Terms of Service

Last updated: June 22, 2026

Table of Contents
  1. 1. Acceptance of Terms
  2. 2. Age requirement
  3. 3. AI-assisted suggestions are not bookings
  4. 4. Source attribution and user verification
  5. 5. Automated decision-making (GDPR Art. 22)
  6. 6. Accessibility and pet-friendly disclaimers
  7. 7. Data processing and sub-processors
  8. 8. Subscription and cancellation
  9. 9. Passport and document storage
  10. 10. Right to erasure
  11. 11. Acceptable use
  12. 12. Liability
  13. 13. B2B terms and SLA
  14. 14. California Privacy Rights (CCPA)
  15. 15. Cookie policy

1. Acceptance of Terms

By creating an account or using WaySavia ("Service") you agree to these Terms. If you do not agree, do not use the Service.

2. Age requirement

You must be at least 13 years old to use WaySavia (or older where required in your jurisdiction). The Service is not directed to children under 13, and we do not knowingly collect personal information from them. See our Privacy Policy for COPPA details.

3. AI-assisted suggestions are not bookings

Itineraries, timings, costs, and constraint checks are AI-generated assistance. They are not confirmations. You are responsible for verifying and booking every component (flights, hotels, activities) independently.

4. Source attribution and user verification

Suggestions are labelled with data sources where available (e.g. Google Places, OpenWeather) and links to verify. You acknowledge that third-party data may be outdated or inaccurate and agree to verify directly before relying on it.

5. Automated decision-making (GDPR Art. 22)

We use AI to generate itineraries. You may opt in to this automated processing at signup or later in Profile. AI features require your consent and are disabled until you opt in. You may withdraw consent at any time from Profile.

6. Accessibility and pet-friendly disclaimers

Accessibility and pet-friendly filters reflect best-effort data from third parties. Conditions change. Always confirm with the venue before you travel.

7. Data processing and sub-processors

We process your data under our Privacy Policy. Sub-processors include Supabase (database/auth), Stripe (billing), OpenRouter, OpenAI (fallback), Mapbox (maps), Google (places), OpenWeatherMap, PostHog (opt-in analytics), Sentry (errors), Spacemail (email), TravelPayouts (affiliate links), and ip-api.com (security geo lookup). A Data Processing Agreement (DPA) is available on request for Pro and B2B customers.

8. Subscription and cancellation

Pro is available as a monthly or annual subscription. You can cancel any time from the Stripe customer portal; access continues until the end of the paid period. Refunds are not automatic and are handled case-by-case.

Fair-use policy. Features described as “unlimited” (including AI itinerary generation, AI chat messages and trip Q&A, screenshot/photo imports, and social link parsing) are provided subject to fair use to protect service quality and prevent automated or abusive usage. Fair use is currently set at 100 of each per calendar month per Pro account. The free plan includes 10 AI chat messages per month. These limits comfortably exceed normal individual use; we may adjust them and will only contact you if your usage is materially abnormal.

9. Passport and document storage

If you store passport data or travel documents, sensitive fields (such as document numbers) are encrypted with application-level encryption in our database. You are responsible for securing your device and account credentials. We do not share documents with third parties or use them for AI inference.

10. Right to erasure

You may delete your account from Profile. This permanently removes your profile, trips, activities, expenses, and documents from our systems. We log deletion requests to LLM sub-processors for operational review; retention at those vendors is governed by their contracts and DPAs. Anonymous aggregate analytics may be retained.

11. Acceptable use

Do not attempt to bypass rate limits, scrape the API, resell access, or use the Service to generate content that violates third-party terms (e.g. spam, phishing, illegal activities).

12. Liability

The Service is provided as-is. We are not liable for travel disruption, cancellations, incorrect data, or indirect damages arising from use of AI suggestions.

13. B2B terms and SLA

Organizations using white-label widgets or embeddings are subject to additional B2B terms, including uptime SLAs, brand-voice warranties, and knowledge-base ingestion limits, as set out in the B2B agreement.

14. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights with respect to your personal information:

  • Right to know. You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
  • Right to delete. You may request that we delete personal information we have collected from you, subject to certain exceptions.
  • Right to opt out of sale or sharing. We do not sell your personal information. We also do not share personal information for cross-context behavioural advertising. You may still exercise this right via the Privacy & AI section of your Profile or via the “Do Not Sell My Info” link in our footer.
  • Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, email privacy@waysavia.com with subject “CCPA Request”. We will verify your identity and respond within 45 days.

15. Cookie policy

WaySavia uses the following categories of cookies:

CategoryExamplePurposeConsent
NecessarySupabase auth tokenKeep you signed in; CSRF protectionAlways on
AnalyticsPostHogPage views and feature usage (aggregated, no ad targeting)Opt-in
MarketingWe do not run advertising cookies at this timeOpt-in

You can review or change your cookie preferences at any time using the cookie banner (re-accessible from our footer) or your browser settings.