Privacy Policy

At Wayheld, we believe intentional travel requires trust. Just as we advocate for gentle, respectful interaction with the destinations you visit, we hold ourselves to the highest standards of discretion and security when handling your personal information.

This Privacy Policy explains what data we collect when you visit wayheld.com and use our travel companion platform, how we utilize that data to tailor your slow travel journeys, and the rigorous safeguards we implement to keep your information secure.

We collect only the information necessary to provide, refine, and secure our services:

We process your information for the following legitimate purposes:

• Journey Composition: Generating nuanced, multi-day slow itineraries matching your pacing and geographic preferences.
• Personalized Discovery: Suggesting quiet accommodations, cultural artisans, and heritage experiences tailored to your profile.
• Billing & Account Management: Provisioning point balances, processing renewals, and maintaining your subscription status.
• Platform Security: Detecting bot abuse, preventing fraudulent transactions, and enforcing rate limits.
• Member Communication: Sending essential service notifications, journey export summaries, and security alerts.

Wayheld utilizes Anthropic’s Claude API to assist with route design, stop curation, and travel recommendations. We maintain strict data protections regarding AI integration:

• No Model Training: Your private prompts, personal journey notes, and profile details sent via our API integrations are never used by Anthropic or third parties to train public AI foundation models.
• Data Minimization: We send only the parameters strictly required to generate your itinerary (such as destination, season, pace, and interests).
• Audit Trail: Prompt logs and token metadata are securely stored in your private database ledger to allow journey version history and refinement rollbacks.

We partner only with industry-leading infrastructure providers that adhere to rigorous data protection standards:

Regardless of where you reside, Wayheld honors comprehensive data privacy rights under GDPR, UK-GDPR, and the California Consumer Privacy Act (CCPA):

• Right of Access: You may request a complete copy of the personal data we hold about you.
• Right to Rectification: You can edit your profile, preferences, and details directly within your Settings dashboard.
• Right to Erasure (“Right to be Forgotten”): You may delete your account and all associated journeys and prompt logs at any time.
• Right to Data Portability: You can export your journey itineraries and saved places in structured digital formats.

To exercise any of these rights, you can use your account settings or email our Data Protection team at privacy@wayheld.com.

We employ industry-standard administrative, technical, and physical safeguards designed to protect your information against unauthorized access, loss, or alteration. All web communications are encrypted via Transport Layer Security (TLS 1.3), and sensitive fields are encrypted at rest.

We retain your information only for as long as your account remains active or as needed to comply with our statutory tax, accounting, and legal obligations.

If you have questions, concerns, or requests regarding this Privacy Policy or how your personal information is managed, please contact:

Wayheld Privacy & Data Governance
Email: privacy@wayheld.com
Support: Contact Help Centre