Privacy Policy

Wayo Connect ("Wayo", "we", "us") runs the Wayo service and is responsible for your personal data (the "controller" under data protection law). You can reach us about anything in this policy at contact@wayoconnect.com. This policy explains what we collect, why we collect it, who receives it, how long we keep it and the choices and rights you have. It forms part of our Terms of Service.

Information you give us

• Account details: your email address, name, @username, password, account type and, for business accounts, the business name. We never store your password in a form anyone can read, including us.
• Profile details you choose to add: a picture, a short description, phone number, website, city and year of birth. Your year of birth is used only in anonymous, grouped statistics and is not shown to anyone. Your city is not shown to other people.
• What you publish and send: posts (including their text, photos and any contact details you add), listings, agent descriptions, messages, reviews, reports, friend requests and blocks.
• Credentials you entrust to us, such as keys for AI providers and the access details for agents you connect. We store these in protected form and use them only to provide the features you set them up for.
• If you sign in with Google or Microsoft: the account identifier and email address they share with us. We never receive your password for those services.

Information collected as you use Wayo

• Your questions to Wayo and the answers you got, saved in Your questions so you can come back to a conversation and continue it. Only you can see them, and you can delete one or all at any time.
• What you ask Wayo to keep looking for ("Tell me when someone has it"). Businesses near the place you asked about see the words Wayo searched for, the area and when, never who asked.
• Activity related to your questions, such as when you asked and how the answer was produced. See section 6 for the temporary copies used to answer more quickly.
• Who you have dealt with on Wayo, for example that a business's agent answered you or that you wrote to someone. This lets you leave reviews and helps show you people you know first.
• Views of posts and agents, and your private ratings of answers. We use these to measure popularity; owners only see overall totals, never who viewed or rated.
• Security and account records, such as sign-in attempts, when you last signed in, the version of our terms you accepted, whether you confirmed your email, and which account created or last changed each item and when. We use these to protect accounts, prevent abuse and count how many people come back (only as totals).
• Your approximate location, only if you allow it in your browser. We use it to find the town you are in so Wayo can show what is nearby. We do not keep your precise position, we do not share it, and we do not change the city in your profile because of it. You can refuse or withdraw this permission in your browser at any time and choose a city yourself instead.
• If you turn on notifications: the address your browser gives us to reach this device, its time zone (for quiet hours), your choices of what to be told and how, and when you last had Wayo open, so we don't notify you about what you are already looking at.
• Anonymous visit counts for our public pages: which of those pages were viewed, whether the demo was tried, and the general kind of site you came from (such as a search engine or social network). They are not linked to you or your account, and we use them only as totals to improve our pages.
• Technical information that any website receives, such as your IP address, browser type and the pages you request, which appears in the logs of our systems and of the providers who deliver and protect our service.

When you upload a photo, we remove embedded information such as its location and camera details. The same applies to a picture you add by its web address, or that we take from your website or listings file when you import them: we fetch it and keep our own copy, and the other site never learns who looks at it. A picture of a business we listed stays on that business's own website: we fetch it when someone looks, resized and without those details, and keep no copy of our own.

Businesses we list

• To help people find local businesses, we may list a business that is not on Wayo yet, using only public information: its own website (its name, what it offers, its contact details and pictures) and OpenStreetMap, the open map anyone can edit (its name, kind, address and contact details; such a profile credits OpenStreetMap until the business claims it). Such a profile says it was listed by Wayo. People cannot message it on Wayo; they use its public contact details.
• Once people have asked about it, we may send one email to the address its website lists, inviting the business to claim the profile. The email has a link that removes the profile, no account needed.
• When a business account claims a profile, we keep the email address it used to show the business is theirs, how it showed it, and every change of hands, so mistakes can be put right. Reports about a profile, and their words, are read only by our administrators.

• To provide the service you asked for (performance of our contract with you): running your account, finding and asking businesses and agents, showing answers, and delivering messages, posts, reviews, account emails and the notifications you chose.
• To tell you what's new on Wayo (our legitimate interests): occasional News from Wayo emails to a confirmed address. Each one has a link that stops them, and you can turn them off any time in Settings → Notifications.
• To keep Wayo safe and working (our legitimate interests): preventing fraud, spam, scraping and other abuse, enforcing our Terms, protecting the security of the service, fixing problems, and understanding overall usage so we can improve it.
• Optional details (your consent, which you can withdraw at any time): your city and year of birth, which you can remove in Settings, and your device's location, which you can turn off in your browser.
• To comply with the law (legal obligation): responding to lawful requests from authorities and keeping records the law requires.

We do not sell your personal data, we do not share it for cross-context behavioral advertising, and we do not use advertising or tracking cookies.

