Legal

Travelry Corporation, DBA Anywayr ("we", "us" or "Anywayr") respects your right to privacy and takes active measures to protect any personal information that you choose to share with us. This Privacy Policy describes how your personal information is collected, used, and shared when you visit, book reservations or make a purchase from our website https://anywayr.com/ (the "Site") or through our customer service agents. This Privacy Policy is incorporated by reference into our Terms of Service, available at https://anywayr.com/terms.

We recommend that you read this Privacy Policy in full to ensure you understand how your personal information is used. If you have any questions or concerns about our use of your personal information, please contact us using any of the methods listed in the "Contact Us" section at the bottom of this policy.

If you are using our Services outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

Keep in mind that if parts of our Site connect you with third party online services, those services do not operate under this Privacy Policy. Please review the privacy policies posted on those other online sites to understand their procedures for collecting, using, and disclosing personal information.

PERSONAL INFORMATION WE COLLECT

Information directly provided by you

When you create an account, book a reservation, make a purchase or attempt to make a purchase through the Site, we will collect certain information from you, including your full legal name, travel preferences, billing address, mailing address, email address, and phone number.

Payment card details. Anywayr does not collect or store your full payment card number or security code. When a payment is taken, your card details are entered directly into our payment processor (Stripe) or into the travel provider's own checkout, and are handled by them. We receive only limited information such as the card brand, the last four digits, and whether the payment succeeded.

We may collect other information to assist you with your travel plans including but not limited to, passport number, driver's license or other government-issued identification number, date of birth, gender, arrival and departure locations and times, airline, hotel or car rental frequent loyalty numbers, known traveler and global entry number, and other related travel information. We will also collect login details such as username and password when you create an account. We refer to this information collectively as "Order Information."

Information about your Travel Companions

When you make a reservation for your minor child or someone else through our Site, we will request personal information about that individual. As a parent or legal guardian of said minor child you hereby consent to providing us with their personal information. In the event you are making a reservation for someone else through our Site, you should obtain the consent of said individual prior to providing us with their personal information. The information You provide will only be available to view and amend through your account. Should your someone else want to amend or delete their information themselves they can contact us directly as described in the "Contact Us" section at the bottom of this policy.

Information that we collect automatically

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone and the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as "Device Information."

We collect Device Information using the following technologies:

• "Cookies" are small data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org
• "Log files" track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• "Web beacons," "tags," and "pixels" are electronic files used to record information about how you browse the Site.

Information we collect when you communicate with us via Social Media

Social Media: If you make use of any of our social media features on our Site or otherwise through a social media provider, we may access information about you via that social media provider in accordance with their privacy policy.

Information we collect when you text with us

Anywayr offers an optional text-message assistant. If you choose to use it, or if you ask us to send you trip alerts, we collect and store your mobile phone number and the contents of the messages you exchange with us, so we can answer you, keep your trip up to date, and send the alerts you asked for. Your messages are processed by automated systems, including AI, to understand what you are asking for. Message and data rates may apply, and message frequency varies. You can stop messages at any time by emailing support@anywayr.com. Full messaging terms are in our Terms of Service.

Information we collect when you communicate with us through the Site

Any interactions you have with us through our Site, such as chat or a support request, may be retained so we can respond to you, improve the Site, and protect us in the event of a legal dispute. This information will be processed and maintained consistent with this Privacy Policy.

CONNECTING YOUR EMAIL (GOOGLE USER DATA)

Anywayr offers an optional, opt-in feature called "Connect your inbox." It is turned off by default. If you choose to connect a Google (Gmail) account, Anywayr automatically finds your travel confirmations and loyalty status and adds them to your trips, so you do not have to forward emails or copy and paste anything. This section explains exactly what we access and, just as importantly, what we never do. It applies in addition to the rest of this Privacy Policy.

What we access

When you connect your inbox, you grant Anywayr read-only access to your Gmail using Google's gmail.readonly permission. Access is read-only: Anywayr can never send, reply to, delete, label, or change anything in your inbox. You sign in through Google directly, and Anywayr never sees or stores your Google password. Access is granted through Google OAuth and can be revoked by you at any time.

What we look for, and why

Anywayr uses automated systems, including Google's Gemini AI, to scan your messages and pull out two kinds of travel information: (1) your travel loyalty memberships and elite or status tiers (for example airline, hotel, and rental-car programs), and (2) your booking confirmations (flights, hotels, rental cars, itineraries, and receipts). We use this information only to build your Anywayr travel profile and to match confirmations to your trips, both of which are features you can see and use inside Anywayr.

We only read and keep travel-relevant information. Personal email, work email, newsletters, and any other non-travel content are ignored and are never stored.

