WanderBot Privacy Policy

1. Introduction

Welcome to WanderBot, operated by DierickOnline ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our website and services.

WanderBot helps travelers create AI-powered itineraries and explore itineraries shared by other users. By using WanderBot, you agree to the practices described in this policy.

2. Data We Collect

a. Information You Provide

We collect the following information directly from you:

• Account information: name, email address, and password
• Payment information: processed securely via Stripe; we do not store credit-card data
• Travel preferences and itinerary inputs: the details you enter to generate itineraries
• User-generated content: itineraries you choose to share with others
• Communication data: messages, feedback, or contact forms you submit

b. Information Collected Automatically

When you visit WanderBot, we automatically collect:

• IP address, browser type, operating system, and device information
• Usage data (pages visited, time spent, actions performed)
• Cookies and session identifiers (to keep you logged in and remember preferences)

c. AI-Generated Data

3. How We Use Your Data

We use your data to:

• Provide and personalize your itineraries
• Manage your user account and credit balance
• Process payments and prevent fraud
• Display itineraries you share publicly
• Improve our platform and user experience
• Communicate updates, security notices, or support messages

We do not sell, rent, or trade your personal information.

4. Legal Basis for Processing

We process your data based on:

• Your consent (e.g., account creation, AI itinerary generation)
• Contract necessity (to provide the WanderBot service you requested)
• Legitimate interests (analytics, platform security, fraud prevention)
• Legal obligations (accounting, invoicing, or tax compliance)

5. Sharing and Disclosure

We share data only with trusted third parties necessary to operate WanderBot:

• Stripe – for secure payment processing
• OpenAI (or similar AI providers) – to generate itineraries
• Hosting and database providers – to store your account and itinerary data
• Analytics tools – for anonymized usage statistics

These third parties act as data processors under GDPR and are bound by data-protection agreements.

6. Data Retention

We retain data only as long as necessary:

• Account and itinerary data – kept while your account is active
• Payment data – retained as required by law (typically 7–10 years in Belgium)
• Deleted accounts – all associated data permanently erased within 30 days, except legally required records

7. Cookies and Tracking

WanderBot uses cookies to:

• Maintain your session while logged in
• Remember preferences and language settings
• Measure site traffic and performance (via anonymized analytics)

You can manage or disable cookies through your browser settings.

8. Data Security

We use industry-standard security measures, including HTTPS encryption, access controls, and secure hosting. While no system is 100% secure, we take all reasonable precautions to protect your data from unauthorized access, alteration, or disclosure.

9. Your Rights (Under GDPR)

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Withdraw consent at any time
• Request data portability
• Object to certain types of processing

To exercise these rights, contact us at privacy@wanderbot.be.

10. International Data Transfers

Some service providers (e.g., AI or hosting partners) may process data outside the EU. We ensure GDPR compliance through Standard Contractual Clauses or equivalent safeguards.

11. Third-Party Links

WanderBot may contain links to external websites or shared itineraries. We are not responsible for the privacy practices or content of those third-party sites.

12. Children's Privacy

WanderBot is not intended for users under 16. We do not knowingly collect data from minors. If you believe a minor has provided data, please contact us for immediate deletion.

13. Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes, we will notify you via email or on our website before they take effect. The "Last Updated" date above reflects the latest revision.

14. Contact Us

For any privacy-related questions, please contact: