Privacy Policy
How Cabad collects, uses, and protects the data you and your team entrust to us.
1. Introduction
This Privacy Policy explains how Cabad Services Private Limited ("Cabad", "we", "us") handles personal and business information when you use our platform and website. We are committed to protecting employee travel and spend data with the care it deserves.
2. Information We Collect
We collect the following categories of information:
- Account information, names, work emails, roles, and organization details.
- Booking & expense data, trip details, fares, categories, and policy checks generated when your team books through Cabad.
- Integration data, information shared by connected calendar, communication, accounting, and payment tools.
- Usage data, how the Service is used, for security, diagnostics, and improvement.
- Enquiry data, details you submit through our contact form.
3. How We Use Information
We use information to provide and operate the Service, booking travel, logging and categorizing expenses, running policy checks, and generating reports. We also use it to secure the platform, support your team, respond to enquiries, and improve our features.
4. Legal Basis for Processing
We process data where it is necessary to perform our contract with your organization, where we have a legitimate interest in operating and improving the Service, to comply with legal obligations, and, where applicable, on the basis of consent.
5. Sharing & Disclosure
We do not sell personal data. We share information only as needed to deliver the Service, for example, with ride, travel, and payment partners to fulfil a booking, or with infrastructure providers who process data on our behalf under appropriate safeguards. We may disclose information where required by law.
6. Data Security
Data is encrypted in transit and at rest. Access is governed by role-based permissions, and each organization's data is kept in an isolated workspace with no cross-tenant access. Every booking and approval action is logged and available for audit.
7. Data Retention
We retain data for as long as your organization uses the Service and as needed to meet legal and accounting obligations. Administrators can configure retention windows to match internal policy, and data can be exported before deletion.
8. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, export, or request deletion of personal data. Because Cabad processes much of this data on behalf of your employer, requests may be routed through your organization's administrator. Contact us and we'll help facilitate valid requests.
9. Cookies
Our website uses essential cookies to operate the Service and may use limited analytics to understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.
10. International Transfers
Where data is transferred across borders, we apply appropriate safeguards consistent with applicable data-protection law to ensure it remains protected.
11. Changes to This Policy
We may update this policy periodically. When we make material changes, we update the "last updated" date above and, where appropriate, notify account administrators.
12. Contact
For privacy questions or requests, reach us through the contact page, or write to: Cabad Services Private Limited, Row Hou-2, Krishna Heritage CHS, Linking Road, Opp. Don Bosco School, Borivali (West), Mumbai, Maharashtra 400091, India.