Your customers trust you with their passports
Flyett protects traveller data, keeps each agency’s records separate, and gives you the DPDP and GST tools an Indian agency needs, built into the product you already use.
Only your team gets in
Two-step sign-in and passkeys for the people who run your bookings, and sessions that close on their own.
Two-step sign-in
Owners, admins and agents can add an authenticator app or a passkey from Security & MFA, with backup codes for a lost phone. Once it is on, every new sign-in asks for it.
Passkeys
Sign in with a fingerprint, face or device PIN instead of a password. There is nothing to type, so nothing to phish.
Idle sessions sign out
A session that sits unused ends on its own, so a desk left open does not stay signed in.
Access ends when you say
Disable a team member from the Team page and their access stops, on every device.
Set up in a minute, from your own profile
Owners, admins and agents turn on two-step sign-in for themselves. Scan a code with an authenticator app, or register a passkey on a laptop or phone. Backup codes cover the day a phone goes missing.
- Authenticator apps and passkeys
- One-time backup codes
- Sign in with Google also supported
Traveller data, handled with care
Passport numbers and personal details are encrypted, masked where people look at them, and kept out of logs.
Traveller data encrypted
Names, dates of birth, nationality, passport numbers and PAN are encrypted field by field before they are stored.
Passports masked on screen
Passport numbers show only their last four characters. Revealing the full number is one at a time, and each reveal is written to the audit log.
Your agency’s data stays yours
Each agency’s data is kept separate. Every request is checked against your agency before any record is read or changed.
Supplier credentials sealed
The supplier accounts you connect are stored encrypted. Logs of supplier calls keep credentials and traveller details sealed, not in plain text.
Personal data kept out of logs
Names, contact details, passport and PAN numbers are stripped from error reports before they leave our servers.
Hosted in India
The Flyett application and its database run on Google Cloud in the Mumbai region.
Everyone sees what their job needs
Give each person a role, and Flyett keeps a trail of what happens on your account.
- Roles for owners, admins, agents, accountants and compliance officers
- More than one role for the person who wears two hats
- Account Activity: bookings, payments, refunds, sign-ins and admin changes in one trail
- Corporate clients get their own roles, approvals and audit log
Ready for India’s data protection law
Consent, erasure and retention are part of the product, not a spreadsheet on the side.
- Consent recorded, with the exact wording shown, for cookies and tracking and for passport scanning
- A public “delete my data” page on your booking site, verified by a one-time code to the traveller’s e-mail or phone
- Erasure carried out after a short cooling-off period, with an e-mail to the traveller when it is done
- Booking personal data masked automatically once its retention period ends
- Invoices kept for the tax record, as GST law requires
Invoices your accountant can file
Tax documents come from the same booking record, so the numbers match.
- GSTIN checked for format and checksum before it reaches an invoice
- GST invoices raised with each booking, and credit notes when one is cancelled
- An e-invoicing register to generate, cancel and track IRNs
- Exports for Tally, Zoho and NetSuite
Want the details?
We are happy to walk your team through how Flyett handles sign-in, traveller data and erasure requests.
Talk to us about security
Bring your questions on traveller data, DPDP and GST. We will show you where each one lives in Flyett.