Privacy Policy
Last updated 13 November 2026
Quick-Tatkal is a product of FORTIS AI. This page explains what we collect, why, and the choices you have. The short version: your passenger and journey details stay in your own browser, and we never ask for your IRCTC password.
1. What this covers
The Quick-Tatkal website, the servers behind it, and the Quick-Tatkal Chrome extension. In this policy, “we” means FORTIS AI.
2. What we collect
- Account details: your name, email address, and phone number if you give one. Your password is stored only as a one-way hash, so nobody, including us, can read it.
- Plan and payment records: which plan you bought, its start and end dates, the Razorpay order and payment IDs, the amount, and the payment status. Your card, UPI or bank details are entered in Razorpay’s payment window and never reach our servers.
- Your connected browser: a label such as “Chrome on Mac”, a public key created by the extension on your device, and when it was connected and last used. We use this to keep your account to one browser at a time and to protect your plan from being copied.
- Security and technical records: your IP address, browser type and the time of requests in our server logs, and a record when the extension detects that its plan data was tampered with.
- Emails: we send you verification, password reset and notice emails. Our email provider keeps delivery records for them.
3. What we do not collect
- Your booking details. Passengers, journeys, preferences and saved profiles are stored only in the extension’s storage inside your own browser, separately for each account. They are never sent to our servers.
- Your IRCTC username or password. You log in to IRCTC yourself. The extension does not ask for, read or store your IRCTC credentials, OTPs, CAPTCHA answers, or card details.
- Your browsing. The extension runs only on irctc.co.in pages, to fill the booking forms you have set up, and on this website, to connect to your account. It does not read other sites.
4. How we use your data
- To create your account, sign you in, and keep it secure.
- To take payment, activate your plan, and keep the plan accurate (including refunds and expiry).
- To send emails you need: verification, password reset, new-browser and password-change notices, and replies to your messages.
- To prevent abuse, fraud and account sharing, and to find and fix problems.
- To meet legal, tax and accounting obligations.
We do not sell your data and we do not show ads. We do not use advertising or analytics trackers on this site.
5. Who we share it with
- Razorpay, our payment provider, which handles your payment details under its own privacy policy.
- Our hosting, database and email delivery providers, who process data only to run the service for us.
- Authorities, where the law requires it or to protect our rights.
6. Cookies
We use one cookie, to keep you signed in. It is set by our server, hidden from page scripts, sent only over HTTPS, and lasts up to 30 days or until you log out. We do not use advertising or analytics cookies. The Razorpay payment window may set its own cookies.
7. Security
Data travels over HTTPS. Passwords are hashed. Plan tokens are digitally signed and tied to your browser’s key. Access to our systems is limited. No online service can promise perfect security, so please use a strong, unique password.
8. How long we keep it
We keep your account data while your account exists. Payment records are kept for as long as tax and accounting law requires. Server logs are kept only as long as needed for security and troubleshooting. Your booking details live in your browser, and you can remove them by removing the extension.
9. Your choices and rights
You can ask us to show you the personal data we hold, correct it, or delete your account and the data tied to it (we may have to keep payment records), and you can withdraw your consent to our processing. Email support@fortisai.in from the address on your account. We will reply and act within a reasonable time and in line with the Digital Personal Data Protection Act, 2023 and other Indian law that applies.
10. Children
Quick-Tatkal is meant for adults. We do not knowingly collect data from anyone under 18.
11. Changes
If we change this policy we will update the date at the top, and tell you by email if the change is significant.
12. Contact and grievances
Questions, requests, or a complaint about how we handle your data: write to FORTIS AI at support@fortisai.in. More ways to reach us are on the contact page.