Privacy Policy
CIALASIA PTE. LTD. ("Cialasia", "we", "us") is incorporated in Singapore (UEN 202450445W) with its registered office at 36 Robinson Road #20-01, City House, Singapore 068877. We operate Smilebutler, a travel assistant on WhatsApp. This policy covers personal data collected through this website and through Smilebutler, and explains how that data is handled in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).
1. Information we collect
This website does not use cookies, analytics or tracking scripts. If you email us at support@cialasia.com, we receive your name, email address and the content of your message.
Smilebutler on WhatsApp. When you message Smilebutler, Meta/WhatsApp delivers to us your phone number, WhatsApp display name, message content and timestamp. Messages may include text, images (boarding passes, booking confirmations, receipts) and forwarded emails with their attachments.
We do not request your device location. Where a location is needed for a specific query, your device prompts for permission at that moment, and the location is used for that request alone.
2. Information we hold
For each Smilebutler user we maintain the following:
- Profile — name, phone number, email address (if provided), preferred language and date format.
- Trip record — destination, dates, flight number, departure and return times, booking reference, and accommodation details (if provided).
- Documents — images and PDF files you share with us, and the data fields extracted from them.
- Conversation history — every message in both directions, including a log of how each response was generated.
- Trip activity — expenses, packing lists, group votes, photo entries and preferences you record.
- Booking profile — name as it appears in your passport, passport number, expiry date and issuing country, loyalty programme numbers, and seat and meal preferences.
3. Information we do not hold
- Passwords. We do not store user passwords.
- Payment details. No payment functionality is currently available.
- Identity document images. Passport scans and driving licences are stored in a vault encrypted on your own device with a passphrase known only to you. We hold the encrypted file; the contents are inaccessible to us.
4. How we use your information
We use personal data to operate Smilebutler and respond to travel requests, to handle enquiries and deliver our services, and to meet our legal and regulatory obligations.
5. Disclosure
We do not sell or share personal data for commercial purposes. To deliver Smilebutler, data is transmitted to the following service providers and no others:
- Meta / WhatsApp — the messaging channel through which all interactions are delivered.
- Anthropic — Smilebutler composes responses via the Claude API. Message content and relevant trip context are sent to Anthropic for this purpose.
- Duffel — flight search and booking data is sent to Duffel only when a search or booking is initiated, and limited to the data required for that transaction.
- Flight status, weather and events providers — flight number, airport code, city and date are shared for real-time look-ups. No personal identity data is included.
- Public authority sources — travel advisories and entry requirements are retrieved from official sources; no personal data is transmitted.
Personal data may also be disclosed to regulatory or law-enforcement authorities where required by applicable law.
6. Data location
Personal data collected through Smilebutler is held on our own servers in Singapore, and our backups are stored in Singapore. The providers named in section 5 — Meta/WhatsApp, Anthropic and Duffel — process data on servers outside Singapore; under the PDPA this is a transfer of personal data abroad.
7. Retention
You can set your own deletion period in Smilebutler. Where you do not set a period, personal data is deleted two years after your last activity with the assistant.
8. Your rights
Under the PDPA you may request access to, or correction of, the personal data we hold about you. Our Data Protection Officer is Yufen Ong, who can be contacted at support@cialasia.com. To make a request or to raise any concern about this policy, please write to us at the same address.
9. Updates
This policy is reviewed periodically. The version on this page is always current, with the date of the last revision shown above.