PRIVACY
POLICY

Travdigi OPC Private Limited is the Data Controller responsible for your personal data. We operate a verified digital identity platform that enables instant hotel check-ins worldwide, replacing traditional paper-based guest registers with a secure, encrypted, legally compliant digital system.

This policy applies to:

• Registered Travelers — users who have created a Travdigi account and completed identity verification through our app
• Walk-In Guests — individuals who check in at a Travdigi-enabled hotel without a pre-registered account, whose details are collected by hotel staff
• Hotel Operators & Staff — hotels, guesthouses, and accommodation providers registered on the Travdigi hotel portal
• Website Visitors — individuals visiting www.Travdigi.com

• Identity Data: Full name, date of birth, nationality, gender
• Contact Data: Email address, phone number — these are permanently locked after registration and cannot be changed
• Document Data: Government-issued ID (passport, national ID, or driving license), visa details, MRZ data — captured via document scanning (OCR) at registration
• Travel Data: Check-in history, hotel visits, timestamps — visible only to the traveler themselves
• Family / Group Data: Names and documents of dependents (children under 18) added under an adult profile
• Device Data: Device type, operating system, app version for technical support purposes

• Basic Identity: Name, mobile number, email address
• Document Photo: Photo of government-issued ID captured by hotel staff
• Check-In Record: Hotel name, check-in date and time, check-out date and time

• Business name, address, registration details, branch information
• Staff account details, roles, and access permissions
• Check-in and check-out records for their guests only
• Compliance report generation history and audit logs

We process your personal data on the following lawful bases:

• Enable instant hotel check-in using a dynamic, encrypted QR code
• Verify traveler identity through document scanning (OCR) and platform-level verification checks
• Generate legally compliant digital guest registers replacing paper registers
• Create and manage your Travdigi profile and personal travel history
• Send check-in confirmation and security alert emails for every check-in event
• Provide hotels with masked, watermarked guest details for operational compliance
• Generate on-demand watermarked timestamped PDF compliance reports for hotels
• Support authorized law enforcement access to check-in records under formal government authorization
• Generate anonymized tourism statistics for government tourism boards
• Prevent identity fraud through multi-layer verification and human review
• Comply with legal and regulatory requirements across all jurisdictions we operate in
• Improve app functionality, security, and user experience

We do not sell your personal data to any third party. Ever.

We share your data only in the following specific and controlled circumstances:

Travdigi uses a two-system split storage architecture designed for maximum security, compliance, and data sovereignty. Profile data and sensitive biometric files are stored in completely separate systems.

The following data for all users regardless of citizenship is stored in our primary encrypted database on AWS Mumbai region (ap-south-1):

• Full name, email address, phone number, date of birth
• Account status, login credentials (hashed)
• Check-in and check-out timestamps
• QR tokens and session data
• Audit logs and access records
• Hotel operational data including check-in and check-out records are currently stored on secured servers in India. Regional data storage for hotel operational data is being implemented and will be available in a future update.

Identity documents and ID photos are currently stored on our AWS Mumbai (ap-south-1) infrastructure, for all users regardless of citizenship, at this stage of our operations.

Hotels do not store any traveler identity data locally. Hotel systems contain only check-in and check-out timestamps and encrypted reference tokens. When a hotel generates a compliance report, traveler identity data is fetched in real time from our servers, combined with local timestamps, and delivered as a watermarked PDF. No identity data is retained locally by any hotel at any time after report generation.

All data is encrypted using AES-256 encryption at rest and TLS 1.3 in transit. SSL pinning is implemented in all mobile apps to prevent man-in-the-middle attacks.

When a hotel requires a guest record for submission to authority, immigration, or other legal authorities — a compliance report can be generated through the Travdigi hotel portal.

Every compliance PDF contains:

• Traveler identity proof — fetched from our servers at time of generation
• Check-in date, time, and location
• Check-out date and time
• Travdigi watermark on every page — tamper-proof
• Timestamp of report generation — cannot be backdated
• Digital audit reference number — traceable in Travdigi system

Travdigi uses a multi-layer dynamic QR system for hotel check-in:

• Rotates every 60 seconds — a screenshot of a QR code is useless within 60 seconds
• Single-use only — each QR code can be scanned exactly once. Duplicate scans are rejected automatically
• Contains no personal data — the QR contains only an encrypted short-lived token. No name, no document number, no personal information is embedded in the QR itself
• Token signed using HMAC-SHA256 — cryptographically secure and verifiable
• Offline capable — if a QR is loaded and the traveler loses connectivity, the loaded QR remains valid for that session. The hotel requires internet connectivity to complete the scan verification
• Role-based visibility at scan — when a hotel scans the QR, staff accounts see masked identity details and owner accounts see full identity details during the active check-in session only. Once check-in is confirmed — all identity details are immediately cleared from the hotel app screen.
• Documents accessible only on report generation — after check-in, identity documents are not browsable by any hotel staff or owner. They are accessible only when an authorised hotel owner generates an official compliance PDF report.
• Optional arrival and destination fields — hotel staff may optionally record the traveler's point of arrival and intended next destination at check-in. These fields are optional but recommended.
• Immediately deactivated on account deletion or suspension

Travdigi enforces strict role-based access control (RBAC) at both application and infrastructure level. Every role sees only what they need — nothing more.

