Privacy Policy

1. Information We Collect

When you create an account or make a booking, we collect your name, email address, phone number, and the passenger details you provide (name, age, gender) for each seat booked. If you sign in with Google, we receive your name and email from your Google account.

2. How We Use Your Information

We use your information to process bookings, send confirmation and reminder emails or SMS messages, provide customer support, and improve the platform. We do not sell your personal information to third parties.

3. Third-Party Services

We share the minimum information necessary with the following service providers to operate the platform:

• Stripe and ABA PayWay — to process payments. We do not store your full card details.
• Resend — to deliver booking confirmations and account emails.
• Twilio — to deliver SMS notifications.
• Google — for sign-in, if you choose to use Google OAuth.
• MongoDB Atlas — our managed database provider, which stores your account and booking data in encrypted form.

4. Data Security

Your data is transmitted over encrypted (HTTPS) connections and stored in an encrypted database. Passwords are hashed and never stored in plain text. Access to production systems is restricted to authorized personnel.

5. Data Retention

We retain your account and booking history for as long as your account remains active, or as required to comply with legal and accounting obligations.

6. Your Rights

You can review and update your personal information from your account settings at any time. To request deletion of your account and associated data, contact us using the details below.

7. Contact

Questions about this Privacy Policy can be sent to support@cambodiabus.kh.