Privacy Policy

Updated: May 31, 2025
At WAVESCOMPASS, Inc. (“WavesCompass”, “Company”, “we”, “our” or “us”), we value your privacy and are committed to protecting your personal information. This Privacy Notice explains how we collect, use, disclose, and safeguard your data when you use our travel booking services in Australia, Canada, India, South Korea, Japan, the United Kingdom, the European Economic Area (EEA), and the United States. We comply with applicable data protection laws in these regions, including but not limited to the General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), the Personal Information Protection and Electronic Documents Act (PIPEDA), and other relevant national and state laws.
We believe in being clear and open about how we collect data related to you when you visit our website at wavescompass.com (the “Site”) (“Website”), download, access and/or use the mobile application named: WavesCompass (“App”), subscribe to/purchase our services for budgeting and lifestyle planning, subscribe to our newsletter, interact with us, participate in online surveys, advertisements or marketing emails, opt-in for push notifications, opt-in to receive SMS mobile messages, or engage with any other websites, pages, features, or content we own, operate and/or provide (collectively with the Website and/or App (the “Services”)).
This Privacy Notice (“Privacy Notice”) is designed to help you understand our data practices and assist you in making informed decisions when using our Services. Please read this Privacy Notice carefully. The Services are intended for users located in Australia, Canada, India, South Korea, Japan, the United Kingdom, the EEA, and the United States. By accessing and/or using the Services, you expressly acknowledge and agree that you reside in one of these jurisdictions and will only access and use the Services in compliance with applicable laws.
By accessing and using the Services, you acknowledge that we collect, use, store, and disclose your personal information as described in this Privacy Notice and our Cookie Policy (“Cookie Policy”). Where required by applicable laws, we will obtain your consent before processing your personal information, and you may withdraw your consent at any time.
For users in certain jurisdictions, you may have specific rights regarding your personal information, including the right to access, correct, delete, or restrict its processing. To learn more about your rights and how to exercise them, please refer to the “Your Rights and Choices” section of this Privacy Notice.
The use of the Services and App is subject to our Terms of Service.

Types of data we collect

• Non-Personal Information includes information that cannot be used to personally identify you, such as anonymous usage data, general demographic information we may collect, referring/exit pages and URLs, platform types, preferences you submit and preferences that are generated based on the data you submit, and number of clicks.
  
  
• Personal Information means data that allows someone to identify or contact you, including, for example, your name, address, telephone number, email address, as well as any other non-public information about you that is associated with or linked to any of the foregoing data.
  
  

User information

• Identifiers: We collect your first and last name, email address, and phone number when you contact us.
  
  

• Respond to inquiries and provide customer support (legitimate interest under GDPR/UK GDPR, implied consent under PIPEDA).
  
  
• Send service-related communications (e.g., account updates, security alerts) (contractual necessity under GDPR/UK GDPR).
  
  
• Send marketing communications, where permitted, and only with your consent (opt-in required under GDPR, UK GDPR, and PIPEDA; opt-out available under CCPA).
  
  

• For users in the EEA, UK, and Canada, you may withdraw consent for marketing communications at any time.
  
  
• Under CCPA, you have the right to opt out of the sale or sharing of your personal information (if applicable).
  
  
• For more details on your rights, please refer to the “Your Rights and Choices” section of this Privacy Notice.
  
  

Account information

• Identifiers: Name, date of birth, gender, job title, email address, phone number, zip code.
  
  
• Contact list (if you provide consent): mobile contact lists may be accessed only if you explicitly grant permission.
  
  

• To provide and improve the Services (Legitimate interest under GDPR/UK GDPR, implied consent under PIPEDA).
  
  
• To understand your preferences and personalize recommendations (Consent under GDPR/UK GDPR & PIPEDA).
  
  
• To send marketing communications, including promotional text messages (Explicit consent required under GDPR, UK GDPR, and PIPEDA; opt-out required under CCPA).
  
  
• To detect and prevent fraud (Legitimate interest under GDPR/UK GDPR; legal obligation where applicable).
  
  

• If you provide consent, we may access your contact list to suggest relevant services to you and your contacts. You can withdraw consent at any time in your device settings.
  
