PRIVACY POLICY

1. Who We Are

This Privacy Policy explains how WAYRO LTD, company number 17470959, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX, processes personal data when you use Wayro.

For the purposes of applicable data-protection law, WAYRO LTD is generally the controller of personal data processed for the operation of the Wayro Service, except where another party acts as an independent controller for its own processing.

If you have questions about privacy or wish to exercise your rights, contact us at:

hello@wayro.ai

2. Personal Data We May Process

Depending on how you use Wayro, we may process the following categories of personal data.

Account and Contact Information

This may include:

• email address;
• account information;
• information you choose to provide;
• communications you send to us.

Travel and Route Information

This may include information you enter, generate or save through Wayro, such as:

• origin and destination;
• intermediate stops;
• saved routes;
• planned trips;
• route preferences;
• selected filters;
• saved collections;
• other information associated with your use of the Service.

Some route information may relate to locations that could be associated with an identifiable person. We therefore handle such information as personal data where applicable law treats it as such.

Subscription and Purchase Information

When you purchase Wayro Premium, we may receive information necessary to identify and manage your subscription, including:

• customer email address;
• order or subscription identifier;
• subscription status;
• purchase date;
• product or plan information.

Payment card details are processed through MoR's payment infrastructure. Wayro does not intentionally collect or store full payment card numbers.

Technical and Security Information

We may process technical information necessary to operate, secure and troubleshoot the Service, such as:

• IP address;
• browser and device information;
• operating system;
• timestamps;
• security information;
• error and diagnostic information;
• server and application logs.

Support Communications

If you contact us, we may process the information contained in your communication and any information necessary to respond to your request.

3. How We Collect Personal Data

We may obtain personal data:

• directly from you when you create an account or use Wayro;
• when you create, save or manage routes and trips;
• when you purchase or manage a Premium subscription;
• when you contact us;
• automatically through the technical operation and security of the Service;
• from service providers involved in delivering the Service.

4. How We Use Personal Data

We may use personal data to:

• provide and operate Wayro;
• create and manage user accounts;
• generate and save travel plans and routes;
• provide Premium features;
• manage subscriptions and verify payment status;
• provide customer support;
• maintain security and prevent fraud or abuse;
• diagnose technical problems and maintain service reliability;
• improve the Service;
• comply with legal obligations;
• communicate with you about your account, transactions and the operation of the Service.

We do not use personal data for advertising or behavioural advertising.

We do not sell personal data.

5. Legal Bases for Processing

Where applicable data-protection law requires us to identify a lawful basis, we generally rely on one or more of the following:

Performance of a Contract

We process information where it is necessary to provide the Service, manage your account or perform our agreement with you.

Legitimate Interests

We may process information where reasonably necessary for legitimate interests such as operating, securing, maintaining and improving Wayro, preventing fraud and abuse, and responding to enquiries.

Legal Obligations

We may process information where necessary to comply with legal, tax, accounting or other legal obligations.

Consent

Where applicable law requires consent for a particular processing activity, we will request and rely on that consent.

6. Service Providers and Third Parties

Service Providers and Third Parties

We use trusted third-party service providers where reasonably necessary to provide, operate, secure and improve Wayro.

Depending on the functionality you use, these may include providers of:

• payment processing and subscription management;
• hosting and cloud infrastructure;
• AI and content-generation services;
• mapping, geocoding and location-related services;
• other technical services necessary to operate the Service.

MoR

Purchases of Wayro Premium are processed through MoR, which acts as the Merchant of Record and provides payment, subscription management, customer receipts and related transaction services.

AI, Mapping and Infrastructure Providers

Certain information may be processed by third-party AI, mapping, geocoding, hosting or infrastructure providers where this is necessary to provide the requested Wayro functionality.

The specific providers used by Wayro may change from time to time as we update and improve the Service.

We do not sell personal data.

Where a third-party provider processes personal data on our behalf, we take appropriate steps to require that the processing is carried out in accordance with applicable data-protection law and our instructions, where required.

7. Information Sent to AI and Mapping Providers

To provide Wayro's core functionality, some information entered by you may be transmitted to relevant third-party service providers.

For example, information relating to a route, such as an origin, destination, stops, preferences or other route parameters, may be transmitted to AI, mapping or geocoding providers in order to generate or return the requested result.

Please do not enter sensitive personal information into Wayro unless it is necessary for the intended functionality.

8. International Data Transfers

Some of our service providers may process personal data outside the United Kingdom or the European Economic Area.

Where applicable data-protection law requires safeguards for an international transfer, we will use an appropriate lawful mechanism, such as an adequacy decision or appropriate contractual safeguards.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods depend on the type of information and the reason for processing.

Account information may be retained while your account remains active and for a reasonable period afterwards.

Saved routes and trip information may be retained while needed to provide the relevant functionality or until you delete them, subject to reasonable backups and legal or operational retention requirements.

Transaction and accounting information may be retained for as long as required by applicable tax, accounting or other legal obligations.

Support communications may be retained for as long as reasonably necessary to handle the matter and maintain appropriate records.

Security and technical logs may be retained for as long as reasonably necessary for security, troubleshooting and abuse prevention.

10. Your Data Protection Rights

Depending on your jurisdiction, you may have rights including:

• the right to access your personal data;
• the right to correct inaccurate or incomplete information;
• the right to request deletion;
• the right to request restriction of processing;
• the right to object to certain processing;
• the right to data portability where applicable;
• the right to withdraw consent where processing is based on consent.

To exercise your rights, contact:

hello@wayro.ai

You may also have the right to complain to the data-protection authority in your country.

For UK matters, this includes the Information Commissioner's Office (ICO).

11. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

No internet transmission or storage system can be guaranteed to be completely secure.

12. Children's Data

Wayro is not intended for children in circumstances where applicable law requires parental consent.

We do not knowingly seek to collect personal data from children in such circumstances.

If you believe that a child has provided personal data to us where parental consent was required, please contact us.

13. Cookies and Similar Technologies

The current version of Wayro is not intended to use non-essential advertising or behavioural-tracking technologies.

Wayro may use strictly necessary technologies required for functions such as authentication, session management, security and core Service functionality.

If we introduce analytics, advertising, or other non-essential tracking technologies in the future, we will update this Privacy Policy and implement any consent or other controls required by applicable law before using those technologies where required.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our processing activities, Service or legal requirements change.

The latest version will be published on this page with an updated "Last updated" date.

15. Contact