Privacy Policy
Your privacy matters. Here's exactly how we protect, use, and manage your personal data.
Last Updated: September 2025
This privacy policy explains how BitTrip collects, uses, and protects your information. We're committed to transparency and your control over personal data.
Our Privacy Principles
Data Minimization
We only collect data that's necessary for booking and providing our services.
Purpose Limitation
Your data is used only for the specific purposes you agreed to.
Transparency
Clear communication about what data we collect and how we use it.
User Control
You have full control over your data with easy access and deletion options.
Information We Collect
Personal identification: Name, email, phone number as provided during account creation.
Travel documents: Passport information, encrypted and stored securely for booking purposes.
Payment data: Cryptocurrency transaction hashes and addresses (no private keys or seed phrases).
Usage data: IP address, browser type, device information, and platform usage patterns.
Communication records: Support chat logs and email correspondence for service improvement.
How We Use Your Data
Process flight bookings and manage travel reservations with airline partners.
Verify identity and prevent fraud in compliance with travel industry regulations.
Provide customer support and respond to inquiries through various channels.
Send booking confirmations, travel updates, and important service notifications.
Improve our platform performance, security, and user experience through analytics.
Data Protection & Encryption
All sensitive data is encrypted using AES-256 encryption both in transit and at rest.
Passport and personal information is encrypted end-to-endβstaff only see encrypted fields.
Database access is strictly controlled with role-based permissions and audit logging.
Regular security audits and penetration testing to maintain data protection standards.
Secure data centers with 24/7 monitoring, backup systems, and disaster recovery protocols.
Data Sharing & Third Parties
Airlines and travel suppliers: Necessary passenger data for ticket issuance and travel.
Payment processors: Cryptocurrency transaction data for payment verification (no personal info).
Regulatory authorities: As required by law for anti-money laundering and travel security.
Service providers: Encrypted data with vetted partners for platform operations only.
We never sell personal data to marketers, advertisers, or data brokers.
Your Privacy Rights
Access: Request a copy of all personal data we have about you.
Correction: Update or correct any inaccurate personal information.
Deletion: Request deletion of your data after completing travel (subject to legal requirements).
Portability: Export your data in a machine-readable format.
Objection: Opt out of non-essential data processing and marketing communications.
Data Retention
Active bookings: Data retained until travel completion plus 30 days for support.
Completed travel: Personal data deleted after 2 years unless legally required to retain.
Account data: Retained while account is active, deleted within 90 days of account closure.
Transaction records: Cryptocurrency payment hashes kept for 7 years for compliance.
Support communications: Deleted after 3 years unless part of ongoing legal matters.
Cookies & Tracking
Essential cookies: Required for platform functionality, security, and user sessions.
Analytics cookies: Anonymous usage data to improve platform performance (opt-out available).
No advertising cookies: We do not use cookies for advertising or behavioral tracking.
Third-party services: Limited use of analytics tools with privacy-focused configurations.
Cookie preferences: Manage your cookie settings through your account dashboard.
International Transfers
Data may be processed in countries where our service providers operate.
All transfers comply with applicable data protection laws and regulations.
Adequate protection measures including encryption and contractual safeguards.
Primary data processing occurs in jurisdictions with strong privacy laws.
Users are notified of any significant changes to data processing locations.
Exercise Your Rights
You have full control over your data. Contact us anytime to access, update, or delete your information.