Privacy Policy

Contact form: your name, email, company or operator (optional), phone (optional), the message you write and the page language. If you reach the form from a package, plan or project on the site, we also store the name of that package, plan or project, so we know what you are asking about.

Quote requests and call bookings: your name, email, phone (optional), company, the service or package you are interested in, the description of what you need, the budget and deadline you give, the channel and time slot you choose (for bookings) and the language. We create a request code and send you confirmation and follow-up emails; you can check the status of the request through a link with that code.

Virtual assistant (artificial intelligence chat): the text you write in the conversation. We do not ask you for personal data and we ask you not to write it. Conversations are not stored on our server: they stay in your browser until you close the tab. See section 3.

Client area (only for clients with access): your name, email and language; the projects, milestones and updates that concern you; the messages you write to us; the proposals and invoices addressed to you; and a record of your actions in the area (date and action, with a truncated IP address). You sign in through a single-use link we email you.

Clients and suppliers: for the business relationship and invoicing we process the name or company, tax ID (NIF), address, country and email, as well as the related documents and payments. This data reaches us from you, by contract or on request, and not through the public website.

Technical and security data: to protect the forms and the assistant from abuse, for 10 minutes we use a coded version (hash) of your IP address, with the times of the latest submissions. For sign-ins to the management panel we keep, for 24 hours, the IP address and the email entered in failed attempts. The server hosting the website may also record your IP address and browser details in its access logs.

We do not ask for special categories of data (such as health or beliefs). The public website has no visitor accounts: accounts exist only for the Wandr team and for clients who have a client area.

Answering you: we use the data from forms and requests to answer your request, send you a proposal and follow up on the business contact that results. The basis is your request (pre-contractual steps) and our legitimate interest in replying to you.

Serving our clients: we use client-area and invoicing data to perform the contract, show you the progress of projects, issue and collect documents and meet legal accounting and tax obligations.

Answering faster: the virtual assistant answers questions about Wandr based on what the website itself says. The basis is our legitimate interest in helping those who visit us; it is optional and you can always use the contact form.

Security and continuity: we use the coded IP address to limit repeated submissions, the activity log to know who did what in the panel and in the client area (and to detect abuse or mistakes), and backups to be able to recover data. The basis is our legitimate interest in protecting the service and your data.

We make no automated decisions about you and we do not use your data for marketing without your consent.

The website assistant is an artificial intelligence, not a person. To write each reply, we send to Anthropic, PBC (an AI provider based in the United States) the recent messages of the conversation (up to the last 10, each limited in size) and the instructions and public information from our website that the assistant uses. We do not send your IP address or your name; the provider only receives what you write in the conversation. So please do not write personal or payment details: if you do, that text will be processed by that provider.

We do not store the text of conversations on our server. We only keep a technical usage record (date and time, amount of text processed and tools used), without the content of the messages and without data that identifies you, for 90 days.

The Wandr team also uses an AI assistant in the management panel to look up information about clients, projects, requests and finances more quickly. To answer a team question, the panel sends to Anthropic the data it needs to answer (for example, names, emails, amounts and client messages). Any change suggested by the assistant is only made after a member of the team confirms it.

As the provider is in the United States, this data is transferred outside Cape Verde and the European Union. We limit what we send to what is necessary, and the provider's processing is governed by the commercial terms of service we accepted with it. If you want to know more, or to object to your data being used this way, write to contacto@wandrtech.cv. Not using the assistant costs you nothing: you can always write to us through the contact form.

We do not sell or hand over your data for marketing. The providers that make the service possible may process data on our behalf, under a duty of confidentiality and only for that purpose: hosting of the website and database, the email service that delivers and sends messages (forms, requests, access links, proposals and invoices) and Anthropic, PBC, for the AI assistant (section 3).

If you click the WhatsApp button, the conversation takes place on WhatsApp (Meta), under that company's privacy policy. The same applies to links to other websites (for example, showcase projects or the SalDesk demo): each has its own policy.

We may also disclose data to authorities when the law requires it (for example, tax obligations).

Conversations with the assistant: not stored on our server; in your browser they last until you close the tab. Technical usage record (no text): 90 days.

Coded IP address (abuse protection): used for 10 minutes; the control files are deleted periodically. Failed panel sign-in attempts: 24 hours.

Client-area access link: valid for 30 minutes and single-use.

Activity log (team and client-area clients): 24 months, then deleted.

Backups: we keep the most recent ones and one per month for about 6 months; then they are deleted. Data you ask us to erase may still exist in these backups until they are replaced.

Forms, requests and messages: for as long as needed to answer your request and follow up on any business relationship that results; after that we delete or anonymise them.

Invoicing documents and client and supplier data: for the period the law requires for accounting and tax obligations.

You may ask us at any time for access to your data, its rectification or erasure, restriction of or objection to processing, and data portability. Where processing depends on your consent, you may withdraw it without affecting what was done before.

To exercise these rights, write to contacto@wandrtech.cv. We reply as soon as possible. You also have the right to lodge a complaint with the competent data protection authority (in Cape Verde, the CNPD; if you live in the European Union, your country's authority).

The website uses an encrypted connection (HTTPS). The management panel is restricted to the team, with a password (stored irreversibly), two-step authentication mandatory for anyone who sees finances or administration, and roles that give each person only the access they need. Sign-ins to the client area use single-use links and each client only sees what concerns them. We keep an activity log that cannot be changed without leaving a trace, and backups can be encrypted. No system is infallible, but we take reasonable measures to protect your information.

Visitors to the website use only one essential cookie, which stores the language you chose. We use no advertising or analytics cookies. People who sign in to the client area or the management panel also receive an essential session cookie, which disappears when you close the browser. The assistant keeps the conversation in the browser's session storage, which is cleared when you close the tab. See the details in the Cookie Policy.

The website is intended for tourism professionals and businesses and is not aimed at minors.

We may update this policy. The date of the latest update is at the top of the page; if a change is significant, we will highlight it on the website.