We implement the following security measures to protect your data:

• AES-256 encryption for all data stored at rest in database and S3
• TLS 1.3 encryption for all data in transit between app, server, and portals
• SSL pinning in all mobile apps — prevents man-in-the-middle attacks
• AWS VPC — database not directly accessible from the public internet
• AWS KMS — encryption key management separate from encrypted data
• AWS CloudTrail — every API call, database access, and admin action is logged
• Dynamic single-use QR — rotating every 60 seconds, usable exactly once
• Zero local storage at hotels — no identity data stored at hotel level
• Immutable identity anchors — name and email locked permanently after registration
• Re-verification required for any profile change — QR suspended until admin re-approves
• Complete audit trails — every access event logged with who, when, what, and why
• Separate infrastructure — website, email, and app servers are on separate systems

In the event of a data breach that may affect your rights, we will notify affected users and relevant supervisory authorities within 72 hours as required by applicable law.

You can request deactivation of your Travdigi account at any time through:

• In-App: Profile → Settings → Delete Account
• Online: www.Travdigi.com/delete-account
• Email: hello@Travdigi.com with subject "Account Deletion Request"

Upon deactivation:

• Your profile, login credentials, and active account access will be permanently disabled within 30 days
• Your dynamic QR code will be immediately deactivated — unusable for any future check-in
• Your account will appear as inactive — not visible to any hotel or authority
• Check-in history, identity documents, and verification media will be retained as described in Section 12
• Retained data will never be used for any active commercial or operational purpose
• You will receive a confirmation email when deactivation is complete

When you check in at a Travdigi-enabled hotel without the Travdigi app, the hotel receptionist records your basic details using the Travdigi hotel portal for legal compliance purposes.

What is collected: Name, mobile number, email address, and a photo of your government-issued ID taken by hotel staff.

What happens:

• At the point of check-in, the receptionist will inform you that your details are being recorded digitally on Travdigi for compliance purposes
• You will receive a confirmation email at the address you provided, confirming your check-in details and hotel name
• A Travdigi profile is created linked to your email address
• You will be invited to activate this profile by setting a password — enabling instant QR check-ins at future hotel visits
• If you choose not to activate, your walk-in record remains for legal compliance purposes only and will not be used for any other purpose
• You will receive a one-time check-in confirmation email at the address provided. This is a transactional service notification required for compliance purposes and cannot be unsubscribed from. Your check-in record is maintained regardless of whether you receive or open this email — it fulfills a legal compliance obligation not dependent on your consent or acknowledgment

Travdigi is intended for users aged 18 and above only. We do not create independent accounts for minors.

Children under 18 may travel as dependents under a verified adult's profile for family or group check-ins:

• Children are added as sub-profiles under a verified adult account
• The adult account holder is the responsible party for dependent data
• No separate account, independent KYC, or direct data collection occurs for children
• Child profiles are managed entirely through and linked to the adult account
• When an adult account is deactivated, associated child profiles are also deactivated

If you believe we have inadvertently collected data from a minor without appropriate parental authority, contact us immediately at hello@Travdigi.com and we will take prompt corrective action.

Depending on your jurisdiction, you have the following rights regarding your personal data:

We will acknowledge all rights requests within 24 hours of receipt and resolve them within 15 days as required under the Information Technology Rules 2021 and India DPDP Act 2023.

Travdigi is committed to full compliance in every market we enter. We expand our compliance framework progressively and deliberately:

TravDigi's traveler app is available globally from Day 1 — any traveler worldwide may download and register. Our compliance framework is built progressively as we actively enter each market. Active marketing and hotel onboarding is currently focused on India, Oceania, and small Asian markets. Travelers from all other countries who discover TravDigi organically are welcome and their data is handled in compliance with applicable regional laws as described in this policy. We update this policy as we enter new markets and as our regional compliance framework expands. Hotel operational data is currently stored on secured servers in India. Regional data storage for hotel operational data will be implemented in a future update.

Our website www.Travdigi.com uses essential cookies for basic functionality only. We do not use advertising, tracking, or third-party analytics cookies without your explicit consent.

• Essential cookies: Required for the website to function correctly. Cannot be disabled.
• Analytics cookies: Used only with your explicit consent to understand website usage patterns and improve our service.

You can manage cookie preferences through your browser settings at any time. Rejecting non-essential cookies will not affect your ability to use our core services.

We update this Privacy Policy as we expand to new markets, add new features, or when applicable laws change. When we make material changes:

• We will update the Effective Date at the top of this policy
• "We will notify registered users of significant changes to this policy in advance through app notifications or email. Minor updates will be reflected in the Last Updated date. Continued use of Travdigi after any update constitutes acceptance."
• We will maintain a version history of this policy available on request
• Continued use of Travdigi after the effective date of changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically, especially when we announce entry into new international markets.