What we never do

• We never sell, rent, trade, or transfer your Gmail data, or anything derived from it, to anyone, including advertisers, data brokers, or other companies.
• We never use your Gmail data, or anything derived from it, for advertising of any kind, or to make credit or lending decisions.
• We never use your email, or anything we extract from it, to train, build, or improve generalized or non-personalized AI or machine-learning models, and we use AI services under terms that prohibit them from doing so. The AI reads your messages only to power your own personalized Anywayr features.
• No Anywayr employee, contractor, or agent reads the contents of your email. Parsing is performed automatically by software.

The only limited exceptions to this automated, no-human-access rule are those permitted by Google's policies: a person may access this data only (1) with your specific agreement to view a particular message, (2) when necessary for security purposes, such as investigating a bug or abuse, (3) when required to comply with applicable law, or (4) where the data has been aggregated and anonymized and is used for internal operations in accordance with applicable privacy law.

How we store and protect it (data security)

We protect your Google data, including sensitive data such as your authorization credentials and travel records, with layered safeguards:

• Encryption in transit: all data is encrypted using industry-standard TLS (HTTPS) whenever it moves between you, Anywayr, and Google.
• Encryption at rest: the data we store is encrypted at rest in our database. Your Google authorization tokens are given an additional, separate layer of application-level AES-256-GCM encryption before they are stored.
• Access controls: the travel information we extract is stored under database row-level security, so it is accessible only to your own Anywayr account. Your Google authorization tokens are never exposed to your browser or to other users; only Anywayr's secure back-end systems can use them, and only to read your inbox for the travel details described above.
• Data minimization: we store only the specific travel details we extract (loyalty programs, elite or status tiers, and booking confirmations matched to your trips). We never store the raw contents of your messages, so the amount of Google data we hold is kept to the minimum needed to power your features.
• No human access: all parsing is performed automatically by software. No Anywayr employee, contractor, or agent reads the contents of your email, except in the limited circumstances permitted by Google's policies described above.

Data retention and deletion of your Google data

Connecting your inbox is opt-in and off by default, and you stay in control of your data.

How long we keep it. We keep the travel information we extract only for as long as you keep your inbox connected and your Anywayr account active, because that is what powers your travel features. We do not retain the raw contents of your emails at any point. Your Google authorization tokens are kept only while your inbox stays connected.

How it is deleted. Your Google data is deleted in each of these cases:

• When you disconnect an inbox, from within Anywayr or from your Google Account at https://myaccount.google.com/permissions, we immediately stop all access, revoke the authorization at Google, and delete that inbox's stored authorization token. When you disconnect your last connected inbox, we also delete the travel information we extracted from your Gmail; details you entered manually are kept.
• When you delete your Anywayr account, all of your Google authorization tokens and the travel data extracted from your inbox are deleted automatically.
• When you ask us to: email us using the "Contact Us" details below, and we will delete your stored Google authorization and extracted travel data promptly, and no later than 30 days after your request.

The only exception is where we are required to retain specific records to comply with applicable law. Disconnecting or deleting stops all future access to your Gmail.

Google API Services Limited Use

Anywayr's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If we ever want to use the Google data described here in a new way that is not covered by this policy, we will update this policy and ask for your consent before accessing your data for that new purpose.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the information we collect for a variety of purposes supporting our business uses, including the following:

We use your Order Information to make reservations on your behalf and to fulfill orders placed through the Site (including creating an account with us, processing your payment information, making travel reservations, and providing you with invoices and/or order confirmations). This includes sharing your booking information with other parties so we can fulfil your booking.

Additionally, we use your Order Information to:

• Communicate with you;
• Provide you with travel confirmations and updates for upcoming trips;
• Screen our orders for potential risk or fraud; and
• When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services. You are able to opt-out of these communications at any time.

We use the Device Information that we collect to:

• Help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
• To help us recognize you as a previous visitor and remember any preferences that may have been set while your browser was visiting our site. We may also use this information to display ads and offers that are more relevant to you.

We also may allow our service providers to use this information to, for example, help us understand which emails have been opened by recipients and to track the visitor traffic and actions on our site. You can contact us about updating or accessing your information through our contact information within the Contact Us section at the bottom of this Privacy Policy.

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties only when necessary to help provide the services described in "How do we use our personal information" section above. For example, we share your information with travel providers such as airlines, hotels, car rental, activity providers, rail and cruise lines as required in order to make travel reservations on your behalf. In addition, we share Order Information with our online store provider so that they can process your payments for us. We also may share your information with third-party vendors who provide services or functions on our behalf.