  
• Under CCPA, you have the right to opt out of the sale or sharing of your personal information. To exercise this right, please visit “Do Not Sell or Share My Personal Information.”
  
  
• For marketing text messages, you must opt in before receiving them, and you may opt out at any time by replying “STOP.”
  
  

Cookies and first-party tracking

• Essential cookies: Necessary for the operation of the Services (e.g., security, authentication, fraud prevention).
  
  
• Analytics cookies: Help us understand how users interact with our Services.
  
  
• Advertising & tracking cookies: Used for personalized advertising and retargeting.
  
  

• Essential cookies: Processed under legitimate interest (GDPR/UK GDPR).
  
  
• Non-essential cookies (analytics, advertising, tracking): Require user consent before being set (GDPR, UK GDPR, PIPEDA).
  
  

• Under CCPA, you can opt out of the “sale” or “sharing” of your personal data related to cookies.
  
  
• Under GDPR, UK GDPR, and CCPA, you have the right to withdraw or request deletion of data in the Support Portal.

Cookies and third-party tracking

• Behavior-based advertising & third-party tracking: Processed only with your consent (GDPR, UK GDPR, PIPEDA).
  
  
• CCPA compliance: If you are a California resident, you can opt out of the “sale” or “sharing” of your personal data by visiting Do Not Sell or Share My Personal Information.
  
  

• You can erase your data and delete your account by going to the “Advanced Settings” page in the App.
  
  
• Under GDPR, UK GDPR, and CCPA, you have the right to withdraw or request deletion of data in the Support Portal.
  
  

Social media connectors & third-party tracking

• Your IP address and browsing behavior on our Website or App
  
  
• Information about the content you engage with
  
  
• Data shared by the social media platform if you are logged into your account while interacting with these features
  
  

• Facebook (Meta)
  
  
• Instagram
  
  
• LinkedIn
  
  
• X (formerly Twitter)
  
  
• YouTube
  
  
• Others as applicable
  
  

• Behavioral advertising & personalized marketing, processed only with your explicit consent (GDPR, UK GDPR, PIPEDA).
  
  
• Tracking website and mobile application analytics, and engaging third-party partners to enhance the Services.
  
  

• CCPA compliance: Under CCPA, you may opt out of behavioral advertising and data sharing with social media platforms by visiting Do Not Sell or Share My Personal Information.
  
  
• Under GDPR, UK GDPR, and CCPA, you have the right to withdraw or request deletion of data in the Support Portal.
  
  

Email interconnectivity and tracking

• Open rates: When you open an email we send you.
  
  
• Click rates: When you click on any links or banners embedded in the email.
  
  
• IP address: Your IP address may also be collected as part of this tracking.
  
  

• We track email interactions to understand how you engage with our communications and to improve the relevance of the information we send you.
  
  
• We rely on your consent for tracking email interactions (GDPR, UK GDPR, PIPEDA). You will be provided with an option to opt in to email tracking, and you can withdraw your consent at any time.
  
  
• CCPA compliance: If any data collected from email interactions is used for advertising or marketing purposes, you can opt out of the “sale” or sharing of your data by visiting Do Not Sell or Share My Personal Information.
  
  

• You have the right to opt out of email tracking by adjusting your email preferences or unsubscribing from our communications.
  
  
• You can withdraw your consent to email tracking at any time by updating your email preferences in your account settings or by visiting the Support Portal.
  
  

Feedback & support

• Name
  
  
• Email address
  
  
• Phone number (if provided)
  
  
• Inquiry details (e.g., the nature of your inquiry or issue, any screenshots or other attachments you submit)
  
  

• Legitimate interest in resolving issues and improving the Services (GDPR, UK GDPR), or
  
  
• Explicit consent (if sensitive data is involved).
  
  

• You have the right to request access to your personal data and request corrections or deletions where applicable.
  
  
• You can object to the processing of your personal data under legitimate interest at any time by visiting the Support Portal.
  
  

Emailing list

• Name
  
  
• Email address
  
  

• We collect your personal data with your explicit consent to send you information about our products and services.
  
