Privacy Policy

1.1 Information you give us

• Ticket purchases: your name, mobile number, email address (optional), journey, seats, luggage, payment method and ticket number.
• Counter tickets: the name and mobile number recorded by a bus operator’s counter staff when you buy a ticket at a counter.
• Reviews: the display name, star ratings and comments you submit.
• Offers and updates: the name and mobile number or email address you give when you ask to receive offers.
• Correspondence: what you send us by WhatsApp, email, phone or a lost-ticket request.

1.2 Information collected automatically

• Usage information: pages visited, device type, browser, and approximate country or city, measured by Vercel Analytics without cookies and without identifying you.
• Marketing source: the link or advertisement that brought you to the Website (for example “Facebook”), saved with your booking.
• IP address: used for a short period to protect against password guessing and other abuse, and deleted automatically within one hour.

1.3 Payment information

Payments are handled by the payment provider you choose, such as bKash or Nagad. BusHub never receives or stores your PIN, password or card number.

We use personal information only to:

• issue your ticket and deliver it by WhatsApp or email;
• verify your ticket at boarding and prevent the use of fake tickets;
• provide customer support, including changes, refunds and lost tickets;
• settle accounts with bus operators;
• send offers, only where you have asked to receive them;
• detect and prevent fraud, and keep the Website secure;
• comply with the law.

BusHub does not sell, rent or trade your personal information, and does not give it to artificial intelligence (AI) companies, data brokers or advertisers. We share it only as follows:

• Bus operators: the operator of your bus receives what it needs to carry you. Its boarding staff see your name and seats when scanning your ticket. For online tickets, the operator’s managers see seat and sales totals, not your mobile number or email.
• Service providers that operate the Website on our behalf, under our instructions and for no other purpose: Vercel (website hosting), MongoDB Atlas (database), Meta’s WhatsApp Business Platform (ticket delivery by WhatsApp) and Resend (email delivery).
• Analytics and advertising measurement: if you accept cookies, Google Analytics and the Meta (Facebook) Pixel receive the pages you visit and the steps of a purchase, including its amount, under a random reference. They never receive your name, mobile number, email address or ticket number, and ticket pages are never reported to them.
• Legal requirements: where disclosure is required by law, regulation, legal process or an enforceable request of a court or government authority of Bangladesh, or is necessary to prevent fraud or protect the safety of passengers.
• Business transfer: if BusHub is merged or sold, your information will remain protected under this Policy, and you will be informed before it becomes subject to a different policy.

Published reviews show only the display name you chose, the route, the bus operator and the month of travel.

• Essential: staff sign-in, your language, your cookie choice, and tickets saved on your device for “My tickets”. These are always on because the Website needs them.
• Analytics and advertising: Google Analytics and the Meta Pixel. These load only after you select “Accept cookies”.

• Ticket and payment records: for as long as required for accounting, refunds and legal obligations.
• Offer subscriptions: until you ask us to stop.
• Panel notifications: 90 days. Password reset codes: 10 minutes. IP addresses: less than one hour.

We use reasonable technical and organisational measures to protect your information, including:

• an encrypted connection (HTTPS) across the whole Website;
• passwords stored only in encrypted (hashed) form, and sign-in locked after repeated failed attempts;
• mobile numbers partly hidden and email addresses never shown on ticket pages;
• access for BusHub and bus operator staff limited to what their role requires.

No method of transmission or storage is completely secure, but we work continuously to protect your information.

• Access, correction and deletion: you may ask to see, correct or delete your personal information by contacting us with your ticket number or mobile number.
• Offers: you may stop receiving offers at any time by telling us.
• Cookies: you may change your cookie choice at any time using the link in the “Cookies” section above.

When we delete information at your request, we may keep records of paid tickets that we must retain for accounting or legal reasons. These are used for no other purpose.

The Website is intended for adults. Tickets for children should be bought by a parent or guardian, and we do not knowingly collect personal information directly from children under 13.

The Website links to services run by others, such as WhatsApp, Facebook and payment providers. Their own privacy policies apply when you use them.

We may update this Policy from time to time. The effective date at the top of this page shows when it last changed, and significant changes will also be announced on the Website.

This Policy is governed by the laws of Bangladesh.