This Privacy Policy describes how World InReach ('we', 'us', or 'our') collects, uses, stores, and protects your personal information when you use our website and trip planning service (the "Service"). By using the Service, you agree to the practices described in this Privacy Policy.
We are committed to complying with applicable Canadian privacy law (PIPEDA), U.S. state privacy laws including the California Consumer Privacy Act (CCPA), and the EU General Data Protection Regulation (GDPR) where applicable.
1. Information We Collect
1.1 Account and Contact Information
- Email address — collected when you register to save itineraries
1.2 Itinerary and Preference Data
When you generate or customize an itinerary, we collect:
- Destination(s) selected
- Trip creation date and time
- Trip duration (number of days)
- Travel style preference
- Hotel budget range
- Travel pace preference
- Currency selection
- Language preference
- Whether day trips were included
1.3 Usage and Behavioral Data
- Whether itinerary customization was used
- Number of customization sessions performed
- Number of stops added or removed
- Whether day trips were replaced
1.4 Technical Data
We may automatically collect IP address, browser type and version, device type and operating system, pages visited and time spent, and referring URL through cookies and similar technologies.
2. How We Use Your Information
- To provide and operate the Service, including saving and retrieving your itineraries
- To authenticate your identity and manage your account (via Clerk)
- To improve the Service based on how users interact with it
- To analyze usage patterns and feature adoption for internal business improvement
- To process payments for any paid features (via Stripe)
- To communicate with you about your account or the Service
- To enforce our Terms of Service and protect against misuse
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
3. Legal Basis for Processing (GDPR — EU/UK Users)
We process your personal data on the basis of contract performance, legitimate interests, consent, and legal obligation as applicable.
4. Third-Party Service Providers
- Clerk (Authentication) — manages user authentication and account creation. See clerk.com for their privacy policy.
- Supabase (Data Storage) — securely stores your saved itineraries. See supabase.com for their privacy policy.
- Stripe (Payments) — processes payments; we do not store your card details. See stripe.com for their privacy policy.
5. Data Retention and Deletion
- Saved itineraries — retained until you delete them. Deletion is immediate and permanent.
- Account information — retained for as long as your account is active
- Usage and behavioral data — retained in aggregated or anonymized form
- Technical/log data — typically retained for up to 90 days
When you delete your account, all personal data will be permanently deleted within 30 days, except where retention is required by law.
6. Cookies and Tracking Technologies
We use essential cookies (required for authentication), analytics cookies (to understand feature usage), and preference cookies (to remember your settings). We do not use cookies for advertising or cross-site tracking purposes.
7. Your Rights and Choices
Depending on your location, you may have rights including access, correction, deletion, and opt-out of communications. Canadian users have rights under PIPEDA; California users under CCPA/CPRA; EU/UK users under GDPR. To submit a request, contact us at worldinreach.contact@gmail.com. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (HTTPS/TLS), secure storage via Supabase, and access controls. No method of Internet transmission is completely secure.
9. Children's Privacy
Our Service is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. Users between 13 and 18 may use the Service with verifiable parental consent.
10. International Data Transfers
Your information may be transferred to and processed in Canada and the United States where our service providers operate. Where required by law, we ensure appropriate safeguards are in place.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by a prominent notice on the Service.
12. Contact Us
Email: worldinreach.contact@gmail.com
Website: www.worldinreach.ca