• The businesses and agents you ask: your question and the context needed to answer it and to continue the conversation. We do not give them your email address or name unless you choose to contact them directly. When you message someone, they see your name and @username, as with any message.
• The plugins you choose: when you choose a plugin for a question (such as a shop or flight search), that outside service receives the search Wayo makes for it, based on your question and the city you are looking from (a flight leaves from there unless you say otherwise), and the key you gave it, if any, but not your email address or name. A plugin is never sent anything for a question you didn't choose it for. What it does with the search is governed by that service's own terms.
• Other users: your public profile (name, @username, picture, description, website, public posts and agents, and reviews you wrote or received). Private and friends-only posts are shown only to the people you chose.
• Anyone on the web: a public post, and a business profile that is public, has a page on Wayo that anyone can open without an account and that search engines and AI assistants may index. The page shows what the post says (its title, text, details, photos and the contact details it gives) and the poster's public name; for a business, also its @username. A person's account page, email address and other posts are never on it. Pausing or closing a post, or making it private or friends-only, takes the page down within minutes; search engines may keep a copy for a while.
• AI providers that help understand questions and prepare answers: the provider Wayo uses, or the provider whose key you saved. They receive what is needed to prepare the answer, such as your question, the conversation so far and the replies gathered, but not your email address. If you choose "Replies only", we do not use an AI provider to summarize the answers. What you publish (posts, agents, your profile and reviews, which are public anyway) may also be sent to an AI provider to check that our Terms allow it; your private messages and questions are not.
• Service providers working for us, such as providers of hosting, storage, network delivery and security, and email sending. They may use your data only to provide their services to us and must protect it.
• Google or Microsoft, only if you choose to sign in with them.
• Your browser's push service (such as Google's, Apple's, Mozilla's or Microsoft's), only if you turn on notifications: it delivers them to your device and receives them encrypted, so it cannot read them.

Some of the providers above process data in other countries, including the United States. Where the law requires it (for example, for data from the European Economic Area or the United Kingdom), we rely on recognized safeguards such as the European Commission's standard contractual clauses or an adequacy decision.

We keep personal data only for as long as we need it for the purposes described in this policy:

• Anonymous visit counts: up to 30 days.
• Which posts and agents you viewed: until the end of that day. Only the overall counts stay.
• Notifications: up to 30 days. A device's notification address: until you turn notifications off there, sign out on it, or your browser tells us it is no longer used.
• Which News from Wayo emails were sent to you: up to 30 days after each was sent. Only the totals stay.
• Your saved questions and answers: up to 90 days after the last question in each conversation, or until you delete them.
• What you asked Wayo to keep looking for: up to 30 days, or until you cancel it.
• A code we email to claim a business: it works for a few minutes and is removed within a day. Who claimed a business, and how: as long as the profile exists.
• A business we listed: until it is claimed, removed through its invitation's link, or removed after a report.
• Your plugins, the keys you gave them and your sign-ins to their services (kept encrypted): until you delete them, turn them off, disconnect, or close your account.
• Your account and what you publish: until you delete them or close your account.
• Temporary copies used to answer more quickly, such as recent answers and agents' replies: kept briefly (never more than a day, and for an agent's reply no longer than that agent allows), then removed automatically.
• Records used to prevent abuse and protect sign-in: kept for a short time, generally minutes, then removed automatically.
• Uploaded images that are not used in any post or profile: removed automatically after a short time.
• Backups: kept for a limited period for recovery purposes, then overwritten.
• When you delete your account, we remove it from the live service straight away, together with your posts, agents, saved credentials, reviews and the messages you sent (the people you wrote to will no longer see those conversations). Remaining copies disappear as our backups expire. Logs are kept for a short period for security, then deleted.

Wherever you live, you can:

• Get a copy of your data from your privacy settings.
• Correct it in your settings.
• Delete your account and data from your privacy settings.
• Object to, or ask us to restrict, how we use it, and withdraw consent for optional details, by removing them or by writing to us.

Depending on where you live (for example, the European Union, the United Kingdom, or California and other US states), you may have further rights under local law, such as data portability or knowing the categories of data we collect and disclose (listed in sections 2 and 4). Write to contact@wayoconnect.com; we will respond within one month, or within the time your law sets, and may need to confirm your identity first. We will not treat you differently for exercising your rights. You may also complain to your data protection authority.

We use only what is needed for Wayo to work:

• Sign-in cookies that keep you signed in and complete sign-in with Google or Microsoft. They are essential and expire after a limited time.
• Preferences stored in your browser, such as your choice of light or dark appearance and the town you are browsing.
• Your language: Wayo remembers the language you choose, in a cookie on your device for a year and, when you are signed in, on your account, so emails and messages come in that language.

We do not use advertising, analytics or tracking cookies, so we do not ask for cookie consent. Our anonymous visit counts store nothing on your device, and we respect your browser's "Do Not Track" and Global Privacy Control settings.

We use technical and organizational measures appropriate to the risk to protect your data, including encryption in transit, protected storage of passwords and credentials, safeguards against unauthorized access and abuse, and access limited to those who need it. No system can be guaranteed to be completely secure. If a security incident affects your data, we will notify you and the authorities as the law requires.

Wayo uses automated ranking and AI to choose which businesses to ask and to summarize their answers. These tools help you find things; they do not make decisions that have legal or similarly significant effects on you. You can always search and contact businesses yourself, or choose "Replies only".

Wayo is not intended for children under 13. We do not knowingly collect their data, and if we learn that we have, we will delete it. If you believe a child under 13 is using Wayo, please write to contact@wayoconnect.com.

We will update this policy when our practices change. If a change is material, we will ask you to accept the new version before you continue using the service.