1. General Provisions
1.1. This Privacy Policy (hereinafter — the "Policy") sets out how the Wayizi.com website and service (hereinafter — the "Service", "Wayizi") collects, stores, uses, and protects users' personal data.
1.2. The personal data controller is Готель «Карпатські полонини».
(hereinafter — "We", "Wayizi", the "Controller")
1.3. By using the Service, you agree to the terms of this Policy. If you do not agree with any provision, please stop using the Service.
1.4. This Policy applies to the wayizi.com website, its mobile version, the AI-based chat interface, and all related features (traveler profiles, subscriptions to other users, reviews, history of viewed hotels, and sending accommodation requests to partner hotels).
1.5. Wayizi is an informational hotel-matching service. The Service does not accept payment for accommodation and does not handle bookings itself — once you choose a hotel, your request is forwarded directly to the partner hotel, and the actual booking and payment for accommodation take place between you and the hotel.
2. Definitions
- Personal data — any information relating directly or indirectly to an identified or identifiable natural person.
- User — a natural person who uses the Service.
- Partner hotels — accommodation establishments listed in the Service's catalog.
- Data processing — any action performed on personal data (collection, registration, accumulation, storage, alteration, use, dissemination, destruction).
3. What Data We Collect
3.1. Data You Provide Yourself
- Name, profile nickname, avatar, date of birth (optional);
- Contact details: email, phone number (for contacting technical support);
- Text of messages you send to the AI assistant chat (e.g. requests like "I want a cozy hotel by the sea for a family vacation");
- Reviews, ratings, and comments about hotels;
- Accommodation request data: check-in/check-out dates, number of guests, chosen hotel (forwarded to the partner hotel for further arrangement);
- Photos and other media files you upload (avatar, chat attachments);
- Information added in profile settings (travel preferences, favorites).
3.2. Social Data Within the Service
- The list of your followers and the users (travelers) you follow;
- Public profile statistics (number of followers/following), visible to other Service users.
3.3. Data Collected Automatically
- IP address, browser type and version, operating system, device type;
- Cookies and similar technologies (see Section 8);
- Data on interaction with the site: pages viewed, time on site, referral source;
- History of hotels you have viewed within the Service.
3.4. Data From Third Parties
- Data received from partner hotels regarding the status of an accommodation request;
- If you sign in with a login and password or via Google (Google Sign-In) — basic profile data (name, email, avatar) provided by that service with your consent.
4. Purpose of Processing Personal Data
We process your data in order to:
- Provide personalized hotel recommendations through the AI chat based on your requests;
- Forward your accommodation request to the chosen partner hotel so the stay can be arranged directly with that hotel;
- Support the operation of your user profile, subscriptions to other travelers, and the review system;
- Send exclusively service (system) notifications — registration confirmation, request status, important changes to the Service. We do not send marketing mailings;
- Process payments related to voluntary support of the project (donations), as well as advertising and promotion of partner hotels on the site;
- Analyze and improve the Service, including the quality of AI recommendations, using web analytics;
- Ensure security and prevent fraud and abuse;
- Comply with the requirements of Ukrainian legislation.
5. Legal Grounds for Processing
Data is processed on the basis of:
- user consent (registration, sign-in via Google);
- the necessity to perform a contract (forwarding an accommodation request to a partner hotel, processing payments for project support or advertising);
- the Controller's legitimate interest (improving the Service, preventing fraud);
- requirements of Ukrainian legislation, including the Law of Ukraine "On Personal Data Protection".
6. Processing of AI Chat Requests
6.1. Messages you send to the AI assistant to help find a hotel are processed to generate relevant recommendations.
6.2. Anonymized or aggregated data from chat requests may be used to improve recommendation algorithms and the quality of the Service.
6.3. We do not use the content of your personal conversations to disclose it to third parties for advertising purposes without your separate consent.
6.4. Please do not send bank card details, passwords, or other sensitive data in the chat — the Service never asks for such information through the chat.
6.5. Your personal identifying data (name, email, phone number, date of birth) is stored separately from the AI chat system. The AI assistant has no access to this data. This data is also not used in any automated security analysis or fraud detection.
7. Who We Share Data With
We may share personal data with:
- Partner hotels — only the data necessary to forward an accommodation request (name, contact details, check-in/check-out dates, number of guests). Wayizi does not accept payment for accommodation — payment is settled directly with the hotel;
- Payment providers — to process payments for voluntary project support (donations) and for advertising/promotion of partner hotels on the site (Wayizi does not store full bank card details);
- Google — as the sign-in provider (Google Sign-In), map service (Google Maps, used to display hotel locations), and web analytics (Google Analytics 4);
- Our real-time chat infrastructure provider — for the technical operation of real-time chat messaging;
- File storage service providers — for hosting uploaded photos and other media files;
- Service moderators and administrators — for reviewing and moderating hotel listings, reviews, and user content;
- Technical service providers — hosting, AI providers, with whom confidentiality agreements are in place;
- Government authorities — in cases provided for by Ukrainian law, upon official request;
- Other parties — only with your separate consent.
We do not sell personal data to third parties.
8. Cookies and Similar Technologies
8.1. The Service uses cookies to:
- ensure the site's technical operation (authorization, saving settings);
- analyze traffic using Google Analytics 4 (GA4);
- personalize recommendations.
8.2. You can manage cookies through your browser settings. Disabling certain cookies may limit the Service's functionality.
9. Data Retention Period
9.1. Personal data is stored for as long as necessary to achieve the purpose of processing, as well as for periods set by law (in particular, for accounting and tax reporting).
9.2. Profile data is stored until the account is deleted by the user or upon their request.
9.3. Once the retention period ends, data is deleted or anonymized.
10. User Rights
Under Ukrainian personal data protection law, you have the right to:
- obtain information on whether your personal data is being processed and to access it;
- request correction of inaccurate data;
- withdraw your consent to data processing;
- request deletion of your data (the "right to be forgotten"), except where retention is required by law;
- object to processing for marketing purposes;
- file a complaint with the Ukrainian Parliament Commissioner for Human Rights or another competent authority.
Account deletion and the removal of related personal data is currently handled by contacting our technical support team at [email protected]. We will process your request and delete the data within a reasonable time, except for information we are legally required to retain.
To exercise other rights, please use the contact details in Section 14.
11. Data Protection
We take technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure, including encrypted connections (SSL/TLS) and restricting data access to authorized personnel only.
12. Children
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with their personal data, please contact us so we can delete it.
13. Changes to This Policy
We may update this Policy in connection with changes in legislation or the development of the Service. The current version is always available at wayizi.com/en/privacy. Continued use of the Service after changes are made constitutes acceptance of the updated Policy.
14. Contacts
For questions related to the processing of personal data, you can contact:
- Controller: Готель «Карпатські полонини»
- Email: [email protected]
- Address: Ukraine, Lviv Oblast, Drohobych District (Truskavets territorial community), village of Oriv, Shevchenka St. 855