  
• If you have opted in, we will send you marketing emails related to our products, services, and updates.
  
  
• Legitimate interest may be relied upon only for non-marketing communications, such as service-related notifications, but not for promotional content.
  
  

• You can withdraw your consent to receive marketing emails at any time by using the unsubscribe button in the email or by contacting us directly.
  
  
• If you are a resident of California, you can opt out of the sale or sharing of your personal information by visiting Do Not Sell or Share My Personal Information.
  
  

Mobile devices

• Unique identifying information broadcast from your device, such as device identifiers (e.g., advertising ID, device model).
  
  
• Contacts data (if enabled on your device) to understand your interaction with our Services.
  
  
• Location data (if enabled on your device) to understand your interaction with our Services.
  
  

• We collect and process this data based on your consent (especially for tracking, profiling, or personalized advertising) or legitimate interest (e.g., identifying unique visitors, understanding how users interact with the Services, and improving the user experience).
  
  
• Legitimate interest is our legal basis for processing mobile device data, but you have the right to object to this processing at any time.
  
  
• If we process this data for marketing or behavioral advertising, we will obtain explicit consent from you.
  
  
• You may withdraw your consent or opt out of tracking by adjusting your device settings (e.g., turning off location tracking or limiting ad tracking).
  
  

• You can withdraw your consent for processing data from your mobile device at any time by changing your device settings or by visiting the Support Portal.
  
  
• If you are a resident of California, you can opt out of the sale or sharing of your personal information by visiting Do Not Sell or Share My Personal Information.
  
  

Website & application interactions

• IP addresses, preferences, web pages you visited prior to using the Services, browser information (such as browser type, version, and operating system), network information, device identifiers (e.g., unique device IDs), language and regional settings.
  
  
• Interaction data, such as timestamps, clicks, scrolling, browsing times, searches, transactions, referral pages, load times, and issues encountered (e.g., loading errors).
  
  

• We process this information based on our legitimate interest in improving the functionality and performance of the Services, understanding your preferences and interests, and selecting offerings that may be most useful to you.
  
  
• We also process this data based on our legitimate interest in detecting and preventing fraud.
  
  
• Explicit consent is required for certain types of data collection, such as when cookies or other tracking technologies are used for personalized advertising or profiling. You can manage your preferences regarding the collection of data via the cookie settings.
  
  

• You have the right to opt out of the collection of certain data, particularly related to personalized advertising or profiling, at any time.
  
  
• If you are a resident of California, you have the right to opt out of the sale or sharing of your personal information by visiting Do Not Sell or Share My Personal Information.
  
  
• You may also withdraw your consent for data collection or processing at any time by adjusting your browser settings or device settings, or by visiting the Support Portal.
  
  

Transactional information

• Information about transactions you have made through partner services via WavesCompass (e.g., the types of services or products purchased, dates of transactions, and amounts).
  
  
• Partner service engagement details, such as which partner services you have previously engaged with through WavesCompass.
  
  

• We process this data based on our legitimate interest in fulfilling contractual obligations related to the Services we provide to you (e.g., processing your transactions and delivering services as requested).
  
  
• We also process your transactional information based on our legitimate interest in understanding your preferences and interests to offer you more tailored and relevant services or products that might be of interest to you.
  
  
• If we use your transactional information for marketing purposes, we will obtain explicit consent before doing so, and you will have the option to withdraw consent at any time.
  
  

• You have the right to access, rectify, restrict, and delete your transactional information.
  
  
• If you are a resident of California, you have the right to opt out of the sale or sharing of your personal information by visiting Do Not Sell or Share My Personal Information.
  
  
• You may withdraw consent at any time by visiting the Support Portal or adjusting your settings, particularly for data used in personalized marketing or advertising.
  
  

Logs

• Browser type, operating system, Internet Protocol (IP) address, domain name, click activity, referring website, and date/time stamps.
  
  
• This data may be used to identify you either directly or indirectly in combination with other information.
  
  

• Based on our legitimate interest, monitoring and maintaining the security of our networks and Services.
  
  
• Analyzing and improving the functionality and performance of the Website and App.
  
