Legal · Privacy policy

How we handle your data.

The short version: we collect what we need to run your site, bill you and keep your account safe. We never sell it, we never see card numbers, and your travellers’ data stays yours.

Last updated
12 October 2026
Applies to
akijairota.com, the client portal and the staff console
Data controller
Akij Air
  • Never sold

    We do not sell personal data. Not to anyone.

  • No card numbers

    Payments are by transfer or wallet. We never see a card.

  • Hashed and encrypted

    Passwords hashed, secrets encrypted at rest, HTTPS everywhere.

  • Access is logged

    Every time our staff touch your tenancy, it is on the record.

01

Who we are

Akij Air OTA is operated by Akij Air (Akij Air), AKIJ HOUSE, 198 Bir Uttam Mir Shawkat Sarak, Tejgaon, Dhaka-1212. We are the data controller for the information described here.

support@akijair.comAKIJ HOUSE, 198 Bir Uttam Mir Shawkat Sarak, Tejgaon, Dhaka-1212
02

What we collect

Six kinds of information, and only when you give them to us or use the service.

  • Account and contact details

    Your name, work email, phone number, job title and the agency you represent, given when you sign up, request a demo or are invited by a colleague.

  • Billing information

    The plan you chose, invoices, and the details of payments you report to us: amount, date, transaction reference, the account the money came from, and any receipt you upload. We never see or store card numbers; payments are made by bank transfer or mobile wallet.

  • Site configuration

    The domain names, settings and feature choices of the sites you run on the platform.

  • Support conversations

    Tickets you open and the messages in them.

  • Security and usage data

    Sign-in times, IP address, browser and device type for each signed-in session, two-factor settings, and an activity log of the actions taken in your portal.

  • Reviews

    Reviews you choose to publish, with the name and title you give.

03

Why we use it

Four reasons. If a use is not on this list, we do not do it.

  • To provide the service

    Provisioning your site, issuing certificates for your domains, billing you and giving you support.

  • To keep accounts secure

    Verifying your email, sending sign-in codes, showing you the devices signed in to your account and letting you sign them out.

  • To run our business

    Accounting, invoicing and the legal records we must keep.

  • To contact you

    About your account and, if you asked for a demo, about the platform. We do not send marketing you did not ask for.

04

Your customers’ data

The travellers and agents who book on your site are your customers. Their bookings, personal details and payments are held in your site’s own database tenancy and are processed on your instructions.

You

Data controller

You decide what is collected from your customers and why.

Us

Data processor

Our staff access that data only to support you, and every such access is logged.

05

Who we share it with

  • Infrastructure providers

    The companies that host the platform and deliver our email, under contract and only to the extent needed to run the service.

  • Travel suppliers

    Airlines and other suppliers, to the extent a booking on your site requires it.

  • Authorities

    When the law requires it.

We do not sell personal data.

06

How long we keep it

WhatFor how long
Account, billing and activity recordsFor as long as you are a client, then for the period our accounting obligations require.
Sign-in session recordsExpire within twelve hours of their last use, or as soon as you sign a device out.
Support ticketsKept so we can help you with recurring issues.
Your accountDeleted on request once no invoices are outstanding.
07

Security

The basics, done properly, on every account from day one.

  • Passwords are stored hashed, never in clear
  • Two-factor authentication on every account
  • Authenticator keys and other secrets encrypted at rest
  • Every page served over HTTPS
  • Databases backed up daily
  • The platform monitored around the clock
08

Your rights

You can see and correct most of your information from your portal’s profile page. For anything else, including access to, correction or deletion of your data, or to withdraw a consent, write to us. We answer within thirty days.

Make a request

Access, correction, deletion or withdrawing a consent.

support@akijair.com
09

Changes

If this policy changes in a way that matters to you, we will tell you by email before the change takes effect. The date at the top is the version you are reading.

Still have a question?

Ask a person, not a form.

Anything about this policy, your data or your customers’ data: the team at Akij Air replies within one working day.