Privacy Policy

Last updated 29 August 2026

Trips.bd ("we", "us") operates the Trips.bd website and Android application, a travel marketplace for stays, flights, trains, airport transfers, car rentals, activities and eSIM in and around Bangladesh. This policy explains what we collect, why, and the control you have over it.

Data we collect

  • Account data — email address, name, and (optionally) phone number and avatar, created when you register or sign in with Google or Apple.
  • Booking data — searches, selected inventory, travel dates, traveller counts, booking references, order status and totals.
  • Support data — messages and form submissions you send us.
  • Device and usage data — app version, device type, coarse language/region, crash and performance diagnostics.

We do not collect precise location, contacts, photos, SMS, call logs, or financial instrument numbers in the app.

How we use it

  • To create and secure your account and keep you signed in.
  • To process booking requests and show your trips and order status.
  • To send transactional notifications about your bookings.
  • To provide customer support and resolve disputes.
  • To detect fraud, abuse and to meet legal and accounting obligations.

Sharing

We share only what is needed to deliver a booking: the traveller name, contact and trip details go to the supplier fulfilling it (hotel, airline, operator, transfer or rental partner). We also use these processors:

  • Supabase — database, authentication and realtime hosting.
  • Google and Apple — sign-in, only when you choose those buttons.
  • Tally — hosted forms for support requests and property listings.

We never sell personal data or share it with data brokers.

Security

All traffic is encrypted in transit with TLS. Data is stored in access-controlled Postgres with row-level security so a signed-in user can only reach their own records.

Retention

Account data is kept while your account is active. Booking and payment records are kept for up to 6 years where tax and consumer-protection law requires it, then deleted or irreversibly anonymised. Support messages are kept for 24 months.

Your rights and data deletion

You can access, correct, export or delete your data at any time. Use the in-app Delete my account page, or email privacy@trips.bd. We action verified requests within 30 days.

Children

Trips.bd is intended for users aged 18 and over. We do not knowingly collect data from children. Contact us if you believe a child has created an account.

Changes and contact

We will post material changes on this page and update the date above. Questions: privacy@trips.bd · Trips.bd, Gulshan, Dhaka 1212, Bangladesh.