We may share your Personal Information with business partners with whom we may jointly offer products or services, or whose products or services may be offered on our Site. You can tell when a third-party business partner is involved in a product or service you have requested because their name will appear, either alone or with ours. If you choose to access these optional services, we will on occasions share information about you, including your personal information, with those partners.

We share your Personal Information with third party services providers who provide data processing services to us (for example, to support the delivery of; provide functionality on; or help to enhance the security of our Online Services), or who otherwise process personal information for purposes such as credit card processing, business analytics, customer service, marketing, distribution of surveys or sweepstakes programs, and fraud prevention. Where third-party service providers have access to data they will only collect information as needed to perform their functions. They are not permitted to share or use the information for any other purpose.

We also use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We may share aggregate or anonymous information with third parties, including advertisers. For example, we may tell our advertisers the number of visitors our website receives or the most popular hotels and tours reserved. Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

BEHAVIORAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. Please note that we do not have access to or control over cookies or other technologies these third parties may use to collect information about your interests, and the information practices of these third parties are not covered by this Privacy Policy. Some of these companies are members of the Network Advertising Initiative, which offers a single location to opt out of ad targeting from member companies. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising using the following links:

• FACEBOOK - https://www.facebook.com/settings/?tab=ads
• GOOGLE - https://www.google.com/settings/ads/anonymous
• BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at: http://optout.aboutads.info/. Note that if you choose not to receive tailored ads, you will still see online advertisements, but they will be more general and less relevant to you.

DO NOT TRACK AND GLOBAL PRIVACY CONTROL

Global Privacy Control (GPC): we honor it. GPC is a signal your browser or a browser extension can send to every website you visit, telling them not to share your personal information for cross-context behavioral advertising. When we detect a GPC signal, we do not load our advertising or analytics tags, and our servers do not send your information to advertising platforms. You do not need to contact us, and it works on every page.

Do Not Track (DNT) is a different, older signal, and we do not act on it. Certain browsers may offer you the option of providing notice to websites that you do not wish for your online activities to be tracked for preference-based advertising purposes ("DNT Notice"). Some browsers are, by default, set to provide a DNT Notice, whether or not that reflects your preference, and there is no agreed industry standard for what a website should do in response. For those reasons we do not alter our Site's data collection and use practices based on browser-based DNT Notices. If you do not wish to participate in preference-based advertising, use Global Privacy Control or the opt-out processes identified above.

YOUR RIGHTS

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the control over your information and mechanisms to opt out as described in each of the sections above. In addition to those, if at any point you believe the personal information we hold about you is incorrect, you want us to correct or delete that information, or you no longer want us to hold that information or contact you, please let us know through the means indicated in the "Contact Us" section below.

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the means indicated in the "Contact Us" section below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make a reservation or place an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe to the United States, where our servers are located.

You can also access or update certain personal information in the My Account section of our Site. You can request to de-activate your account at any time by contacting us through the contact information listed at the bottom of this policy. After you de-activate an account, you will not be able to sign in or access any of your personal information. However, you can open a new account at any time.

YOUR CALIFORNIA PRIVACY RIGHTS

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (California Civil Code Section 1798.100 et seq., the "CCPA"), provides additional privacy rights to California residents. To the extent the CCPA applies to us, we honor the rights described below. We extend these choices to all of our users regardless of where they live.

Informative Request

You have the right to know and see what data we have collected about you, including: The personal information we have collected about you; The categories of sources from which the personal information is collected; How any personal information collected is used by us; The categories of third parties with whom we have shared your personal information. When requested we will share all information collected in the previous twelve months from the date of request.

Do Not Sell or Share My Personal Information

We do not sell your personal information, and we have never exchanged it for money.

We do, however, use advertising and analytics tools from Google and Meta (Facebook) on our Site. These tools receive information about your visit, and in some cases an irreversibly hashed version of your email address, so that we can measure our advertising and reach people who may be interested in Anywayr. Under California law this counts as "sharing" your personal information for cross-context behavioral advertising, even though we receive no payment for it. You have the right to opt out.

How to opt out. You can opt out in any of these ways:

• Global Privacy Control (recommended). If your browser or a browser extension sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of sharing. When we detect that signal we do not load our advertising or analytics tags, and we do not send your information to advertising platforms from our servers. You do not need to contact us. Learn more at globalprivacycontrol.org.
• Email us at support@anywayr.com and ask us to stop sharing your personal information.
• Use the advertising opt-out links in the "Behavioral Advertising" section above.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Request to Delete

You have the right to request that we delete the personal information we have collected. Under the law, there are a number of exceptions, that include, but are not limited to when the information is necessary for us or a third party to do any of the following: Complete your transaction; Provide you a service we offer; Fix our system in the case of a bug; Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.); Protect your security and prosecute those responsible for breaching it; Comply with a legal obligation; Engage in scientific, historical, or statistical research in the public interests that adhere to all other applicable ethics and privacy laws; Make other internal and lawful uses of the information that are compatible with the context in which you provided it.

