Privacy Policy

This policy describes how the AgencyNX mobile app and platform handle personal data. It is provided for transparency and is not legal advice.

1. Who we are

AgencyNX ("AgencyNX", "we", "us", or "our") is a travel-agency management application operated by Khajoora Tech, based in Rajkot, Gujarat, India.

• Company / operator: Khajoora Tech
• Registered address: Office No. 813, The Spire 2, Near Shitalpark Circle, 150 Feet Ring Road, Rajkot, Gujarat - 360006, India
• Contact email: support@agencynx.com
• Grievance / data protection contact: Vikash Detroja, Grievance Officer, Khajoora Tech — support@agencynx.com

2. Who this policy is for

AgencyNX is a business tool used by travel agencies that subscribe to the AgencyNX platform, and by their staff. You use the app with an account provided by your agency or by us. The app is intended for business users and is not directed to children.

3. What data we collect

Account and profile data: your name, email address and (if provided) phone number; your user and agency identifiers, role and permissions. Your password is used to sign you in — it is sent securely to our servers for authentication and is not stored on your device.

Business data you and your agency manage: when you use AgencyNX you view and enter your agency's operational records, which may include personal data about your agency's own customers and leads — names, emails, phone numbers, addresses, GST/tax numbers and notes, along with bookings, proposals, invoices, receipts, payment records, wallet balances, credit limits and outstanding amounts. Your agency is responsible for the personal data of its own customers that it enters; AgencyNX processes that data on the agency's behalf.

Device and technical data: a push notification token (Firebase Cloud Messaging registration token) that identifies your device so we can deliver notifications, linked to your account and removed when you sign out; and standard technical data necessary to operate the service.

What we do not collect: we do not collect your location, we do not use advertising identifiers or serve ads, and we do not include third-party analytics or crash-tracking SDKs in the app.

4. How we use your data

• Authenticate you and keep you signed in securely.
• Provide the app's features — CRM, bookings, invoicing, payments and reports.
• Send you notifications relevant to your work (for example, a lead assigned to you, a new booking, a follow-up due, or a payment reminder).
• Maintain the security and integrity of the service.
• Comply with legal obligations.

We do not sell your personal data, and we do not use it for advertising.

5. Legal basis for processing

Where applicable, we process personal data to perform our contract with you and your agency, to pursue our legitimate interests in operating and securing the service, to comply with legal obligations, and/or with consent where required.

6. Who we share data with

• Google (Firebase Cloud Messaging): we use Firebase Cloud Messaging to deliver push notifications. Your device's notification token and the content of notifications are processed by Google to deliver messages. See Google's privacy policy.
• Hosting and infrastructure providers that process data on our behalf: Railway (application backend / API), Neon (managed PostgreSQL database), Vercel (website hosting), and Google Firebase (push notifications).
• Legal and safety: we may disclose data if required by law, regulation, legal process, or to protect the rights, property or safety of AgencyNX, our users, or others.

We do not share your personal data with third parties for their own marketing.

7. International transfers

Some of our service providers (including Railway, Neon, Vercel and Google Firebase) may store or process data on servers located outside India, including in the United States. Where data is transferred internationally, we rely on those providers' contractual and technical safeguards and take steps intended to ensure your data remains protected.

8. Data retention

We retain account and business data for as long as your agency's account is active and as needed to provide the service. After an account is closed, or on a verified deletion request, we delete or anonymise personal data within 90 days, except where we are required or permitted by law to retain it. In particular, financial and transactional records (such as invoices, receipts and payment records) may be retained for up to 8 years to comply with Indian tax and accounting requirements. Push notification tokens are retained while your device is registered and are removed on sign-out.

9. How we protect your data

• All communication between the app and our servers is encrypted in transit using HTTPS/TLS.
• Session tokens are stored in the device's encrypted, OS-backed secure storage (Android Keystore).
• Access to data within the app is governed by your role and permissions.

No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

10. Your rights and choices

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023), you may have the right to access, correct or delete your personal data, to withdraw consent where processing is based on consent, and to raise a grievance with our grievance contact (Section 1). Because your account is provided through your agency, some requests may be handled together with your agency administrator.

11. Deleting your data

To request deletion of your account and associated personal data, email us at support@agencynx.com with your request. We will verify your request and delete or anonymise your personal data, except where we are required or permitted by law to retain it (see Section 8). If you are a staff user, deletion may also be initiated by your agency administrator. You can disable notifications at any time in your device settings, and signing out removes your device's push token from your account.

12. Children's privacy

AgencyNX is a business application and is not intended for use by children under the age of 18. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version at this URL and revise the "Last updated" date. Material changes will be communicated as appropriate.

14. Contact us

If you have questions or requests regarding this policy or your personal data, contact: