Privacy Policy

Berai (berai.co) is a platform for booking NGO-hosted stays in Bangladesh. We decide how and why your personal data is used on the site, so we are the “controller” of it. You can reach us at risad@neuronfish.dev.

• Account details: your name, mobile number and/or email address, and the profile details you add.
• Booking details: the stays, dates, guests, meal choices and messages you send through Berai, and the status of your payments.
• Identity documents: where a stay or Host needs it, your National ID or passport details and an uploaded copy. You choose whether to share them with a Host.
• Waitlist details: a phone number or email if you ask to be notified when booking opens.
• Technical data: basic device and usage information, such as browser type and pages visited, and cookies needed to keep you signed in.
• For Hosts: organization details, staff members you invite, and verification documents for the organization and its signatory.

• To create your account and sign you in, including sending one-time codes and sign-in links.
• To process bookings, take payment, and pass the details a Host needs to welcome you.
• To let you and your Host message each other about a booking.
• To verify Hosts and guests, and to keep the platform safe and prevent fraud.
• To send service messages about your bookings, and to tell you when booking opens if you asked.
• To understand how the site is used so we can improve it.

We do not sell your personal data. We share it only as follows:

• The Host of your stay, which sees your name, contact details, booking details and, if you choose to share it, your identity document.
• Service providers that run Berai for us: Supabase (database, authentication and file storage), Vercel (hosting), Resend (email), Reve (SMS delivery), Google (maps), and the payment providers we use to collect payment.
• Authorities, where the law requires it or to protect people's safety.

Some providers process data outside Bangladesh, so your data may be stored or handled in other countries. We use providers that protect data to a reasonable standard.

Identity and verification documents are stored privately. They are never public, and are opened only through short-lived secure links. Only Berai's review team and the Host you chose to share with can see a guest document. You can ask us to remove a document at any time, although a Host may then be unable to confirm your booking.

Payments are handled by regulated payment providers. Berai does not store your full card details or mobile-wallet PIN. We keep a record of what was paid, when, and for which booking.

We keep your data while your account is open and for as long as needed to run bookings, meet legal and accounting obligations, and settle disputes. When you delete your account we remove or anonymize your personal data, except where we must keep a record by law. Waitlist contacts are kept until booking opens, or until you ask us to remove them.

You can ask us to:

• show you the personal data we hold about you;
• correct anything that is wrong;
• delete your account and data;
• stop using your data for notifications you no longer want.

Email risad@neuronfish.dev and we will respond within a reasonable time. We may need to confirm it is really you first.

We use cookies that are needed to keep you signed in and the site working. We do not use advertising cookies. If that changes, we will update this page and ask where required.

Data is encrypted in transit, access is limited to people who need it, and private files are protected. No system is perfectly secure, so please keep your phone and email safe, and tell us right away if you think your account was accessed by someone else.

Berai is for adults. We do not knowingly collect data from anyone under 18 as an account holder. Guests under 18 may travel in a booking made by an adult.

We may update this policy as Berai grows, for example when the mobile apps launch. The date at the top shows the latest version, and we will let you know about significant changes.