Other Rights

Under California's "Shine the Light" law (California Civil Code Section 1798.83), you can request certain information about our disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year. This request is free and may be made once a year. Additionally, you may appoint an agent to make any above request on your behalf, we may require evidence of such appointment to comply with any requests made by agents. You also have the right not to be discriminated against for exercising any of the rights listed above.

Exercising your rights

To request access to or deletion of your personal information, or to exercise any other data rights under California law, please contact us as per the "Contact Us" section below to submit any requests for the personal information collected.

Responding to Requests

It is our goal to respond to your request for the collected information or the deletion of the information we have collected within 45 days of receiving that request. If we require more time or unable to comply with your request, we will inform you of the reason and inform you of the extension period for completion in writing. You may learn more about your rights under California's privacy laws at https://oag.ca.gov/privacy.

DATA SECURITY

We maintain administrative, technical, and physical safeguards designed to protect your personal information, including sensitive data, against loss, misuse, and unauthorized access, alteration, or disclosure. Personal information is encrypted in transit using industry-standard TLS (HTTPS) and is encrypted at rest in our databases. Access is restricted to authorized personnel and systems on a need-to-know basis and is governed by access controls, and particularly sensitive credentials such as third-party authorization tokens receive an additional layer of application-level encryption. No method of transmission or storage is completely secure, but we work to protect your information and to review and improve our safeguards over time.

Additional protections that apply specifically to Google user data are described in the "Connecting Your Email (Google User Data)" section above.

DATA RETENTION

We retain your personal information for as long as your account is active or as needed to provide you with our services, and thereafter only as required to comply with our legal obligations, resolve disputes, and enforce our agreements. When you place an order through the Site, we will maintain your Order Information for our records as required by regulations. Other information is retained only as long as needed for the operational purpose it was collected for, after which it is deleted or anonymized.

You may request deletion of your personal information at any time as described in the "Your Rights" and "Contact Us" sections. Retention and deletion of data obtained through the optional inbox connection are described in the "Connecting Your Email (Google User Data)" section above.

CHILDREN'S PRIVACY

Anywayr is not directed to children, and we do not knowingly collect personal information from anyone under 13 years of age. An account may only be created by someone 18 or older. A parent or legal guardian may include a minor child as a traveler on a trip, as described in "Information about your Travel Companions" above. If you believe a child under 13 has provided us with personal information, please contact us at support@anywayr.com and we will delete it.

UPDATES TO THIS PRIVACY POLICY

We may make changes to this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. When we make such changes, we will take the appropriate steps to inform you consistently with the significance of the changes, and in accordance with applicable law. You can see the date the policy was last updated by looking at the "Effective Date" shown at the beginning of this Privacy Policy document.

CONTACT US

For more information about our privacy practices, if you have questions, if you would like to submit a privacy related request or if you want to make a complaint, please contact us by e-mail at support@anywayr.com.

You may also write us directly by regular mail to:

Anywayr helps you plan a trip and put together a shortlist of places to stay and things to do, but the booking itself is completed directly with the provider, such as your rental host or hotel on Airbnb, VRBO, or Booking.com, or your activity operator on Viator or GetYourGuide. Except where we tell you otherwise at the time of booking, Anywayr does not process your booking or take payment for it. (Separately, if you subscribe to a paid Anywayr plan, we do charge you for that subscription. See our Terms of Service.)

How we make money

When you book a stay or an activity through a link on Anywayr, we may earn a commission from that provider or from its affiliate program, at no additional cost to you. This is how the free version of Anywayr is funded, and it does not change the price you pay.

You should know how that affects what you see. Which booking sites we search is influenced by whether we have a commercial relationship with them: for vacation rentals we search Vrbo first, and fall back to other sites when Vrbo has nothing suitable. Once we have results, we rank the individual options we show you by how well they fit the trip you described, not by what we would earn on them. No provider can pay us for a better position in your results.

Payments and cancellations

Payment is collected by the provider you book with, using the payment method you enter on their site, and their pricing, payment, and cancellation policies apply. Review the policy shown before you confirm a booking.

Changes to a booking

If your plans change, contact the provider directly. They handle changes and cancellations for the booking you made with them, not Anywayr.

Splitting costs with your group

When your group splits costs inside Anywayr, that tracks who owes what among your travelers. It does not change or guarantee anything with the provider you booked through.