Privacy Policy

This privacy policy explains what data BangkokHotel.com collects, how we use it, and your rights. We aim to collect as little as possible.

What we collect

• Conversation data: the text you send to our agent, the agent's replies, and the persona we infer from the conversation. Stored against an anonymous URL token tied to your browser session — no login required.
• Email (if you provide it): for the pre-launch waitlist or to recall a saved trip. We collect only the email address, the source page, your IP-derived country (Cloudflare-injected, not your full IP), browser user agent, and timestamp.
• Booking-click metadata: when you click an affiliate "Book on Agoda" / "Book on Klook" link, we log which item, which partner, and a snapshot of your inferred persona at click time. This lets us reconcile commissions.
• Standard analytics: page views, referers, browser type. We use Plausible / PostHog for product analytics — both privacy-respecting (no cross-site tracking).

What we don't collect

• Your name, address, phone number, or government ID.
• Payment card details — we never custody payment. All transactions happen on Agoda, Booking.com, Klook, or GetYourGuide.
• Cross-site tracking cookies. Cloudflare may set a session cookie for security purposes only.

How we use it

• To provide the agent's recommendations, your conversation data is sent (in real time) to our LLM providers — Anthropic (Claude), Google (Gemini), and OpenAI (GPT) — through a unified gateway (Portkey). These providers process the data ephemerally to generate the response and do not train on it.
• To reconcile affiliate commissions with our partners (Agoda, Booking.com, Klook, GetYourGuide).
• To send you the launch announcement (waitlist email) or your saved trip (recall email), if you opted in.
• To improve the product — aggregate analytics on which conversations succeed and which fail. Never tied back to individual identities.

Who we share with

• LLM providers: Anthropic, Google, OpenAI, Voyage — only the conversation context needed to generate a response.
• OTA partners: only the click event when you choose to book; no personal data.
• Infrastructure: DigitalOcean (hosting, Singapore region), Cloudflare (DDoS / CDN / DNS), Resend (transactional email).

We never sell data. We never share with advertisers.

Your rights

You can request deletion of any conversation, your email, or both, at any time, by emailing privacy@bangkokhotel.com. We respond within 30 days. EU/UK residents have additional rights under GDPR (access, rectification, portability, objection); same email applies.

Cookies

We use only essential cookies: a session cookie for security (CSRF protection) and a single Cloudflare cookie (Turnstile, when active). No third-party tracking cookies, no advertising cookies.

Changes

We'll update this page when we change anything material and update the "last updated" date. Significant changes will be announced at the top of the homepage for 30 days.

Contact

Privacy questions: privacy@bangkokhotel.com