Privacy Policy

Who we are

SmartTrip is a travel planning service that helps you build trip itineraries. Our data protection officer can be reached at dpo@smarttrip.my. Use this address for any request about your personal data.

What we collect

• Your email address, when you sign in.
• Trip content you create: destinations, stops, and notes.
• IP address and request logs, for security and diagnostics.
• Cookies and browser localStorage used to keep you signed in and to remember your working list of stops between visits.

Why we use it

We process your data to provide the service (saving and generating your trips), to keep accounts secure, and — if you subscribe to a paid plan — to handle billing through Stripe. We do not sell your data or use it for advertising.

Third-party processors

To generate itineraries we send the destinations and stop names you enter to Google Places and Open-Meteo for location and weather data, and to Google Gemini, which drafts your trip plan. These providers receive only what is needed for each request. Payments are processed by Stripe; we never see or store your card details.

Retention

Your trips are kept until you delete them or ask us to delete them; deletion requests via email are honored promptly. Aggregate usage counters are retained on a rolling basis for capacity planning and cannot be linked back to you individually once anonymized.

Your rights

Under the PDPA (as amended by the Personal Data Protection (Amendment) Act 2024) you may request access to your personal data, ask us to correct inaccurate data, withdraw consent to processing, and request data portability. Email dpo@smarttrip.my and we will respond within the statutory period.

Data breaches

If a breach is likely to cause significant harm, we will notify the Personal Data Protection Department (JPDP) Commissioner within 72 hours of becoming aware of it and inform affected users without undue delay, describing what happened and what you can do about it.

Cookies and localStorage

We use a session cookie strictly for authentication and a localStorage entry (smarttrip_stops) to remember stops you have picked but not yet saved to a trip. No analytics or ad trackers are set.