Privacy policy

Waysemble operates Waysemble and is responsible for the processing described here. Privacy requests can be sent to [email protected].

We collect only the information needed to operate and improve the service, including:

• Account information such as your name, e-mail address, language, and authentication details.
• Trip information such as group membership, invitations, dates, destinations, and the selected result.
• Traveler answers such as origin, availability, private budget, ranked preferences, and constraints. Accessibility notes previously submitted remain stored privately.
• Technical and security information such as session data, IP address, device/browser details, and application logs.
• Information you submit through the contact form, including your message and reply address.

We process personal information to:

• Create trips, collect participant answers, calculate feasible group options, and show results to perform the service you request (contract and pre-contractual steps). Required information is needed to provide this service; optional preferences may be omitted.
• Authenticate users, protect invitations, prevent abuse, and keep the service reliable based on our legitimate interest in protecting the service and its users.
• Answer support requests and communicate about the service based on our legitimate interest in handling requests; communications needed to provide the service are part of performing it.
• Meet legal obligations that apply to us and establish or defend legal claims based on our legitimate interest. Optional audience measurement relies on your consent. The internal events described below rely on our legitimate interest in understanding and improving the user journey with limited data; you may object by contacting us.

If you agree, we use Google Tag Manager to load Google Analytics and count visits to public pages. Google may receive your IP address and browser information and set analytics cookies. Our page-view events contain only public page addresses, without trip details, invitation links, or account identifiers. You can refuse or withdraw consent at any time through Cookie preferences in the footer; analytics cookies are then removed. Your choice is stored for up to 182 days. Separately, to understand how the product is used and improve it, our servers record key in-app steps (for example, an invitation opened or a questionnaire completed) linked to the trip and account or traveler identifier, the role and the language, without cookies and without names, e-mail addresses, or IP addresses. These records are kept for up to 180 days.

Trip participants see only the information needed for the shared planning flow; private answers are not displayed individually unless the product clearly says otherwise. We may use hosting, e-mail, database, and travel-data providers acting under our instructions. Flight searches send the departure airport or city, destination, and travel dates to the flight provider. We do not sell personal information.

Waysemble is hosted on Laravel Cloud in the United States. Laravel publishes a Data Processing Agreement for customer data and its Trust Center lists the EU–U.S. Data Privacy Framework. Brevo states that its databases are hosted in the EU, with OVH servers in France and Germany and Google Cloud storage in Belgium; this does not establish the location of every Brevo subprocessor or every type of processing. Flight search details are sent to Duffel. Its Services Agreement allows data to be transferred or stored outside the EEA and UK, and says the EU Standard Contractual Clauses apply to transfers to countries without an adequate level of protection. Google services, including Analytics and Tag Manager, may process data globally; Google describes reliance on the EU–U.S. Data Privacy Framework in some cases and Standard Contractual Clauses where a framework does not apply. The exact entities, locations, and safeguards depend on the service and the terms applicable to our accounts. Contact [email protected] for information about the arrangements applicable to your data.

Account data is retained while the account exists; trips, invitations, answers, and results are retained while the trip exists, including after it ends. There is no automatic deletion based on inactivity or trip dates. Organizers can delete a trip; deleting an organizer account requires deleting its trips first. Guests can contact us with deletion requests. Internal events are kept for up to 180 days and cookie choices for up to 182 days. Contact messages are sent by e-mail: their retention depends on handling the request and resolving any dispute. Logs and backups follow the hosting services’ rotation rules; deleting data in the application does not immediately erase those copies. Contact us for the retention periods applicable to these services and to request deletion, subject to legal obligations and information needed to defend legal claims.

We use reasonable technical and organizational safeguards, including access controls, protected sessions, signed invitations, input validation, and encrypted transport. No online service can guarantee absolute security.

Depending on where you live, you may ask to access, correct, delete, restrict, or export your personal information, or object to certain processing. You may also complain to your local data-protection authority. Send requests to [email protected]; we may need to verify your identity.

We may update this policy as Waysemble evolves. Material changes will be identified by a new effective date and, when appropriate, an in-product notice.