WanderBunnies — Last updated: July 17, 2026
This Privacy Notice explains how Bryan Duerk, an individual trading as WanderBunnies ("WanderBunnies," "we," "us," or "our"), processes personal data when you use our web, mobile, and related services (the "Service").
The data controller is:
For privacy requests, please identify yourself, describe the request, and provide the email address associated with your account. We may request reasonable information to verify your identity.
| Category | Examples | How collected |
|---|---|---|
| Account and authentication | Name, email address, username, password credentials, sign-in provider, account role, email-verification status, authentication and session identifiers. | Registration, login, Google or other enabled authentication providers, and account management. |
| Profile and preference data | First and last name, home address, preferred airport, temperature and appearance preferences, map preferences, family or fellow-traveler relationships, and related contact details. | Information you enter or authorize another group member to share. |
| Trip and collaboration data | Destinations, dates, flights, lodging, activities, transportation, itineraries, notes, packing lists, expenses, payments recorded in a shared ledger, comments, chat, reactions, presence, invitations, and follow codes. | Information you create, upload, receive through collaboration, or import. |
| Imported and uploaded content | Documents, PDFs, images, emails, email headers and bodies, attachments, extracted travel details, filenames, source metadata, and review history. | Manual uploads, forwarded email, and optional Gmail import. |
| Gmail and Google data | Read-only inbox messages and attachments within the authorized scope, the connected Google account address, OAuth tokens, token status, and import history. | Only after you authorize Gmail access and while the connection remains enabled. |
| Billing and transaction data | Stripe customer, subscription, invoice, tax, payment status, plan, entitlement, and webhook identifiers. Payment-card details are handled by Stripe rather than stored by WanderBunnies. | Subscription checkout, billing management, and payment events. |
| Device, usage, and security data | IP address, user-agent, device or app information, timestamps, request and error logs, approximate technical location derived from IP where enabled, security events, and diagnostic telemetry. | Use of the Service, support, fraud prevention, and error monitoring. |
| Affiliate and external-link data | Selected activity or destination parameters, an affiliate redirect token, referral/click information, and technical data received when an external link is opened. | When an eligible GetYourGuide or other partner link is requested or opened. |
Do not upload passports, government identification, payment-card numbers, health information, or other sensitive information unless the feature specifically requires it and you have authority to do so. Travel documents may incidentally contain sensitive personal data belonging to you or other people.
| Purpose | Legal basis used where GDPR applies |
|---|---|
| Create and secure accounts, authenticate users, provide itineraries, collaboration, import, chat, support, and requested features. | Performance of a contract; steps at your request before entering a contract. |
| Process Gmail connections, imports, uploads, extraction, and review workflows. | Performance of a contract; consent where applicable to an optional connected-account or import feature. |
| Process subscriptions, taxes, invoices, refunds, fraud checks, and payment disputes. | Performance of a contract and compliance with legal obligations. |
| Operate, maintain, secure, debug, prevent abuse, enforce limits, and improve reliability. | Legitimate interests, balanced against your rights and expectations; legal obligation where applicable. |
| Send service, security, billing, and account notices. | Performance of a contract or legitimate interests. Marketing messages require consent where required. |
| Generate AI-assisted itineraries, extraction results, summaries, and recommendations. | Performance of a contract or your request for the feature; consent where a separate optional processing activity requires it. |
| Use optional analytics, advertising, or non-essential cookies. | Consent, where required by applicable law. |
Where we rely on legitimate interests, those interests include service security, fraud prevention, troubleshooting, product reliability, and responsible administration. You may object to processing based on legitimate interests in accordance with applicable law.
WanderBunnies may use configured AI providers, which may include OpenAI, Anthropic, Google Gemini, or other providers enabled for a particular feature, to generate itinerary suggestions, parse uploaded travel material, summarize content, or provide chat responses. Depending on the feature, inputs may include destinations, dates, preferences, itinerary text, and relevant uploaded or imported travel content.
AI output can be inaccurate, incomplete, stale, or unsafe. We do not use AI output as a substitute for professional travel, medical, legal, immigration, or emergency advice. We configure providers and contracts to limit use of submitted data to the disclosed service purposes, but provider-specific retention and location may differ; the current provider configuration must be maintained in our internal subprocessor record. Google user data, including Gmail data and data derived from it, is not used to create, train, or improve a generalized artificial-intelligence or machine-learning model.
AI-generated content is labelled where required. You remain responsible for reviewing output before relying on it or sharing it with others.
When you connect Gmail, we request only the permissions needed for the enabled import feature. We use the authorized Gmail data to identify travel-related messages and attachments, extract itinerary information, show import results, and let you review or delete imported data. We do not use Gmail data for advertising, sell it, or use it for unrelated profiling. We do not read messages after you disconnect, except for data already lawfully retained under the retention rules above.
Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the user-facing features described in this Notice, such as account authentication and the optional Gmail itinerary-import workflow. Google user data is not used for advertising, sold to data brokers, or used to create, train, or improve a generalized artificial-intelligence or machine-learning model. The OAuth consent screen and this Notice must remain consistent with the actual scopes, storage, processing, sharing, and deletion behavior.
WanderBunnies is collaborative. When you join a group, invite someone, follow a shared trip, or post content in a trip, the information you choose to share may be visible to the relevant members and recipients. You are responsible for obtaining appropriate permission before uploading or sharing another person's information.
We may disclose data to service providers acting under contract, including:
We do not sell Gmail data or use Google user data for advertising. We do not share personal data with affiliate partners merely because you use the Service; an external partner may receive data when you request or open its link.
Some providers may process data outside the EEA, including in the United States. Where required, we use an adequacy decision, the EU Standard Contractual Clauses, or another lawful transfer mechanism, together with appropriate supplementary safeguards. Our infrastructure provider, Google Cloud, publishes its own subprocessor list at cloud.google.com/terms/subprocessors. You may request current information about our other service providers and applicable transfer mechanisms by contacting us at bryan.duerk@gmail.com.
We retain information only for as long as necessary for the purposes described above, to provide the Service, resolve disputes, enforce agreements, maintain security, and meet legal, tax, accounting, or regulatory obligations.
| Data | Retention criterion |
|---|---|
| Account and profile data | While the account is active and until deletion is completed, except for information required for legal, security, fraud-prevention, or dispute purposes. |
| Trip and shared content | Until you or an authorized group member deletes it, the account is deleted, or retention is necessary for a legal or shared-collaboration purpose. Shared content may be retained in de-identified or group-scoped form where needed to preserve another member's trip. |
| Uploads, imported documents, parsed items, and Gmail data | Until the item is deleted, Gmail is disconnected, the account is deleted, or a shorter feature-specific period ends, subject to legal and security exceptions. |
| OAuth tokens | Until disconnect, expiry, account deletion, or revocation, whichever occurs first, with secure deletion and backup expiry handled under our operational schedule. |
| Billing and accounting records | For the period required by applicable tax, accounting, consumer-protection, and payment laws. |
| Security, diagnostic, and audit logs | For the shortest period reasonably necessary to investigate incidents, protect the Service, comply with legal duties, and defend claims. |
| Backups | Until overwritten or securely deleted under the documented backup lifecycle. |
We use administrative, technical, and organizational safeguards appropriate to the risks, including access controls, encryption in transit, provider security controls, authentication protections, logging, rate limits, and incident-response procedures. No system is completely secure. If we identify a data breach that legally requires notification, we will notify affected people and authorities as required.
Depending on where you live and subject to legal exceptions, you have the following rights regarding your personal data:
You may export available account data through the Service and delete your account through Account settings. Deletion may not remove information that another user lawfully contributed to a shared trip or information we must retain by law.
Submit a request to bryan.duerk@gmail.com. We generally respond within one month under the GDPR, subject to lawful extensions and verification requirements. You may complain to the data-protection authority in your country of residence, place of work, or the alleged infringement.
There are no minors as account holders: the Service is not directed to children under 16, and a person under 16 may not create or hold an account. We do not knowingly collect children's personal data through account creation without a lawful basis and, where required, verifiable parental authorization.
An adult account holder may enter travel information for a minor dependent or family member as part of planning a shared trip, such as adding them as a traveler or including their travel documents. The adult submitting that information is responsible for having the authority to provide it and for its accuracy. If you believe a child has created an account or otherwise provided personal data directly and improperly, contact us so we can investigate and delete it where appropriate.
Residents of US states or other jurisdictions may have additional rights, including rights to know or access, correct, delete, obtain a portable copy, limit the use of sensitive personal data, opt out of sale or targeted advertising, and receive equal service. These rights apply subject to the thresholds, definitions, and exemptions in the relevant law. Where applicable, we will provide the required notice, appeal process, “Do Not Sell or Share” or equivalent controls, and honor legally recognized opt-out signals.
The Service is not directed to children under 13 in the United States. If that changes, or if we obtain actual knowledge that we collect personal information from a child under 13, we will assess and comply with the Children's Online Privacy Protection Act, including obtaining verifiable parental consent where required.
We may update this Notice to reflect changes to the Service, providers, law, or processing. We will post the new version with a revised date and provide additional notice or obtain consent when required for a material change.
Consumer Terms · Withdrawal Form · Cookie Notice · Content Moderation and DSA Procedure