Privacy Policy

This privacy policy explains what data BangkokHotel.com collects, how we use it, and your rights. We aim to collect as little as possible.

What we collect

• Account data: the AI concierge and saved trips require a passwordless (magic-link) account, so we store your email address and any profile details you choose to add — display name, @handle, bio, location, website, and social links. Your email is used to sign you in and to send trip-related email.
• Conversation data: the text you send to the concierge, its replies, and the persona (travel preferences) we infer from the conversation. Stored against your account. The public demo runs against an anonymous token with no account.
• Trip data: the itineraries and saved items you build, and messages you post in a trip's companion chat with people you invite.
• Booking-click metadata: when you click an affiliate "Book on Agoda" / "Book on Klook" link, we log which item, which partner, a per-click token, your IP-derived country, browser user agent, and a snapshot of your inferred persona at click time. This lets us reconcile commissions.
• Standard analytics: page views, referrers, browser type, via Google Analytics (GA4) for aggregate product analytics. We do not enable Google's cross-site advertising features.

What we don't collect

• Your address, phone number, or government ID. (Emails and phone numbers you type into the chat are stripped before your message is sent to the LLM provider.)
• Payment card details — we never custody payment. All transactions happen on Agoda, Booking.com, Klook, or GetYourGuide.
• Cross-site advertising cookies. We set no ad cookies and allow no cross-site ad tracking.

How we use it

• To provide the agent's recommendations, your conversation data is sent (in real time) to our LLM provider — currently Anthropic (Claude); as the product evolves we may also route to Google (Gemini) or OpenAI (GPT / embeddings), either directly or through a unified gateway (Portkey). These providers process the data to generate the response and do not train on it.
• To reconcile affiliate commissions with our partners (Agoda, Booking.com, Klook, GetYourGuide).
• To sign you in and send trip-related email (invitations, companion-chat notifications, a plan you emailed yourself), and the launch/waitlist email if you opted in.
• To improve the product — aggregate analytics on which conversations succeed and which fail.

Who we share with

• LLM providers: Anthropic, and (as routing evolves) Google and OpenAI — only the conversation context needed to generate a response.
• OTA partners: only the click event when you choose to book; no personal data.
• Infrastructure: DigitalOcean (hosting, Singapore region), Cloudflare (DDoS / CDN / DNS), Resend (transactional email).

We never sell data. We never share with advertisers.

Retention & deletion

You can delete your account at any time from Account settings. Deleting your account permanently erases your conversations, inferred persona, companion-chat messages, the trips you created within a conversation, and your waitlist email. Trips you published to the community are kept but unlinked from you.

You can also request deletion of specific data through our contact form (choose “Privacy / data request”); we respond within 30 days. EU/UK residents have additional rights under GDPR, and Thailand residents under the PDPA (access, rectification, portability, objection, erasure); the same routes apply.

Cookies

We use essential cookies (a session cookie for sign-in and CSRF protection) plus Google Analytics' first-party measurement cookies. We set no advertising cookies and allow no cross-site ad tracking. A consent banner is on our roadmap; until then you can block analytics with your browser's tracking protection.

Changes

We'll update this page when we change anything material and update the "last updated" date above.

Contact

Privacy questions: contact us (choose “Privacy / data request”).