Last updated 12 November 2026
This policy explains how WanderSeat (the “controller”) processes personal data when you use WanderSeat. It is written to meet the EU/UK GDPR, the California Consumer Privacy Act as amended by the CPRA, and similar laws.
1. Data we collect
- Account: name, email and profile picture from the sign-in provider you choose (GitHub or Discord), your handle and bio.
- Bookings: traveller names, dates of birth, gender, contact details and loyalty numbers you enter, plus booking references and amounts. Card details are entered into Duffel's secure form and never reach our servers.
- Travel preferences: optional profile details (seat, cabin, dietary and accessibility needs) and memories the AI agent saves from your conversations.
- Content: posts, comments, likes, saves, follows and reports. We remove location metadata (EXIF/GPS) from photos before upload.
- AI conversations: your messages to the travel agent and its replies.
- Usage: feed interactions (views, watch time, skips, shares) when you are signed in, and aggregate counts when you aren't; device and log data needed for security.
- Approximate location: city-level location derived from your IP address to suggest a nearby airport. We don't store it. Precise location is only used if you tap “locate me” on the map, and stays on your device.
2. Why we use it (legal bases)
- Providing the Service and fulfilling bookings — contract.
- Personalising your For You feed — consent (you can switch it off any time).
- Analytics — consent.
- Security, fraud prevention, moderation and improving reliability — legitimate interests.
- Passenger data required by airlines and governments (e.g. TSA Secure Flight, API/PNR rules) and tax/accounting records — legal obligation.
3. How recommendations work
The For You feed ranks posts by: your likes, saves, shares, comments and watch time (with older activity counting less); creators you follow; how recently a post was published; how other travellers engaged with it; and destinations you have shown booking interest in. We deliberately mix in new and different places. Each post shows a short “why you're seeing this” explanation. If you turn personalisation off, your feed is ranked by popularity and freshness only. The Following tab is chronological-weighted and only shows people you follow.
4. Who we share data with
- Duffel and the airline or accommodation you book — to make and service your booking.
- AI providers (Anthropic and/or OpenAI) — to generate travel-agent replies. They act as our processors and may not use your data to train models under our agreements.
- Infrastructure — Vercel (hosting), Cloudflare (storage for photos and videos you post), our PostgreSQL database host, Mapbox (place search and map tiles) or the OpenStreetMap Foundation (map tiles), Wikimedia (images; no personal data sent).
- Sign-in providers — GitHub and Discord, when you choose them.
- Google Analytics — only if you consent.
- Authorities, when legally required, and successors in a merger or acquisition.
We don't sell personal data, and we don't share it for cross-context behavioural advertising. We honour Global Privacy Control signals.
5. International transfers
Some providers process data outside your country. Where required, we rely on adequacy decisions, the EU Standard Contractual Clauses or the UK IDTA, plus supplementary measures.
6. Your rights
You can access, correct, export or delete your data and object to or restrict some processing. Download a copy or delete your account in Settings → Account, or email privacy@wanderseat.com. California residents can also request to know, delete and correct, and won't be discriminated against for doing so. You can complain to your data protection authority.
7. Retention
Account data is kept while your account is active. Feed interaction logs are kept for up to 180 days. Booking records are kept while your account exists. If you delete your account, we delete our copy; Duffel and the travel provider keep their own records of your booking as their policies and the law require. Deleted content is removed from backups within 35 days.
8. Children
WanderSeat isn't for children under 16. If you think a child has given us data, contact privacy@wanderseat.com and we'll delete it.
9. Security
We use encryption in transit, least-privilege access and PCI-DSS-compliant payment handling through Duffel. No system is perfectly secure; we'll notify you and regulators of breaches as the law requires.
10. Contact
Privacy questions: privacy@wanderseat.com. WanderSeat, the address listed in our app store and invoice details.