Draft, pending founder review. This page is not final and may change.

Privacy Policy

Last updated: 16 October 2026

This policy explains how ANBUOPS PRIVATE LIMITED ("we") processes personal data, in line with the Digital Personal Data Protection Act, 2023 (DPDP Act). We are the Data Fiduciary for the data described here.

1. Data we collect

• Account data: email address and a one-way (argon2id) hash of your password. We never store your password itself.
• Trip inputs: cities, dates, cabin, passenger counts, the card types you pick and the point balances you type in. We do not ask for card numbers, and you should not enter them.
• Payment data: order and payment references, amount, and the email or phone number you give for the receipt. Card or UPI details go directly to Razorpay and are not seen or stored by us.
• Feedback you choose to send on a plan.
• Technical data: IP address and request logs, used for security and rate limiting.

2. Why we use it (purpose and legal basis)

To provide plans, save your trips, process payments and receipts, prevent abuse, and improve the service. We process data on the basis of your consent, given when you use the service or create an account, and for legitimate uses permitted under the DPDP Act (such as complying with law). We do not sell personal data or use it for third-party advertising.

3. Sharing

We share data only with service providers who process it for us: Microsoft Azure (hosting, India region), Razorpay (payments) and, if you use it, Google (sign-in). Share links you create show the plan only, never your email, phone or account id. You can revoke a share link at any time.

3a. Aggregated statistics

We never sell personal data. We may share or sell only aggregated, anonymised statistics about travel trends (for example, popular routes or cabins). Each statistic covers a group of at least 50 people, and no individual can be identified from it.

4. Retention

We keep account and trip data while your account is active, and delete it within 30 days of a deletion request, except payment records we must keep under tax and accounting law (generally 8 years).

5. Your rights

Under the DPDP Act you may: access a summary of your personal data; correct or update it; ask us to erase it; withdraw consent (this may stop parts of the service); nominate another person to exercise your rights; and raise a grievance. Email us to exercise any of these. We will respond within 30 days.

6. Children

The service is not meant for anyone under 18, and we do not knowingly process children's data.

7. Security

Passwords are hashed, traffic is encrypted (HTTPS), cookies are HttpOnly, and access to data is restricted. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as the law requires.

8. Grievance officer

Grievance Officer, ANBUOPS PRIVATE LIMITED, 118/217 Kushalpuri, Gumti No. 5, Govind Nagar West, Kanpur Nagar 208006, Uttar Pradesh, India. Email: anbuops.pvt@gmail.com. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

MileZap is operated by ANBUOPS PRIVATE LIMITED · CIN U62020UP2026PTC253312
118/217 Kushalpuri, Gumti No. 5, Govind Nagar West, Kanpur Nagar 208006, Uttar Pradesh, India
Email: anbuops.pvt@gmail.com