep it secure and delete it once you no longer need it, unless the law requires you to keep it.
Misuse of customer information can lead to suspension or permanent removal from the platform.
7. Sharing with service providers
We share information only as needed with trusted providers who help us run the platform:
| Provider | Purpose |
|---|---|
| Razorpay and PhonePe | Online payments and refunds |
| Google Firebase Cloud Messaging | App notifications |
| SMS and WhatsApp message providers (such as MSG91 or Twilio) | OTPs and booking alerts |
| Email service providers | Account and booking emails |
| Our web hosting provider | Storing the website, app data and uploaded files |
| OpenStreetMap | Map tiles shown on the website |
These providers handle data under their own privacy and security terms.
We may also disclose information when required by law, a court order or a government authority, or to protect the rights and safety of our users and platform.
8. How we protect your information
- All connections to the website and app use HTTPS encryption.
- Passwords are hashed, and bank account numbers are encrypted.
- Verification documents are stored in a private area that is not publicly accessible.
- On your phone, the app stores its login token in encrypted form.
- Access to vendor data is limited to authorised administrators.
- Login attempts are rate-limited to block password guessing.
No system is completely secure. Please keep your password private and log out of shared devices. Tell us immediately if you suspect unauthorised access to your account.
9. How long we keep information
- Account, business and listing information: kept while your account is active.
- Booking, payment, commission and payout records: kept for the period required by Indian tax, GST and accounting laws, even after your account is closed.
- Verification documents: kept while your account is active, and for a reasonable period afterwards to resolve disputes or meet legal requirements.
- Taxi location: only the latest position. It is deleted when you go offline, or automatically after 24 hours.
- Push notification tokens: removed when the app is uninstalled or the token expires. App login tokens expire automatically.
10. Your rights and choices
You can:
- view and update your business profile, listings, documents and bank details from your vendor dashboard or the app;
- turn location sharing on or off at any time (taxi vendors);
- turn off app notifications in your phone settings;
- ask us for a copy of the personal information we hold about you;
- ask us to correct inaccurate information;
- ask us to deactivate your account and delete your personal information. Records we must keep by law, such as transaction and tax records, are excluded;
- withdraw your consent. Some features will then stop working; for example, you cannot receive bookings without sharing contact details.
To make a request, contact us using the details in Section 13. We will respond within a reasonable time, as required by applicable law, including the Digital Personal Data Protection Act, 2023.
11. Children
Vendor accounts are only for persons aged 18 and above who are legally able to enter into a business contract.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page, with the "Last updated" date. If changes are significant, we will notify you by email or app notification.
13. Contact and grievance officer
For questions, requests or complaints about this policy or your data, contact:
Grievance Officer: [Name]
Ranthambore Trip
Ranthambore Road, Sherpur, Sawai Madhopur, Rajasthan, India
Email: info@ranthamboretrip.com
We will acknowledge complaints within 24 hours and try to resolve them within 15 days.