1. Controller
Binoron, LLC, 1111B S Governors Ave # 47095, Dover, DE 19904, United States, is responsible for personal data processed on this public website.
A confirmed privacy contact will be added before commercial launch. The contact form is disabled and does not transmit entries in the meantime.
2. Scope and current product status
This notice covers the public information and journal website at waywoventravel.com and the payment boundary to the protected travel app. Private journeys, bookings, and family details remain inside the protected app and are not transferred to the public website.
The public website has no registration, payment, general newsletter, or active contact submission. A separate, optional four-part planning series by email is technically prepared but disabled until its complete vendor and privacy gate has passed. If enabled during pre-launch, a Waywoven subscription is purchased only after sign-in inside the protected app through Stripe. On editorial journal pages, optional Travelpayouts Drive technology may load after express consent.
The free long-trip planning check processes selected answers and the calculated result only temporarily in browser memory. The check does not transmit these details to a Waywoven server, store them in cookies or local storage, or add them to a URL. Switching language, reloading or closing the page removes the answers and result. Only a deliberate click on copy or print passes the visible output to the device clipboard or print function.
3. Technical delivery
The website and protected app are technically hosted on Vercel. A page request may involve technically necessary log data such as IP address, time, requested URL, browser information, and security events. The purposes are delivery, stability, and security.
Accounts, permissions, and private journey content are stored in Waywoven's Supabase project in Frankfurt. Supabase creates daily physical database backups for the active project; database backups do not automatically include the actual Storage object files. Vendor retention, processing terms, and transfer mechanisms will be confirmed in the vendor register before the official customer launch.
4. Optional email continuation
After the complete check result is visible, and at the end of editorial articles, visitors may be offered an optional four-part planning series over ten days. The check and every article remain available without an email address. Consent covers only this finite series and does not automatically enrol the person in a general newsletter.
For a voluntary request, Waywoven processes the email address, language, explicit consent choice, consent version, and fixed public source page. An empty field hidden from human visitors acts as a bot trap. Check answers, planning score, profile, proposed actions, and trip, family, or child details are not sent. The address and double-opt-in/delivery state are held in a private Supabase area in Frankfurt. Browser roles and the narrowly scoped email-automation role have no direct table access; only named server-side RPCs can process the records required for DOI, delivery, unsubscribe, suppression, and deletion. For abuse control, the IP address and normalized email address are converted only into secret-keyed HMAC values; the raw IP is not stored in the limiter.
The prepared delivery path uses Resend with a durable private Supabase queue. Exactly four messages begin only after a deliberate confirmation step behind an encrypted, purpose-bound, generation-bound, expiring link; an automated link fetch does not confirm. Every message provides a visible and standards-based one-click unsubscribe path. Signed provider events stop the remaining series after a bounce, complaint, or suppression. Open and click tracking remain disabled. Resend may process the address, language, message content, and delivery, unsubscribe, bounce, and complaint events.
Unconfirmed records are deleted seven days after the 48-hour link expires; confirmed series that never complete are deleted 30 days after confirmation, and completed series 30 days after completion. After unsubscribe or provider suppression, the clear address is removed after 30 days while a secret-keyed value retains the necessary suppression state. The feature is technically disabled by default. Before activation, Waywoven will verify a separate Resend automation key, sending domain, Reply-To and legal footer, SPF/DKIM/DMARC, signed webhook, processing terms, international transfers, provider retention, daily send cap, tracking-off evidence, and a protected Preview. While this gate remains open, the endpoint accepts no addresses and sends no series.
5. Optional affiliate features with Travelpayouts Drive and direct links
Travelpayouts Drive is optional affiliate and monetisation technology for public journal pages. After consent, it may analyse visible page content and structure, convert existing travel links into labelled affiliate links, and measure page views, referrers, clicks, scrolling, link destinations, media, and other content interactions. The currently reviewed vendor code can also process device and browser characteristics for fraud and bot detection. Binoron, LLC may receive a commission after a subsequent booking.
Travelpayouts Drive is not loaded on the long-trip planning check or its result pages, even after consent.
Drive is not loaded in the protected app, on sign-in, authentication, or admin pages, or inside private journeys. This does not exclude separately selected, clearly labelled affiliate cards rendered by Waywoven inside the app. Those cards do not load Drive and do not send private journey, family, booking, or user data to Travelpayouts before an intentional outbound click. Waywoven does not send workspace, journey, child, booking, or user identifiers as affiliate parameters. This technical separation does not prevent Travelpayouts from processing information visible on an expressly enabled public journal page and in the visitor's browser.
Individual editorial articles may also contain clearly labelled direct affiliate links. No request to Travelpayouts or the booking provider occurs before a deliberate click. The link carries only a fixed, non-personal SubID for language, article, travel category, and placement. It contains no check answer, score, profile, or user, journey, family, child, or booking identifier. After the click, Travelpayouts and the selected provider process ordinary URL, referrer, browser, attribution, and any booking data under their own terms.
The integration is technically disabled by default and is enabled only after the correct Travelpayouts project, domain, vendor settings, and a protected Preview have been reviewed. Targeted Offers, automatic recommendation blocks, and keyword linking must not be enabled without a separate product, privacy, and presentation review.
6. Protected app and Stripe payments
The protected app processes account details, private journeys, travellers, stages, booking metadata, tasks, invitations, and permissions in Supabase. Details about children, locations, and bookings are not sent to Stripe.
When a user deliberately begins checkout, Stripe processes information such as email, billing and payment details, tax IDs where supplied, and transaction, invoice, and subscription data. Waywoven does not store card or bank details. Internally it stores only the necessary workspace-to-customer mapping, subscription status, price ID, term, and minimal signature-verified webhook receipts.
7. Legal bases and international transfers
Where technically necessary data is processed, possible legal bases include delivery of the requested service and legitimate interests in a secure, functioning website. Where enabled, the email planning series and Travelpayouts Drive are used only after voluntary consent. Email consent can be withdrawn through the link in each series message, while affiliate consent can be withdrawn through the affiliate and cookie settings, each for the future.
Binoron, LLC is based in the United States. Infrastructure and other providers may process data in the United States, EU/EEA, or other countries. Before the official customer launch, Waywoven will document each provider's purpose, role, region, retention, subprocessors, and applicable transfer mechanism. Where required, Standard Contractual Clauses or another valid mechanism will be used; Data Privacy Framework participation will not be claimed without provider-specific verification.
8. Rights and deletion
Depending on applicable law, people may have rights to access, correct, delete, restrict, port, or object to processing, withdraw consent, and complain to a supervisory authority.
Signed-in users can export their account, workspace, and journey data from the app as JSON. Account and workspace deletion requests have a 30-day recovery window; active subscriptions and other members must first be resolved or ownership transferred. After the window, a service-only process first reconciles the technical Stripe Customer and deletes it only when no non-terminal subscription or open Checkout remains. A second step removes the local Customer mapping and due app and Auth data only after that provider proof. Legally retained invoices and payment evidence at Stripe, and time-limited provider backups, are handled separately.
A confirmed contact route for other privacy requests will be published before the official customer launch. An activated email series can be stopped through the link in every message; vendor retention and a deletion route will be confirmed before activation. The local affiliate choice can already be changed on the website; withdrawing reloads the page so active third-party code is stopped.
9. Children and families
Waywoven is a planning tool for responsible adults and is not directed to children. Accounts may be created only by adults. An adult may enter minimal information about travelling children only when the adult has parental responsibility or other lawful authority; passport numbers, identity documents, and live location do not belong in Waywoven. Children do not receive their own accounts in the current product. Travelpayouts Drive receives no access to protected family journeys or child profiles.