Last updated 15 October 2026
This policy explains how Marketsync Global Ltd., trading as Trips.bd, handles your personal data in the Trips.bd app and at https://app.trips.bd. We are the data controller.
Account data — email address, password (stored hashed) and the name you enter at sign-up
Why: To create and secure your account and let you sign back in
Retention: Until you delete your account
Booking request data — traveller name, email, phone, dates, group size and your notes
Why: To source and fulfil the booking request you send us
Retention: Until you delete your account; anonymised amounts kept for 6 years for accounting
Support messages you send us in the app
Why: To answer your question
Retention: Until you delete your account
Saved listings and in-app notifications
Why: To show your shortlist and the status of your requests
Retention: Until you delete your account
Payment records — amount, EPS transaction ID, payment method type (e.g. bKash, card) and payment status
Why: To take payment for a staff-confirmed booking, issue receipts and process refunds
Retention: Deleted with your account. A pseudonymised record of the booking amount (no name, email, phone or EPS transaction ID) is kept 6 years for Bangladesh accounting and tax obligations
Crash and error diagnostics — error message, screen, device and app version
Why: To find and fix crashes so the app stays stable
Retention: 90 days. Email addresses, phone numbers and access tokens are stripped before the report leaves your device
We do not collect precise location, contacts, health data or advertising identifiers, and we never open your camera or photo library. We do not store your search terms. Payments are entered on EPS's hosted checkout, so we never receive your card or wallet details. We do not sell personal data, and we do not use it for advertising or profiling.
Supabase, our database and authentication provider, stores the data on our behalf. When you send a booking request, we pass only the details needed for that booking (traveller name, dates, group size, contact number) to the hotel, airline agent or transport operator fulfilling it. When you pay, EPS receives your name, email, phone and the amount to process the payment. Intercom runs the support chat in the Help Centre, our hosting and content network delivers the app, and Sentry receives crash diagnostics with personal details already stripped out. All of these act only on our instructions. Nothing else is shared, and nothing is shared for advertising.
You can access, correct, export or delete your data. Deletion is immediate and self-service at app.trips.bd/account/delete: it removes your account, profile, requests, saved items, notifications and support messages. Anonymised transaction amounts (no name, email or phone) are kept for six years to meet Bangladesh accounting and tax obligations, alongside a short proof-of-deletion record that holds no name, email address or phone number.
To exercise any other right, email privacy@trips.bd. We respond within one business day and complete requests within 30 days.
Trips.bd is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has an account, email privacy@trips.bd and we will delete it.
Data is encrypted in transit, held in access-controlled databases with row-level security so one traveller can never read another traveller's records, and accessible to a small number of staff who need it to fulfil bookings.
Marketsync Global Ltd. · Kashidanga City Gate, Rajpara, Rajshahi-6201, Bangladesh
Phone: +8801540723530
Privacy: privacy@trips.bd