Privacy Policy
We take your privacy personally. When you trust us with your passport details or travel plans, we don't take that lightly. This policy explains what data we need, why we need it, and—most importantly—how we make sure it stays yours and nobody else's.
Updated May 11, 2026
The data we handle
To review your visa preparation and arrange travel documents, we may handle your name, email, travel history, profile answers, payment records, and reservation details. If you use the AI document analyzer, you may also upload documents such as bank statements, employment letters, or passport copies.
The 24-Hour Deletion Rule
Documents uploaded through the secure storage flow are encrypted and scheduled for deletion within 24 hours. The direct in-memory audit flow does not store uploaded files on GetDocuTrip, but the generated audit summary may be saved to your prediction.
Encrypted Storage
Prediction results, audit summaries, and reservation details are stored in application systems with access controls. Uploaded files in the secure storage flow are encrypted before storage. Retention depends on the data type and the purposes described in this policy.
Sharing only what's necessary
We aren't in the business of selling your data. We only share information with partners who help us run GetDocuTrip:
- Travel Partners: When you book a flight or hotel, we share your details with the airline or hotel provider so they can issue your ticket.
- Payment Processors: We use secure providers like Stripe and iPaymu to handle payments. They never share your full credit card number with us.
- AI Processing Providers: Profile answers and, when you request document analysis, document content may be sent to the configured AI processing provider (currently Google Gemini models accessed through OpenRouter) to generate your result. Do not upload documents you are not authorized to share.
Global Standards & Compliance
We aim to support applicable privacy rights for users in Indonesia, the EU/UK, the United States, and other regions. The law that applies depends on your location, services used, and circumstances:
GDPR (EU/UK)
Privacy rights may apply depending on your location and circumstances.
US Privacy (CCPA)
Requests and rights are handled according to applicable law.
UU PDP (Indonesia)
Indonesian privacy rights may apply to your data.
You stay in control
You have the right to see what we know about you, fix any mistakes, or tell us to delete everything. If you decide to leave GetDocuTrip and delete your account, we wipe your personal data from our active databases immediately.
Note: Some data may be kept briefly in secure backups or as required by financial laws (like payment receipts) before being permanently erased.
Privacy is a conversation
If you have any questions about how we handle your specific data, or if you want to exercise your rights under GDPR or UU PDP, our privacy team is ready to help.
Contact Privacy Team