Privacy policy

When you create an account, we collect your phone number, full name, and (optionally) Tazkira number. When you make a booking, we collect passenger details for everyone in the reservation.

We automatically collect basic technical data: device type, IP address, browser version, and pages visited, to improve service quality and prevent fraud.

Primarily: to complete bookings, deliver tickets, process payments, and provide customer support. We share only the minimum needed information with operators (passenger name, seat, Tazkira) so they can confirm identity at boarding.

We may use anonymized, aggregated data for analytics and to improve route planning. We do not sell your personal data to third parties.

We never store full payment credentials. HesabPay, mobile money providers, and card processors handle authentication directly. We only retain a reference token to enable refunds and dispute resolution.

You can view, edit, or delete your account data from Profile at any time. You can request a full data export by contacting privacy@afghanbus.af.

You can opt out of marketing notifications without affecting booking confirmations and travel alerts.

Account data is kept while your account is active. Booking records are retained for 7 years to comply with tax and audit requirements. Anonymized analytics data may be retained indefinitely.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production data is limited to authorized engineers with two-factor authentication. We perform regular security audits.

We may update this policy from time to time. Material changes will be announced via email or SMS at least 30 days before they take effect.