Privacy Policy

2.1 Registration and profile data

• Email address
• First and last name (via manual entry or automatically retrieved when logging in via Google or Apple)
• Preferred language and theme
• Authentication data: we do not store any password; authentication relies on a one-time code (OTP) sent by email, or on the OAuth protocols of Google and Apple

2.2 Usage data

• Information about your accommodations (address, description, photos, GPS coordinates)
• Guidebook content (texts, images, links, custom blocks)
• Guidebook viewing statistics (number of views, QR code scans)
• Interaction events in the application (navigation, user actions) collected through our product analytics tool
• Technical logs and diagnostic data in case of error (stack traces, device, application version)

2.3 Payment data

Payment information (bank card number) is processed directly by Stripe, our PCI-DSS-certified payment provider. WonderGuest does not store any bank data. We only keep the Stripe customer and subscription identifiers needed to manage your account.

2.4 Guest data (guidebook visitors)

Guests do not create an account. Depending on the features the host has enabled, the following data may be collected when a guest uses a published guidebook:

• Check-in form answers: first and last name, arrival and departure dates, arrival time and, if the host asks for them, number of guests and children, means of transport, pets, telephone number, language, occasion, special requests and answers to the host’s custom questions
• Extras store orders: name, email address, telephone number, postal address, stay dates, items ordered, requested date and time, comments; the payment itself is made through a Stripe payment link and WonderGuest does not receive the card number
• Email address, if the guest provides it through a form embedded in the guidebook
• Anonymized browsing data (QR code scan, guidebook viewing)

For this data, the host is the data controller and WonderGuest acts as a processor on the host’s instructions, under the Data Processing Agreement. Guests who have a question about their data should contact the host first; we forward any request we receive directly to the host concerned.

2.5 Visitors of the marketing website

• Contact form: name, email address and message, sent to us by email through Resend and kept for as long as needed to answer you
• Audience measurement through Plausible Analytics, Vercel Analytics and Vercel Speed Insights: pages viewed, referrer, country, browser and device type, without cookies and without tracking across other websites
• Advertising measurement through the Meta Pixel: pages viewed, IP address, browser data and pixel cookie identifiers, sent to Meta Platforms to measure our Facebook and Instagram campaigns and build advertising audiences
• Campaign attribution: the parameters of the link you arrived from (utm tags, referral code, gclid, fbclid), kept in a first-party cookie for 30 days and passed to the application if you sign up

The Cookie Policy lists the cookies concerned and how to refuse them.

8.1 Rights under the GDPR

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your data
• Right to portability: receive your data in a structured, machine-readable format
• Right to object: object to the processing of your data based on legitimate interest
• Right to restriction: request restriction of processing in certain cases

To exercise these rights, contact us at support@wonderguest.app. We will respond within 30 days.

You may also lodge a complaint with the CNIL: www.cnil.fr

8.2 Residents of the United States

We do not sell personal data. On the marketing website, the Meta Pixel shares browsing data with Meta Platforms for advertising measurement, which some state laws, including the California Consumer Privacy Act (CCPA), treat as “sharing” or “targeted advertising”. You can limit it by blocking the pixel cookies in your browser and through your Meta ad preferences, as described in the Cookie Policy. The application itself does not share data for advertising.

Where a United States state privacy law applies to WonderGuest, residents of that state may, subject to verification of their identity:

• know what personal data we collect, use and disclose, and receive a copy of it;
• request the correction or the deletion of their data;
• opt out of the sale of their data, of its sharing for targeted advertising and of profiling with legal or similarly significant effects (we do none of these in the application);
• not be discriminated against for exercising these rights;
• appeal our decision on a request by replying to our answer; we will explain the outcome of the appeal and, where required, how to contact your state attorney general.

Requests can be sent to support@wonderguest.app, by you or by an agent you have authorized in writing. We answer within 45 days. We use the data you provide in a request only to verify and fulfil it.

Under the California “Shine the Light” law, we confirm that we do not disclose personal data to third parties for their own direct marketing purposes.