  
• Understanding how users interact with our Website and Services to enhance user experience and optimize our services.
  
  

• You have the right to opt out of certain data collection activities, such as cookie tracking, through your browser settings or our cookie management tools.
  
  
• You have the right to request access to the personal data we collect about you, to rectify or delete it, and to restrict processing under certain circumstances.
  
  
• If you are a resident of California, you have the right to opt out of the sale or sharing of your personal information, which can be done through our Do Not Sell or Share My Personal Information page.
  
  

Employment

• Your name
  
  
• Contact details
  
  
• Social security number (where applicable)
  
  
• Employment history
  
  
• Other personal information necessary for employment
  
  

• Contractual Necessity: We use your personal data to perform our contractual obligations related to your employment or job application.
  
  
• Legal Obligations: In some contexts, we are required by law to collect and process certain information about our employees (e.g., tax reporting, benefits administration, compliance with employment laws).
  
  
• Legitimate Interests: We also have a legitimate interest in using your information to manage staffing, workforce operations, and provide the Website and App to our customers.
  
  

• Access your personal data and obtain a copy of it.
  
  
• Rectify any inaccurate or incomplete data.
  
  
• Erase your personal data under certain circumstances.
  
  
• Object to processing or request restriction of processing in certain situations.
  
  

• Employment-related data will be retained only as long as necessary to comply with legal, tax, and contractual obligations.
  
  
• If you are a resident of California, you have the right to request access to your personal data, request deletion of your personal data, and opt out of any sale or sharing of your personal data.

Geolocation information

• Legitimate interests: improve and personalize your user experience by providing services relevant to your location.
  
  
• Consent: in some instances, explicit consent is required, especially for targeted marketing or sharing with third parties.
  
  
• You can withdraw consent or adjust your device settings at any time to limit or stop geolocation tracking.
  
  

• Under the CCPA, you can opt out of the sale of your geolocation data at any time.
  
  
• EU/UK residents have rights under GDPR/UK GDPR to access or delete geolocation data by contacting us via the Support Portal.
  
  

Surveys

• Name, email address, or demographic data.
  
  
• Responses to survey questions.
  
  

• Legitimate interest: improve services, understand opinions/preferences.
  
  
• Consent: required if surveys collect sensitive personal data.
  
  

• Under GDPR/UK GDPR, PIPEDA, and CCPA, you may access, correct, delete, or request transfer of your survey data.
  
  
• You can withdraw consent at any time without affecting prior lawful processing.
  
  

COPPA – Children’s Online Privacy Protection Act

• We do not knowingly collect data from children below these age thresholds.
  
  
• If we learn that a child has provided personal data without appropriate consent, we will promptly delete it.
  
  
• Parents who believe their child has used our Services without consent should contact us immediately through the Support Portal.
  
  

Information you provide to us

• Identifiers: name, email, zip code, DOB, gender, job title, phone number, username/password.
  
  
• Financial details: income, savings goals, expenses, debt, lifestyle preferences.
  
  
• iPhone contact lists (if you grant explicit consent).
  
  
• Transactional data processed by Apple App Store (we do not store your payment details).
  
  
• Communication data from support requests or surveys.
  
  

• Contractual necessity: account setup, providing Services.
  
  
• Consent: financial/lifestyle data, marketing, contact list access.
  
  
• Legitimate interests: service improvements, fraud prevention.
  
  

Collected via technology

• Non-personal data: referring URL, browser/device info, pages visited, clicks, scrolling, etc.
  
  
• Cookies & analytics: first-party cookies and tools like Firebase Analytics.
  
  
• Behavioral advertising: social media pixels (Facebook, LinkedIn, Twitter/X) for ad tracking.
  
  

• Consent: required for non-essential cookies, analytics, and advertising tracking (GDPR/UK GDPR, PIPEDA).
  
  
• Legitimate interests: essential cookies for security and site functionality.
  
  

• Manage cookies through the Cookie Consent Manager or browser/device settings.
  
  
• Withdraw consent for tracking at any time via the Support Portal.
  
  
• CCPA residents can opt out of targeted advertising via Do Not Sell or Share My Personal Information.