Last updated: 14 May 2026
HushBus ("we", "us", "our") operates the HushBus mobile and web application ("the Service") for booking APSRTC bus tickets and sending cargo parcels across Andhra Pradesh and Telangana, India.
This Privacy Policy explains how we collect, use, share, and protect your personal information. By using the Service you agree to the practices described below.
1. Information we collect
1.1 Provided by you
- Name, phone number, email, address (when you create an account or book)
- Sender + receiver name, phone, address, pincode (when sending cargo)
- Government ID type and number (only if you claim a concession ticket — verified by APSRTC conductor at the bus door)
- Payment information — processed by Razorpay; we do not store card details
1.2 Collected automatically
- Device information — device model, OS version, app version
- Approximate location — derived from the city you select (we do not access GPS)
- App usage — bookings, tracking searches (for your booking history)
- Crash reports — anonymised stack traces (when Sentry is enabled)
2. How we use your information
- Process and fulfil bus bookings and cargo shipments
- Send confirmations and tracking updates via SMS / Push / WhatsApp / Email
- Verify your identity for concession tickets (with APSRTC)
- Process payments via Razorpay
- Provide customer support
- Improve the Service (crash reports, performance metrics)
- Comply with APSRTC and Indian law requirements
3. Sharing of information
We share data only with the following parties, and only the minimum required:
- APSRTC OPRS — bus seat inventory and passenger manifest for govt records
- Supabase (AWS Mumbai region) — secure database hosting; PCI-DSS / SOC2 compliant
- Razorpay — payment processing; RBI-licensed, PCI-DSS Level 1
- MSG91 — SMS / OTP delivery; receives your phone number at send time only
- Sentry (optional) — anonymised crash reporting
We do not sell your personal information to advertisers or data brokers.
4. Data retention
- Account information: while your account is active + 1 year after deletion
- Booking and cargo records: 7 years (Indian tax + APSRTC audit requirements)
- Payment records: 7 years (RBI / GST audit)
- Crash reports: 90 days
5. Your rights
You can:
- View your booking history in the app
- Update your profile information
- Request deletion of your account by emailing support@hushbus.online with subject "Delete my account" — we will delete within 30 days, except records we are legally required to retain (tax + APSRTC audit)
- Request a copy of your data at the same email
6. Children's privacy
The Service is intended for users aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact support@hushbus.online and we will delete it.
7. Security
- All data in transit is encrypted via HTTPS / TLS 1.2+
- Database is encrypted at rest (Supabase + AWS)
- Phone numbers on public tracking pages are masked (e.g., XXXXX-67890)
- OTPs expire in 15 minutes
- No card details are stored — Razorpay tokenises everything
8. Changes to this policy
We may update this policy from time to time. Material changes will be notified via in-app banner or email at least 30 days before they take effect.
9. Contact
Email: support@hushbus.online
Operator: HushBus, Hyderabad, Telangana, India
Founders: sv · rg
For grievances under the Indian Information Technology Rules 2021, contact the Grievance Officer at the same email.