Privacy Policy

Last updated: October 2025

Waunder ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our AI-powered travel platform at waunder.com.

1Introduction

Waunder ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our AI-powered travel platform at waunder.com.

2Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, date of birth and nationality, profile preferences and travel interests
  • Booking Information: Travel dates, destinations, and preferences, passenger details for reservations, special requests and accessibility needs
  • Payment Information: Billing address and payment method details, cryptocurrency wallet addresses (where applicable), transaction history and payment preferences
  • Identity Verification: Government-issued ID documents, proof of address documents, enhanced verification for high-value transactions

2.2 Information We Collect Automatically

  • Device and Usage Data: IP address, device type, and browser information, pages visited, time spent, and interaction patterns, location data (when permitted), app usage analytics and performance metrics
  • Cookies and Tracking: Essential cookies for platform functionality, analytics cookies for service improvement, preference cookies for personalization, marketing cookies (with your consent)
  • AI Interaction Data: Queries submitted to WaunderAI, recommendation preferences and feedback, travel planning decisions and modifications, learning patterns for personalization

2.3 Information from Third Parties

  • Travel Partners: Booking confirmations and status updates, service delivery information, customer service interactions
  • Payment Processors: Transaction verification and fraud detection, payment method validation, refund and dispute information
  • Verification Services: Identity confirmation results, risk assessment scores, compliance screening outcomes

3How We Use Your Information

3.1 Service Delivery

  • Processing bookings and managing reservations
  • Providing customer support and assistance
  • Facilitating payments and refunds

3.2 AI Personalization

  • Generating personalized travel recommendations
  • Learning from your preferences and feedback
  • Optimizing search results and suggestions
  • Improving WaunderAI response accuracy

3.3 Platform Improvement

  • Analyzing usage patterns and user behavior
  • Testing new features and improvements
  • Monitoring platform performance and security
  • Conducting research for service enhancement

3.4 Legal and Compliance

  • Verifying identity for regulatory compliance
  • Preventing fraud and money laundering
  • Meeting tax and financial reporting obligations
  • Responding to legal requests and investigations

3.5 Marketing and Communication

  • Sending booking confirmations and updates
  • Providing customer service communications
  • Sharing promotional offers (with consent)
  • Delivering newsletters and travel inspiration

4Information Sharing and Disclosure

4.1 Service Providers

  • Travel Suppliers: Airlines, hotels, and experience providers
  • Payment Processors: Cryptocurrency and traditional payment services
  • Technology Partners: Cloud hosting, analytics, and AI services
  • Customer Support: Third-party support and verification services

4.2 Legal Requirements

  • Compliance with court orders or legal processes
  • Cooperation with law enforcement investigations
  • Meeting regulatory reporting requirements
  • Protecting rights, property, or safety

4.3 Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred as part of the business assets.

4.4 Consent-Based Sharing

We may share information with your explicit consent for specific purposes not covered in this policy.

5Data Security and Protection

5.1 Technical Safeguards

  • End-to-end encryption for sensitive data transmission
  • Secure storage with industry-standard encryption
  • Regular security audits and penetration testing
  • Multi-factor authentication for account access

5.2 Access Controls

  • Role-based access limitations for staff
  • Regular access reviews and permissions updates
  • Automated monitoring for unusual access patterns
  • Secure development and deployment practices

5.3 Data Minimization

  • Collection limited to necessary information
  • Automatic deletion of expired data
  • Regular review of data retention requirements
  • Anonymization where possible for analytics

6Your Privacy Rights

6.1 Access and Portability

  • Request copies of your personal information
  • Download your data in a portable format
  • Receive information about data processing

6.2 Correction and Updates

  • Update your account information at any time
  • Request correction of inaccurate data
  • Modify privacy preferences and consents

6.3 Deletion Rights

  • Request deletion of your personal information
  • Close your account and remove data
  • Exceptions for legal retention requirements

6.4 Objection and Restriction

  • Opt out of marketing communications
  • Object to certain data processing activities
  • Request restriction of processing in specific circumstances

6.5 Consent Withdrawal

  • Withdraw consent for optional data processing
  • Modify cookie preferences
  • Update marketing communication preferences

7Cryptocurrency Privacy Considerations

7.1 Blockchain Transparency

Cryptocurrency transactions are recorded on public blockchains. While we don't control blockchain data, we limit sharing of wallet addresses and transaction details.

7.2 Payment Processing

Cryptocurrency payments are processed through licensed third parties who may have their own privacy practices and data retention requirements.

7.3 Enhanced Verification

Large cryptocurrency transactions may require enhanced identity verification for compliance with anti-money laundering regulations.

8International Data Transfers

8.1 Global Operations

Your information may be processed in countries other than your residence for service delivery and platform operations.

8.2 Transfer Safeguards

  • Standard contractual clauses
  • Adequacy decisions where available
  • Certification programs and codes of conduct

8.3 Data Localization

Where required by law, we maintain local data storage and processing capabilities.

9Children's Privacy

Our services are not intended for users under 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

10Cookie Policy

10.1 Essential Cookies

  • Account authentication and security
  • Shopping cart and booking management
  • Language and accessibility preferences

10.2 Analytics Cookies

  • Page views and user journeys
  • Feature usage and performance metrics
  • Error tracking and improvement insights

10.3 Personalization Cookies

  • Travel preferences and recommendations
  • Saved searches and wish lists
  • Personalized content and offers

10.4 Marketing Cookies

  • Targeted advertising across platforms
  • Conversion tracking and attribution
  • Social media integration features

10.5 Cookie Management

  • Browser settings and controls
  • Our cookie preference center
  • Third-party opt-out mechanisms

11Data Retention

11.1 General Retention

  • Service delivery and customer support
  • Legal and regulatory compliance
  • Fraud prevention and security
  • Business operations and improvements

11.2 Specific Retention Periods

  • Account Data: Retained while account is active plus 7 years
  • Transaction Records: 7 years for tax and compliance purposes
  • Support Communications: 3 years for quality and training
  • Marketing Data: Until consent is withdrawn or 2 years of inactivity

11.3 Automated Deletion

We implement automated processes to delete expired data according to our retention schedules.

12Regional Privacy Rights

12.1 European Union (GDPR)

  • Data portability and access rights
  • Right to rectification and erasure
  • Right to restrict processing
  • Right to object to processing
  • Rights related to automated decision-making

12.2 California (CCPA/CPRA)

  • Right to know about personal information collection
  • Right to delete personal information
  • Right to opt-out of sale of personal information
  • Right to non-discrimination for exercising rights

12.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate.

13Updates to This Policy

  • Email notification to registered users
  • Prominent notices on our platform
  • Updated effective dates in the policy

14Complaints and Remedies

  • Contact us directly using the information provided
  • File a complaint with your local data protection authority
  • Exercise legal remedies available in your jurisdiction

Contact Information

For questions about these terms or our services:

By using Waunder, you acknowledge that you have read, understood, and agree to be bound by these terms.