Your information, handled responsibly.

1. Scope and Pratra entities

Effective and last updated: 26 September 2026

This policy applies to pratra.com and to personal information collected from website visitors, prospective and current customers, developers, partners, suppliers and other business contacts through enquiries, onboarding, communications and related business activities.

“Pratra”, “we”, “us” and “our” refer to the Pratra entity responsible for the relevant interaction:

• Pratra Travel Technologies Private Limited, GoodWorks Infinity Tech Park, 92/A, 2nd Main Road, Electronics City Phase 1, Bengaluru 560100, India.
• Pratra Travel Technologies Inc., 50 California Street, Suite 1500, San Francisco, California 94111, United States.

The responsible entity normally is the entity identified in your proposal, order form, invoice, checkout, subscription or other agreement. Pratra Travel Technologies Private Limited administers this website. Pratra Travel Technologies Inc. is responsible where an enquiry, contract or service is handled by the US entity. Where the entities jointly determine how information is used for shared global operations, you may contact either entity through the contact details below.

Customer contracts, product-specific notices and data-processing agreements may provide additional information and will control if they conflict with this website policy for the relevant service.

2. Information we collect

We collect information you provide directly, including your name, business email, telephone number, company, role, country or region, company website, business type, IATA status, product interests, airline and market requirements, messages, support communications, account details and information included in commercial or onboarding documentation.

If you purchase services, the relevant Pratra entity may process billing contacts, invoice information, transaction references, payment status, tax information and limited payment-related data. Payment-card details are generally collected directly by the payment provider and are not intended to be stored by Pratra.

We also collect technical and usage information required to deliver and secure the website, such as IP address, browser and device information, requested pages, referring pages, timestamps, security signals and cookie preferences. Optional analytics information is collected only where permitted and, when required, after consent.

We may receive information from your employer or organisation, authorised representatives, business partners, public business sources, fraud-prevention and security providers, payment providers and service providers used to deliver our services.

Our website and services are directed to businesses and are not intended for children. We do not knowingly collect personal information from children through this website.

3. How and why we use information

We process personal information only where we have an appropriate purpose and legal basis. Depending on the jurisdiction and context, this may include performing or preparing to enter a contract, complying with law, pursuing legitimate business interests that do not override individual rights, and consent.

• Responding to enquiries, arranging demonstrations and evaluating business requirements.
• Managing technical onboarding, accounts, integrations, customer service and support.
• Preparing proposals, contracts, invoices and processing or reconciling payments.
• Operating, securing, troubleshooting and improving our website and services.
• Preventing spam, fraud, misuse and security incidents.
• Maintaining business, tax, accounting, compliance and audit records.
• Sending requested communications and, where permitted, relevant business marketing. You may opt out of marketing at any time.
• Establishing, exercising or defending legal claims and enforcing agreements.

We do not use personal information for materially different purposes without providing any notice or obtaining any consent required by applicable law. We do not make decisions producing legal or similarly significant effects based solely on automated processing through this website.

4. How we disclose information

We may disclose personal information between the Pratra entities and to personnel who need it for the purposes described above. We may also use carefully selected providers for cloud hosting and deployment, customer relationship management and form delivery, content management, communications, security and bot prevention, analytics, professional advice and payment processing.

Our current website operations may involve providers such as Vercel, Cloudflare, Zoho and Sanity. Payment providers applicable to a transaction will be identified during the payment process. Providers may process information only for contracted purposes, subject to their roles and applicable terms.

We may disclose information where required by law, to protect rights or security, in connection with a corporate transaction, or with your direction or consent. We do not sell personal information. We do not share personal information for cross-context behavioural advertising.

International transfers

Pratra operates across countries, and information may be processed in India, the United States and other locations where Pratra or its providers operate. Where the GDPR or similar law applies, we use an approved transfer mechanism where required, such as adequacy decisions or contractual safeguards, and apply supplementary technical and organisational measures as appropriate. You may contact us for information about safeguards relevant to your information.

5. Retention and security

We retain information for only as long as reasonably necessary for the purpose collected, including the duration of an enquiry or business relationship and applicable legal, tax, accounting, security and dispute-resolution periods. Retention varies by record type. When information is no longer required, we delete, anonymise or securely isolate it in accordance with our retention practices.

We use administrative, contractual and technical measures designed to protect personal information, including access controls, transport encryption, provider security controls, form validation and anti-abuse verification. No online system can be guaranteed completely secure.

6. Your choices and privacy rights

Depending on your location and applicable law, you may request access to, correction of or deletion of your information; object to or restrict processing; withdraw consent; request portability; opt out of marketing; or complain to a competent authority. Some rights are subject to legal exceptions. We may verify your identity and authority before acting on a request.

You will not be discriminated against for exercising an applicable privacy right. An authorised agent may submit a request where permitted by law, subject to verification.

7. Regional disclosures

European Economic Area and United Kingdom

Where the EU or UK GDPR applies, the responsible Pratra entity acts as controller for the processing described in this policy unless a contract states that Pratra acts as a processor on a customer’s behalf. Our legal bases include steps requested before entering a contract, performance of a contract, compliance with legal obligations, legitimate interests in operating and securing a business-to-business technology service, and consent where required.

You may exercise the rights described above and may lodge a complaint with the supervisory authority in the country where you live or work or where you believe an infringement occurred. Consent can be withdrawn at any time without affecting processing completed before withdrawal.

India

Where Indian data-protection law applies, you may request access to information about processing, correction, completion, updating or erasure of personal data, and use our grievance process. You may also exercise other rights available under applicable Indian law. We will process requests and grievances within applicable legal timelines.

California and other US states

During the preceding 12 months, we may have collected the identifiers, professional or employment-related information, commercial information, internet or electronic activity and limited payment-related information described in this policy. We use and disclose these categories for the business purposes described above. We do not sell personal information or share it for cross-context behavioural advertising, and we do not knowingly sell or share the personal information of minors.

If a US state privacy law applies to Pratra and to your information, you may have rights to know, access, correct or delete information and to appeal a decision about a request. Because we do not sell or share personal information for targeted advertising, we do not currently offer a sale or sharing opt-out link. We will recognise legally required browser-based preference signals if our practices change in a way that makes them applicable.

8. Cookies, local storage and analytics

We use essential browser storage to remember your cookie preference and support necessary website functionality. Cloudflare Turnstile processes security signals to distinguish legitimate submissions from abuse. Optional Vercel Web Analytics is loaded only after you select “Allow analytics”. You may choose “Essential only” or change your choice through “Cookie preferences” in the footer.

Withdrawing analytics consent prevents future optional analytics collection on this browser. It does not affect processing that occurred lawfully before withdrawal. Browser controls can also block or remove storage, although doing so may affect website functionality.

9. External links

Our website may link to third-party websites and services. Their privacy practices are governed by their own notices, and we encourage you to review them before providing information.

10. Contact and requests

For privacy questions, requests or grievances, email enquiry@pratra.com with the subject “Privacy request”. You may also write to either Pratra entity at the address listed in section 1. Please do not send identity documents unless we request them through an appropriate channel.

11. Changes to this policy

We may update this policy when our services, providers, corporate structure or legal obligations change. Material updates will be highlighted where appropriate, and the effective date above will be revised.