Privacy Policy

Wander Studio is operated by Ana Laura Aguilar Castillo, an individual sole proprietor based in Costa Rica, who is the data controller responsible for your personal data. If the business is later organized as a company, this policy will be updated to reflect the operating entity. You can reach us at hello@hellowanderstudio.com.

We collect the following categories of data:

• ✦Account data. When you register, we collect your email address and authentication details. If you sign in with Google, we receive basic profile information such as your name and email address from Google.
• ✦Trip and itinerary data. The details you enter to generate an itinerary — such as destination, dates, budget, number of travelers, accommodation preference, travel style, and transport — and the itineraries generated for you.
• ✦Subscription data. Your plan status and subscription record. Payments are handled by our payment provider; we do not collect or store your full payment card details (see Section 5).
• ✦Technical data. Standard information generated when you use a website, such as basic log and device data used to operate and secure the Service.

• ✦to create and manage your account;
• ✦to generate itineraries and provide the features of the Service;
• ✦to manage your subscription and enforce plan limits;
• ✦to communicate with you about your account or the Service;
• ✦to maintain, secure, and improve the Service; and
• ✦to comply with legal obligations and enforce our Terms.

Where the GDPR applies, we rely on: performance of our contract with you (to provide the Service you request, including delivering itineraries and processing payments); your consent (for example, where you choose to sign in with Google); our legitimate interests (to secure the Service and to improve its security, reliability, and features, balanced against your rights); and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent.

To generate an itinerary, the relevant trip details you provide are sent to our AI provider, which processes them to produce your itinerary and returns the result to us. We send only what is needed to generate the itinerary. We do not use this feature to make decisions that produce legal or similarly significant effects about you.

We do not sell your personal data. We share data with service providers (processors) who help us run the Service, under agreements that require them to protect it:

• ✦Supabase — authentication and database hosting.
• ✦Vercel — application hosting and delivery.
• ✦Creem — payment processing as Merchant of Record; it handles your payment information under its own privacy policy.
• ✦Google — optional sign-in, if you choose to use it.
• ✦Our AI provider — itinerary generation, as described in Section 5.

We may also disclose data where required by law, or to protect the rights, safety, and security of Wander Studio and its users.

Some of our providers operate outside Costa Rica and outside the European Economic Area, including in the United States. Where personal data is transferred internationally, we rely on providers that offer appropriate safeguards for that data consistent with applicable law. We handle your personal data privately and do not disclose it to any party except as described in this policy.

We keep your personal data for as long as your account is active and as needed to provide the Service. If you delete your account or ask us to delete your data, we will delete or anonymize it within a reasonable period, except where we must retain certain information to comply with legal obligations or resolve disputes.

Depending on your location, you may have the right to access, correct, update, or delete your personal data; to object to or restrict certain processing; to data portability; and to withdraw consent. To exercise any of these rights, contact us at hello@hellowanderstudio.com. We will respond in line with applicable law. If you are in Costa Rica, you may also contact the Agency for the Protection of Data of the Inhabitants (PRODHAB); if you are in the EEA, you may lodge a complaint with your local data protection authority.

We use cookies that are necessary to operate the Service, such as keeping you signed in and maintaining your session. These are essential to core functionality. For full details, see our Cookie Policy. If we introduce non-essential cookies (for example, for analytics) in the future, we will update this policy and our Cookie Policy and, where required, ask for your consent.

We take reasonable technical and organizational measures to protect your data, including access controls on your stored records so that your trips are accessible only to you. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us so we can address it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

For any privacy question or request, contact us at hello@hellowanderstudio.com.