Privacy Policy
Effective date: April 19, 2026
This policy explains what information Waytico collects, why we collect it, and what we do with it. It's written to be read, not to be skipped. If anything is unclear, email hello@waytico.com.
Who we are
Waytico is a software service for travel professionals. When we say “we,” “us,” or “Waytico,” we mean the team behind Waytico. When we say “you,” we mean whoever is using the service — typically a travel operator, guide, or their client viewing a trip page.
What we collect
Information you give us directly.
- Your name, email address, and business name when you create an account (via Clerk, our authentication provider)
- Content you create in Waytico: trip descriptions, itineraries, prices, client-facing text, tasks, and notes
- Files you upload: photos, PDFs, Word documents, and spreadsheets
- Messages you send to our AI chat (briefing and editor)
- Payment details when you activate a trip page (handled by Stripe — we never see full card numbers)
Information we collect automatically.
- Basic usage data: which pages you visit, when, and from what kind of device
- Technical data: IP address, browser type, and session identifiers needed to keep you logged in
- Error logs when something breaks, so we can fix it
Information from third parties.
- Authentication data from Clerk (verified email, sign-in status)
- Payment status from Stripe (whether a charge succeeded, not card details)
Why we collect it
- To run the service. Generating trip pages, saving your work, sending you emails you've asked for.
- To bill correctly. Processing activation payments through Stripe.
- To improve the product. Aggregated, anonymized usage data helps us see what works and what doesn't.
- To keep you safe. Detecting abuse, fraud, and security issues.
- To talk to you. Responding when you email us, sending account notifications.
We don't sell your data. Ever. We don't show you ads. We don't share your content with other Waytico users.
Who we share it with
We use a small number of trusted companies to run Waytico. Each one gets only what they need:
| Company | What they do | What they see |
|---|---|---|
| Render | Hosts our application and database | Everything stored in Waytico |
| AWS (Amazon Web Services) | Stores your uploaded photos and documents | The files you upload |
| Clerk | Handles sign-in and account management | Your email, name, login activity |
| Stripe | Processes payments | Your billing info and payment history |
| OpenAI | Generates trip content from your descriptions | The trip brief and chat messages you send |
| Google (Gemini) | Parses documents you upload | The contents of uploaded files |
| Resend | Sends transactional email | Your email address, message content |
Each of these companies has its own privacy policy and security practices. We review them before connecting, and we only send them the minimum they need.
Beyond that, we share information only if we have to — for example, to comply with a valid legal request, or to protect someone's safety.
How long we keep your data
- Account data: as long as your account exists. Delete your account and we delete it within 30 days.
- Anonymous trips: 3 days from creation. After that, they're removed automatically.
- Chat editor sessions: 1 hour after last activity.
- Email logs: 1 year.
- Backups: up to 30 days after deletion, then fully removed.
Your rights
You can:
- See what we have on you. Email us and we'll send it.
- Correct it. Most of it you can edit yourself in your account. For anything else, email us.
- Delete it. Request account deletion and we'll wipe everything within 30 days.
- Take it with you. We'll export your data as JSON on request.
- Object or restrict. If you're in the EU, UK, Canada, or California, you have extra rights. See Personal Information.
To exercise any of these rights, email hello@waytico.com from the address on your account. We respond within 30 days.
Security
We use industry-standard practices: encrypted connections (HTTPS everywhere), encrypted storage, scoped credentials, and regular reviews of who has access to what. No system is perfectly secure, but we treat your data like it's ours — because if something goes wrong, it's on us.
If we ever have a breach that affects you, we'll tell you promptly and explain what happened.
Children
Waytico is not for children under 16. We don't knowingly collect data from anyone under 16. If you believe a child has given us information, email us and we'll remove it.
International transfers
Waytico is operated from Vancouver, British Columbia, Canada. Our servers — where your data actually lives — are in the United States (hosted with Render and AWS, us-east-1 region). That means your data crosses borders: from wherever you are, through our systems, to hosting infrastructure in the U.S.
We rely on standard safeguards for these transfers, including our providers' data-processing agreements and, where applicable, the European Commission's adequacy decision for Canadian commercial organizations under PIPEDA. If you're using Waytico from the EU, UK, or elsewhere with strict cross-border rules, you're agreeing to this setup when you use the service.
Changes to this policy
If we change this policy in a way that matters, we'll email active users and post a notice on this page at least 14 days before the change takes effect. You can always see the “effective date” at the top.
Contact
Privacy questions or requests: hello@waytico.com. A human reads them.