Privacy policy

BD Travel Solutions ("we", "us") runs staging.bdtravelsolutions.com, where you can make a proposed flight itinerary as a PDF. This policy explains what personal information we collect, why, who helps us process it, how long we keep it, and the choices you have.

What we collect

• Your account. Your email address and, if you set one, your password. We store passwords only in a scrambled (hashed) form that can't be turned back into the password. If you sign in with Google, Google tells us your name, email address and profile picture.
• Passenger details. For each passenger on an itinerary: title, given name and surname, date of birth, gender and nationality, and, if you enter them, passport number and expiry date. If you save a traveler, we keep their details so you can use them again.
• Your itineraries. The flights you choose, the fare and booking details printed on the PDF, and the PDF itself.
• Payments. When you pay with bKash, bKash sends an SMS to our bKash number. We record its Transaction ID, amount and time, the sender's bKash number and any reference typed, and link the payment to your account when you enter the Transaction ID on our site.
• Technical information. Your IP address and basic information about your browser, used to keep the site secure: Cloudflare Turnstile checks that you're a person, and we limit how often requests can be made. Our server logs include IP addresses but leave out passwords, names and passport details. When something goes wrong, an error report is sent to Sentry.

How we use it

• To make your itinerary PDF, show it in My trips, and email it to you when you ask.
• To sign you in and keep your account secure, including emailing you sign-up and password-reset codes.
• To check your bKash payment and apply it to your itinerary.
• To prevent abuse, fix problems and answer your questions.

We only email you about your account and the itineraries you ask for. We don't send marketing, we don't sell your information, and we don't use it for advertising.

Cookies and storage in your browser

• A sign-in cookie keeps you signed in. It lasts 30 days from your last visit, and signing out removes it.
• A cookie remembers your language, English or Bengali.
• While you make an itinerary, the details you've entered are kept in your browser's session storage until you close the tab, so reloading the page doesn't lose them.
• Cloudflare Turnstile may set its own cookies for its security check.

We don't use analytics or advertising cookies.

Who processes it for us

These service providers process information for us, only to provide their service:

• our website host, which also runs the security check;
• the hosts of our servers and our database;
• our storage for PDFs and database backups;
• an email delivery service;
• Google, if you choose to sign in with Google;
• an error-reporting service.

The payment itself happens in bKash's app, under bKash's own terms and privacy policy. Our servers and database are in Singapore, and our providers may also process information in other countries. We share information with anyone else only when the law requires it, or to protect our rights or someone's safety.

How long we keep it

• Itineraries and their PDFs: until you delete them in My trips or delete your account. Deleting an itinerary removes its PDF and all its passenger details straight away. We keep only its document number, issue date and flights, which identify no one.
• Saved travelers: until you delete them on the Travelers page or delete your account.
• Your account: until you ask us to delete it. That removes your account, itineraries, PDFs and saved travelers.
• Payment records: kept after an account is deleted, no longer linked to it, for as long as we need them for our accounts and to resolve disputes.
• Sign-in codes expire after 10 minutes, and expired sign-ins are removed every day.
• Backups of our database are deleted after 30 days, so anything deleted is gone from them within 30 days.
• Server logs and error reports are kept for a short time by Railway and Sentry.

Your choices and rights

• See your itineraries and saved travelers at any time in My trips and Travelers, change saved travelers, and delete either yourself.
• To delete your account, or to ask what information we hold about you, email support@bdtravelsolutions.com from your account's email address. We'll reply within 30 days.

Security

Connections to this site and between our services are encrypted. Passwords are hashed, PDFs are private and download through links that expire after 10 minutes, and only we can access our systems. No system is perfectly secure, so please choose a strong password and don't share it.

Children

You must be 18 or older to create an account. You may add children who travel with you as passengers.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your information, we'll also tell you on the site or by email.

Contact

Questions about your information or this policy: support@bdtravelsolutions.com.