OriginAtlas

Privacy Policy

This policy explains what personal data OriginAtlas collects, how we use it, who we share it with, and the choices you have.

Last updated 9 July 2026

1. Scope & our two roles

OriginAtlas (“we,” “us”) is a platform that travel agents (“Merchants”) use to run online stores. Our relationship to personal data depends on whose data it is:

  • For Merchant account data, we act as the data controller — we decide how your account and billing information is handled.
  • For the data a Store collects about its Customers (bookings, enquiries, trip estimates), the Merchant is the controller and OriginAtlas acts as a processor, handling that data on the Merchant’s behalf and under their instructions. If you are a Customer of a store, that store’s operator is your first point of contact for your data.

2. Data we collect

From Merchants (account holders)

  • Name and email address used to create and sign in to your account.
  • A securely hashed version of your password — we never store your password in plain text.
  • Store configuration: store name, branding, themes, product and vehicle listings, rate cards and connected domain.
  • Payment-provider credentials (for example, your Razorpay key ID, secret and webhook secret) which are stored encrypted at rest and used only to enable checkout and verify payments on your own Store.
  • Platform subscription and billing records.

From Customers (via a Merchant’s Store)

  • Contact and order details entered at checkout or in an enquiry — such as name, email and phone number — and the items or trips booked.
  • Trip-estimate inputs — the pickup and destination locations you enter to get a distance-based fare, which are sent to a mapping/geocoding provider to compute the estimate.

Automatically

  • Technical and usage data such as IP address, browser type, pages visited and timestamps, collected in server logs to operate and secure the service.
  • Essential cookies (see Section 4).

3. How we use data

  • To provide, operate, maintain and secure the Platform and the Stores it hosts.
  • To authenticate Merchants and keep accounts secure.
  • To process platform subscription billing.
  • To enable storefront checkout and route bookings to the Merchant’s payment account.
  • To compute trip-cost estimates from the locations a Customer provides.
  • To detect, prevent and respond to fraud, abuse and technical issues.
  • To comply with legal obligations and enforce our Terms.

4. Cookies

We use a small number of strictly necessary cookies rather than advertising or cross-site tracking cookies:

  • A signed session cookie that keeps a Merchant logged in to the dashboard.
  • A cart cookie that lets a Customer’s shopping cart persist on a Store during checkout.

These cookies are essential to the service; disabling them may prevent sign-in or checkout from working.

5. Payments & card data

OriginAtlas does not collect, process or store Customers’ card numbers or other full payment-instrument details. Booking payments are handled by the Merchant’s own Razorpay account; payment-card data is processed by Razorpay under its own privacy and security practices. We only receive the payment references needed to confirm that an order was paid.

6. Who we share data with

We do not sell personal data. We share data only with service providers that help us run the Platform, and only as needed:

  • Payment processing — Razorpay, to enable checkout and verify payments on a Merchant’s Store.
  • Hosting, database and file storage — cloud infrastructure providers that host the application, database and uploaded images.
  • Mapping & geocoding — the provider that turns the estimator’s locations into coordinates and distances.
  • Optional AI features — where a Merchant explicitly triggers an AI SEO suggestion, the relevant store content is sent to the AI provider to generate that suggestion. This is off by default and never runs automatically.
  • Legal & safety — authorities or advisors where required by law, or to protect our rights, users and the Platform.

Between Merchants: a Store’s Customer data is accessible to that Store’s Merchant only. The Platform is multi-tenant and isolates each Store’s data from others.

7. Data retention

We keep personal data for as long as your account or Store is active, and afterwards only as long as needed to fulfil the purposes described here, resolve disputes, and meet legal, tax and accounting requirements. Merchants can request deletion of their account data as described below; Customers should direct such requests to the relevant Store.

8. Security

We use reasonable technical and organisational measures to protect personal data, including transport encryption (HTTPS), hashing of account passwords, and encryption at rest for stored payment-provider credentials. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and to respond appropriately to any incident.

9. Your rights & choices

Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing.

  • Merchants can update most account and store information directly in the dashboard, or contact us to exercise other rights.
  • Customers of a Store should contact that Store’s operator, who controls their data; we will assist the Merchant as their processor where needed.

To make a request to OriginAtlas, email privacy@originatlas.shop. We may need to verify your identity before acting on a request.

10. International transfers

Our service providers may process data in countries other than your own. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.

11. Children

The Platform is intended for businesses and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Platform after changes take effect means you accept the updated policy.

13. Contact

For any privacy question or request, contact us at privacy@originatlas.shop.