Privacy Policy - wishway | wishway - AI Experience Planning

Our Commitment to Privacy

At wishway, we believe that privacy is a fundamental right. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered experience planning service. We are committed to protecting your personal data and being transparent about our practices.

Information We Collect

Information You Provide

• Account information (name, email address, password)
• Profile preferences and interests
• Experience entries and descriptions
• Location data (when you choose to share it)
• Communications with our support team

Automatically Collected Information

• Device information (browser, operating system)
• Usage analytics (features used, session duration)
• Log data (IP address, timestamps, errors)
• Cookies and similar tracking technologies

Third-Party Information

• Social media profile information (if you choose to connect)
• Location-based services data (Google Places API)
• Event information (Eventbrite API)
• Weather data for activity recommendations

How We Use Your Information

Core Services

• Generate AI-powered preparation plans
• Provide personalized experience recommendations
• Track your progress and achievements
• Deliver local discovery suggestions

Service Improvement

• Improve AI recommendation accuracy
• Enhance user experience and features
• Provide customer support
• Ensure security and prevent fraud

AI Processing and Your Data

🤖 How Our AI Uses Your Information

Our AI systems process your experience descriptions and preferences to generate personalized recommendations. This processing happens securely and follows these principles:

• Data is processed only for generating your specific recommendations
• We use OpenAI's API with enterprise-grade security measures
• Your personal data is not used to train third-party AI models
• AI-generated content is tailored specifically to your preferences

Information Sharing and Disclosure

🚫 We Never Sell Your Data

wishway does not sell, rent, or trade your personal information to third parties for marketing purposes.

Limited Sharing for Service Delivery

We may share your information in these specific circumstances:

• Service Providers: Trusted partners who help deliver our services (hosting, analytics, AI processing)
• Legal Requirements: When required by law, court order, or legal process
• Safety and Security: To protect our users, prevent fraud, or ensure platform security
• Business Transfers: In the event of a merger, acquisition, or asset sale (with user notification)

Data Security

🔒 Technical Safeguards

• 256-bit SSL encryption in transit
• AES-256 encryption at rest
• Multi-factor authentication
• Regular security audits
• SOC 2 compliance

🛡️ Operational Security

• Access controls and monitoring
• Employee background checks
• Data minimization practices
• Incident response procedures
• Regular security training

Your Privacy Rights

You have the following rights regarding your personal data:

• Access: View what data we have about you
• Correction: Update or correct your information
• Deletion: Request deletion of your data
• Portability: Export your data in a portable format

• Restriction: Limit how we process your data
• Objection: Object to data processing
• Consent Withdrawal: Revoke consent at any time
• Complaints: File complaints with data authorities

To exercise these rights, contact us at privacy@wishpath.com

Cookies and Tracking

We use cookies and similar technologies to improve your experience, analyze usage, and provide personalized content.

Types of Cookies We Use

• Essential: Required for basic site functionality
• Analytics: Help us understand how you use our service
• Preferences: Remember your settings and preferences
• Marketing: Deliver relevant content and measure campaign effectiveness

You can control cookies through your browser settings or our cookie preferences center.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses for EU data transfers
• Adequate jurisdiction determinations
• Binding Corporate Rules where applicable
• Certification schemes and codes of conduct

Children's Privacy

wishway is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@wishpath.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You

• Email notification for material changes
• In-app notifications
• Updated "Last modified" date on this page
• 30-day advance notice for significant changes

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@wishpath.com

Data Protection Officer: dpo@wishpath.com

Address: wishway Inc., 123 Adventure Lane, San Francisco, CA 94102

Response Time: We respond to privacy inquiries within 30 days