Privacy Policy for Wanderfugl

Overview

At Wanderfugl ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at wanderfugl.com (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.

Information We Collect

Information You Provide to Us

• Account Information: When you create an account, we collect your name, email address, and profile information from your Google account if you choose to sign in with Google OAuth.
• Trip Planning Data: Information about your travel preferences, destinations, dates, bookings, and itineraries you create or save.
• Communications: When you contact us, we collect your email address and any information you provide in your messages.
• Feedback and Surveys: Information you provide when participating in surveys or providing feedback about our Service.

Information Collected Automatically

• Usage Data: We collect information about how you interact with our Service, including pages visited, features used, and actions taken.
• Device Information: We collect information about your device, including IP address, browser type, operating system, and device identifiers.
• Location Data: With your permission, we may collect general location information based on your IP address to provide location-relevant travel suggestions.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Generate personalized trip itineraries and recommendations
• Save and sync your travel plans across devices
• Communicate with you about your account and our Service
• Send you updates, newsletters, and marketing communications (with your consent)
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service

AI and Automated Processing

We may use third-party AI services (such as OpenAI or Anthropic or other model providers) to generate trip suggestions, summaries, or recommendations based on your inputs. These services may process, but do not store, your data unless you explicitly permit it. We do not use your data to train third-party models unless you provide consent.

Google OAuth & Third-Party Services

Third-Party Services

Our Service integrates with the following third-party services:

• Analytics Services: To understand how users interact with our Service
• Cloud Storage Providers: To securely store your data

These third-party services have their own privacy policies, and we encourage you to review them.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With Your Consent: We may share your information when you give us explicit permission to do so.
• Service Providers: We may share information with third-party vendors who perform services on our behalf, such as hosting, analytics, and customer support.
• Legal Requirements: We may disclose your information if required by law or in response to valid legal requests.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• Protection of Rights: We may disclose information to protect our rights, privacy, safety, or property, and that of our users or the public.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Legal Basis for Processing (EU Users)

If you are located in the European Economic Area (EEA), we process your personal information under the following legal bases: your consent, the performance of a contract, compliance with legal obligations, and our legitimate interests.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can request access to the personal information we hold about you.
• Correction: You can request that we correct any inaccurate or incomplete information.
• Deletion: You can request that we delete your personal information, subject to certain legal exceptions.
• Portability: You can request a copy of your data in a structured, machine-readable format.
• Opt-out: You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails.
• Account Deletion: You can delete your account at any time through your account settings.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

Data Retention

We retain your information as long as your account is active, or as needed to provide the Service. We may also retain and use your information to comply with our legal obligations, resolve disputes, and enforce our agreements. When your information is no longer required, we will delete or anonymize it.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with small amounts of data that are sent to your browser from a website and stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: Help us understand how users interact with our Service
• Preference Cookies: Remember your settings and preferences

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Do Not Track and Global Privacy Controls: We currently do not respond to “Do Not Track” signals or Global Privacy Control (GPC) signals. You may use browser settings or extensions to manage your privacy preferences.

Cookie Preferences: You may see a cookie notice when you visit the site, giving you the option to manage your preferences.

Children's Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.

For significant changes, we will provide a more prominent notice, such as an email notification or an in-app notification.