Your data, kept simple.

Wishweaver is an AI-powered Walt Disney World trip planning service run by Your Social Gathering LLC ("Wishweaver," "we," "us"). This policy explains what personal information we collect, why we collect it, and how we use it. Plain English, no dark patterns.

What we collect

Details you tell Stella during chat. Family composition, ages, heights, interests, budget, hotel preferences, dietary needs, and any concerns you share while planning. This is the data Stella uses to build your itinerary. We store it so you can come back and refine your plan.

Your email address. Collected at checkout so we can send your itinerary, booking reminders, and updates.

Payment information. Handled entirely by Stripe. We never see or store your credit card number. We receive a payment confirmation and a Stripe session ID.

Basic usage data. Which pages you visited, how you moved through the flow, and what buttons you clicked. Collected via PostHog (analytics) and Sentry (error monitoring). We use this to understand what works, what breaks, and how to improve.

Technical data. IP address (for rate limiting to prevent abuse), browser type, timestamp of visits. Standard stuff, kept for a reasonable window then discarded.

What we don't collect

Social security numbers. Government IDs. Medical records. Passwords (you don't have an account). Your credit card number (that's Stripe's domain, not ours). Contact lists from your phone. Location data beyond IP-based geolocation.

How we use your data

To build your itinerary. To send you reminder emails at the 90, 60, 30, and 7-day marks before your trip. To respond when you email us. To improve the service (aggregate patterns, not individual customer inspection). To detect and block abuse.

We do not sell your data. We do not share it with advertisers. We do not use it to train external AI models. Anthropic (the AI provider behind Stella) processes your chat messages to generate responses, but per our agreement with them, your data is not used to train their models.

Who else touches your data

Our service providers, each handling a narrow slice: Stripe (payments), Anthropic (AI generation), Resend (email delivery), Vercel (hosting), Upstash (temporary session storage), PostHog (analytics), Sentry (error monitoring), Notion (internal customer record keeping). Each is governed by their own privacy policy and processes data on our behalf under a data processing agreement.

What we store in your browser

While you're chatting with Stella, we save a copy of that conversation in your own browser's local storage. This is so a refresh, a closed tab, a dead battery, or a hiccup on our end doesn't make you retype everything. When you come back, we offer to pick up where you left off.

Because it's a copy of your conversation, it can include whatever you've told Stella, including your children's names, ages, and heights. So, plainly:

It stays on your device. This particular copy is never transmitted to us or to anyone else. (The conversation itself is separately sent to our servers to actually generate your plan, which is described above. This is just a local backup of it.) It is deleted automatically once you complete a purchase, since your plan then lives against your plan link instead, and any copy older than 7 days is discarded. You can remove it yourself at any time by choosing "Start fresh" when we offer to resume, or by clearing your browser's site data. If you use private or incognito browsing, or block site data, nothing is saved and the chat simply works as it always has.

We do not use this, or any other browser storage, for advertising, cross-site tracking, or building a profile of you.

How long we keep your data

Your itinerary and refinement chat: for the duration of your refinement window plus a reasonable buffer, then deleted. Emails and customer records: retained for financial and support recordkeeping (typically up to 7 years for tax purposes). Analytics data: aggregated and retained indefinitely; individual event data purged after 12 months.

Your rights

You can request a copy of the data we hold about you. You can request that we delete it (subject to legal retention requirements for tax records). You can request that we correct anything inaccurate. Email hello@wishweaver.ai to make any of these requests. We respond within 30 days.

If you're a California resident, you have additional rights under the CCPA. If you're in the EU or UK, you have rights under GDPR. Same email, same process. Tell us what you need and we'll handle it.

Children

Wishweaver is for adults planning family trips. We do not knowingly collect data directly from children under 13. When you share your kids' details with Stella, you're doing so as their parent or guardian on their behalf, and that data is treated with the same care as your own.

Changes to this policy

If we change how we handle your data, we'll update this page and, for material changes, email active customers. The "last updated" date at the top always reflects the current version.

Contact

Questions, requests, or concerns: hello@wishweaver.ai.