YTCorporation (“we”, “us”, “our”) operates AutoMotor, including this website and the AutoMotor Chrome extension (together, the “Service”). This Privacy Policy explains what information we collect, how we use it, and your choices.

1. Who we are
   AutoMotor is an independent product operated by YTCorporation. AutoMotor is not affiliated with Indian Railways, IRCTC, or any government entity. For privacy-related questions, contact us at support@ytcorp.in.
2. Information we collect
   Account information. When you sign in, we collect your WhatsApp mobile number to send a one-time password (OTP) and to create or identify your account. OTP delivery is handled through WhatsApp messaging services (Meta).

Subscription and payment information. When you purchase a plan on this website, payment is processed by Razorpay. We receive payment status, order identifiers, plan purchased, and related transaction metadata. We do not store your full card, UPI PIN, or net-banking credentials on our servers.

Technical and usage data. When you use our API (from the website or extension), we may process your IP address, request timestamps, and authentication tokens to provide the Service, prevent abuse, and apply rate limits.

Data stored on your device (extension). The following stays on your device unless you use a cloud-synced browser profile: IRCTC login credentials (encrypted locally if you choose to save them), passenger profiles, journey templates, automation settings, optional LLM API keys for CAPTCHA assist, schedule configurations, and a cached subscription status snapshot. We do not receive your IRCTC password unless you explicitly save it locally in the extension — it is not uploaded to our servers.

1. How we use information
   We use collected information to:

Authenticate you via WhatsApp OTP and maintain your account session
Provide, operate, and improve the Service
Verify active subscriptions and authorize use of automation features
Process payments and maintain transaction records
Detect fraud, abuse, and security incidents
Respond to support requests and legal obligations
We do not sell your personal information. We do not use your data for unrelated advertising or cross-site tracking.

1. Third-party services
   We rely on trusted third parties to deliver parts of the Service:

Razorpay — payment processing on this website. Razorpay’s privacy policy applies to payment data they collect.
Meta / WhatsApp — OTP delivery to your WhatsApp number when you request login.
Cloud hosting providers — our API and database infrastructure.
Optional CAPTCHA providers (user-enabled) — if you enable AI CAPTCHA assist in the extension and provide your own API key, the extension may send CAPTCHA images directly to Google (Gemini) or OpenAI from your device. That communication is between your browser and the provider you choose; we do not receive your CAPTCHA images unless we explicitly add such a feature in the future.
5. Cookies and local storage
This website may use browser local storage to keep you signed in and remember session preferences. The extension uses Chrome storage APIs to save your settings and encrypted credentials locally. We do not use third-party advertising cookies on this website.

1. Data retention
   We retain account and subscription records for as long as your account is active and as needed for legal, tax, and fraud-prevention purposes. OTP records expire automatically after a short period. Payment logs are retained in line with business and regulatory requirements. You may request deletion of account-related server data by contacting us; local extension data can be removed by logging out, clearing extension storage, or uninstalling the extension.
2. Security
   We use industry-standard measures including HTTPS, encrypted credential storage in the extension, rate limiting on authentication endpoints, and access controls on our backend. No method of transmission or storage is 100% secure; you are responsible for keeping your device and WhatsApp account secure.
3. Your rights and choices
   Depending on applicable law, you may have the right to access, correct, or delete personal data we hold about you, or to object to certain processing. To exercise these rights, email support@ytcorp.in. You can stop using the Service at any time by uninstalling the extension and discontinuing use of the website.
4. Children
   The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
5. International users
   The Service is operated from India and intended primarily for users booking on IRCTC. If you access the Service from outside India, your information may be processed in India and other countries where our service providers operate.
6. Changes to this policy
   We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after changes constitutes acceptance of the updated policy. Material changes may also be communicated on this website.
7. Contact
   YTCorporation
   Email: support@ytcorp.in
   Website: https://automotor.cloud