01Who we are
Labbyk is a product of Hanigo Tech Private Limited, a company incorporated in India (CIN U62099KA2026PTC226644) with its registered office in Bengaluru, Karnataka, India (“Labbyk”, “we”, “us”). Labbyk helps Umrah and Hajj travel agencies build and run their websites.
This policy covers labbyk.in, the agency dashboard, and the agency websites we host on Labbyk subdomains and custom domains. It is published in line with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”).
Our two roles
- For agencies and visitors to labbyk.in, we decide why and how your data is used, so we are the data fiduciary.
- For pilgrims who enquire on an agency’s website, the agency decides how their details are used, so the agency is the data fiduciary. We store and process those details on the agency’s behalf, as its data processor, only to provide the service.
02Information we collect
Information you give us
- Account details: your name, email address and password. Passwords are stored only as a one-way hash. If you sign in with Google, we receive your name, email address and profile picture from Google.
- Agency and website content: business name, logo, licence and accreditation numbers, phone and WhatsApp numbers, address, packages, prices, photos, policies, FAQs and anything else you add to your website.
- Flyers and brochures you upload for our AI to read.
- Billing details: business name, state, billing address, GSTIN (optional), your plan and invoices. Payments are handled by Cashfree Payments. We never receive or store your full card number, UPI PIN or netbanking credentials.
- Messages you send us by email or through support.
Information collected on agency websites
- Pilgrim enquiries: when a pilgrim fills in an enquiry or contact form, we collect their name, mobile number and, if given, email address, chosen package, number of travellers, room type, preferred departure and message, and pass them to that agency.
- Visit counts: agency websites count page views and WhatsApp taps per day. These counts are anonymous: no cookies are set, and no IP addresses or browser details are stored with them.
Information collected automatically
- Analytics on Labbyk’s own pages (labbyk.in, sign-in, onboarding and the dashboard): pages viewed, referring site, device and browser type and approximate location, through Google Analytics. Google Analytics is never loaded on agency websites.
- Security logs: IP address, browser and request times, used to keep the service secure, limit abuse and investigate problems.
03How we use it
- To create and secure your account, and to keep you signed in.
- To build, publish and host your agency website, including on your custom domain.
- To read uploaded flyers and pre-fill package details for you to review.
- To send service emails: new-enquiry alerts, password resets, trial and billing notices, and invoices.
- To process subscription payments, issue invoices and meet our tax and accounting obligations.
- To prevent fraud, spam and abuse, and to enforce our Terms of use.
- To understand, in aggregate, how Labbyk is used so we can improve it.
- To meet legal obligations and respond to lawful requests from authorities.
We do not sell personal data, and we never use pilgrims’ enquiry details to market to them ourselves.
We process personal data with your consent, or for the legitimate uses the DPDP Act allows, such as data you give us voluntarily for a specific purpose and data we must keep by law. Where we rely on consent, you can withdraw it at any time. Withdrawing consent doesn’t affect processing that happened before, but it may mean we can no longer provide parts of the service.
06Where your data is processed
Some of our service providers process data on servers outside India. We transfer personal data abroad only as permitted under the DPDP Act and any restrictions notified by the Government of India, and we choose providers that protect it to a standard at least as high as this policy.
07How long we keep it
- Account and website data is kept while your account is open. If a subscription lapses, your website is paused, not deleted, so you can switch it back on.
- Pilgrim enquiries are kept until the agency deletes them or closes its account.
- When you ask us to delete your account, we delete your data within 30 days. Copies in backups are overwritten within a further 90 days.
- Invoices and payment records are kept for eight years, as Indian tax and company law require.
- Security logs are kept for a short period, normally no more than 180 days, unless we need them to investigate an incident.
08How we protect it
We use reasonable security practices, including encryption in transit (HTTPS), hashed passwords, strict separation between agencies’ data, rate limiting, and access to production systems limited to the people who need it.
No system is perfectly secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.
09Your rights
Under the DPDP Act, you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct, complete or update it;
- erase it, unless we must keep it by law;
- withdraw consent you have given;
- nominate someone to exercise these rights if you die or become incapacitated.
Write to [email protected] from the email address on your account. We may need to verify your identity before acting, and we reply within 30 days. You can correct most account and website details yourself in the dashboard at any time.
If you enquired with an agency, please contact that agency first, since it controls your enquiry. If you can’t reach it, write to us and we will pass your request on and help where we can.
10Children
Labbyk is a business service for adults. We don’t knowingly create accounts for, or collect data from, anyone under 18. If you think a child has given us personal data, write to [email protected] and we will delete it.
11Changes to this policy
We may update this policy as Labbyk or the law changes. We will change the “last updated” date above and, for significant changes, tell account holders by email or in the dashboard before they take effect.
12Grievance officer and contact
For questions, requests or complaints about your personal data, contact our Grievance Officer. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.
Grievance Officer
Hanigo Tech Private Limited
Bengaluru, Karnataka, India
Email: [email protected]
If you are not satisfied with our response, you may complain to the Data Protection Board of India.