WanderQuote

Privacy Policy

Last updated: July 15, 2026

1. Who we are

WanderQuote ("WanderQuote", "we", "us") is an Indonesian small business (UMKM) owned and operated by Regina Priscillia. We provide white-label trip-proposal software for travel agencies, destination management companies, and travel advisors (our "Agencies"). Agencies use WanderQuote to draft trip quotes, publish branded quote pages on their own subdomain or custom domain, collect trip inquiries, and manage traveler relationships.

This policy explains what personal data we collect, why we collect it, who we share it with, and the choices you have. It applies to the WanderQuote website at wanderquote.com, the WanderQuote application, and the quote and inquiry pages that Agencies publish through the platform.

2. The two roles we play

Because WanderQuote is a business tool used by Agencies to serve their own clients, we handle personal data in two distinct roles:

  • As a controller for the data of Agency users: the account, workspace, billing, and usage data of the people who sign up for and operate a WanderQuote workspace.
  • As a processorfor traveler data: the names, contact details, trip preferences, and related information that Agencies enter into the platform or that travelers submit through an Agency's branded inquiry and quote pages. For this data, the Agency is the controller and this data is handled on the Agency's instructions. If you are a traveler with questions about how your data is used, please contact the agency that is planning your trip; we will support them in responding.

3. Information we collect

Account and workspace data

  • Name, email address, and authentication data (magic-link sign-in and passkeys).
  • Workspace details: agency name, subdomain, custom domain, branding (logo, colors, fonts), team members and their roles.
  • Billing details and subscription status, processed through Stripe.

Content Agencies create

  • Catalog items (hotels, activities, transport, restaurants) and their rates.
  • Quotes, itineraries, templates, and their translations.
  • Customer records and notes kept in the built-in CRM.

Traveler data

  • Information travelers submit through an Agency's inquiry form: name, contact details, trip dates, party size, budget, and free-text trip descriptions.
  • Information Agencies enter about their clients in order to prepare and send quotes.
  • Payment details for deposits paid on a quote are collected and processed by Stripe; we never see or store full card numbers.

Usage and technical data

  • Quote-page engagement: when a published quote is opened, so the Agency can follow up.
  • Product analytics (feature usage, page views within the application) and server logs (IP address, browser type, timestamps) used for security and to operate the service.

4. How we use information

  • To provide, maintain, and improve the platform.
  • To authenticate users and secure accounts and workspaces.
  • To process subscription payments and traveler deposits through Stripe.
  • To send transactional email: magic links, team invitations, quote links, inquiry and quote-view notifications.
  • To respond to support requests.
  • To detect, prevent, and investigate abuse, fraud, and security incidents.
  • To comply with legal obligations.

We do not sell personal data, and we do not use traveler data for advertising of any kind.

5. AI features

WanderQuote includes AI-assisted drafting: an Agency can turn a short brief into a draft itinerary, rewrite quote text, or translate content. To provide these features, the relevant content (the brief, the quote being edited, and related catalog items) is sent to our AI model providers through an AI gateway. We do not use this content to train AI models, and our providers process it only to return the requested output.

6. Who we share information with

We share personal data only with the service providers we need to run WanderQuote, under contracts that limit how they may use it:

  • Vercel (application hosting and content delivery).
  • Neon (managed Postgres database hosting).
  • Stripe (subscription billing and traveler deposit payments).
  • Resend (transactional email delivery).
  • Anthropic, via the Vercel AI Gateway (AI drafting and translation).
  • PostHog (product analytics).

We may also disclose information if required by law, to protect the rights and safety of our users, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to data collected before the change).

7. Cookies

We use essential cookies to keep you signed in and to protect against cross-site request forgery. We do not use third-party advertising cookies. Published quote pages record that a quote was viewed; this is a core feature Agencies rely on to follow up with their clients.

8. Data retention

We keep account and workspace data for as long as the workspace is active. When a workspace is deleted, its content (quotes, catalog, customer records) is deleted from production systems within 30 days, and from backups as they rotate out on our providers' schedules. Billing records are retained as long as tax and accounting law requires. Agencies can delete individual customer records and quotes at any time from within the product.

9. Security

All traffic is encrypted in transit (TLS) and data is encrypted at rest by our hosting providers. Each Agency's data is isolated with database-level row security so one workspace can never read another's data. Sign-in uses magic links and passkeys rather than stored passwords. No system is perfectly secure; if we learn of a breach affecting your personal data, we will notify affected Agencies without undue delay.

10. International transfers

Our service providers may store and process data in countries other than your own, including the United States and the European Union. Where required, transfers are covered by appropriate safeguards such as standard contractual clauses agreed with each provider.

11. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Agency users can exercise these rights by contacting us at support@wanderquote.com. Travelers should contact their agency first, since the agency controls their data; we will assist the agency in fulfilling the request. You may also have the right to complain to your local data protection authority.

12. Children

WanderQuote is a business tool and is not directed at children. We do not knowingly collect personal data from children under 16, except where an Agency records the members of a traveling family as part of a trip it is planning, in which case the Agency is responsible for having the right to do so.

13. Changes to this policy

We may update this policy as the product and the law evolve. If we make a material change, we will notify Agencies by email or in the product before it takes effect. The date at the top of this page shows when it was last revised.

14. Contact

Questions about privacy at WanderQuote? Write to us at support@wanderquote.com. See also our Terms of Service.