1. Introduction

Welcome to Wayrove, operated by LiveLife LLC, doing business as Wayrove ("Wayrove," "we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services (collectively, the "Service").

This policy applies to all users of the Service, including:

• Account holders who register for a Wayrove account
• Venue owners and event hosts ("Hosts") who use the Service to manage properties, events, bookings, and RSVPs
• Guests and attendees ("Guests") who interact with the Service through public booking pages, RSVP forms, or embedded widgets, whether or not they create a Wayrove account

By using Wayrove, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create a Wayrove account, we collect:

• Email address
• Display name (optional)
• Profile photo (optional)
• Authentication credentials (managed securely by Firebase Authentication)

Guest Booking & RSVP Information

When a Guest submits a booking or RSVP through the Service, we collect the following information on behalf of the Host:

• First name and last name
• Email address
• Phone number (optional)
• Guest count and guest category breakdown (e.g., adults, children, pets)
• Special requests or notes
• Dietary restrictions (when enabled by the Host)
• Accessibility needs (when enabled by the Host)
• Plus-one names (when enabled by the Host)
• Date preferences and availability (for event polling features)

Payment-Related Information

When payments are processed through the Service, we collect and store:

• Payment status (e.g., paid, unpaid, refunded)
• Transaction amounts
• Display-safe payment method description (e.g., "Visa ending in 4242")
• Confirmation codes
• Payment processor reference IDs

We never receive, process, or store full payment card numbers. All card data is tokenized directly by the Host's connected payment provider (Stripe, Square, or PayPal) and never passes through Wayrove's servers.

Venue & Event Information

When Hosts create listings, we collect:

• Property details (name, description, type, photos)
• Property addresses and geographic coordinates
• Pricing, availability, and cancellation policies
• Event details (name, description, dates, capacity)
• Contact information for the venue or event

User-Generated Content

When you use our Service, we store:

• Quests and activities you create
• Text, images, and media you upload
• Player responses and submissions
• Session data and game progress

Automatically Collected Information

We automatically collect certain information when you use our Service:

• Device information (browser type, operating system)
• Usage data (pages visited, features used)
• IP address and general location
• Cookies and similar tracking technologies (see Section 11 below)

Widget Interaction Data

When Guests interact with the Wayrove booking or RSVP widget embedded on a Host's website, we collect the same categories of information described above. The widget opens the Service within an iframe, and all data collection occurs within the Wayrove application.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process bookings, RSVPs, and transactions
• Facilitate communication between Hosts and Guests regarding bookings and events
• Send confirmation codes, booking details, and transactional notifications
• Manage your account and subscription
• Provide the Guest directory feature to Hosts, aggregating booking and RSVP history for their Guests
• Respond to your requests and provide customer support
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with legal obligations

4. Data Controller & Data Processor Roles

Wayrove operates in different data roles depending on the type of information:

• For account holders and subscribers: LiveLife LLC (d/b/a Wayrove) is the data controller. We determine the purposes and means of processing your account and subscription data.
• For Guest booking and RSVP data: The venue owner or event Host is the data controller. They determine why and how Guest data is collected (for fulfilling reservations, managing events, etc.). Wayrove acts as a data processor, processing Guest data on behalf of and under the instructions of the Host.

If you are a Guest with questions about how your booking or RSVP data is used, we encourage you to contact the venue owner or event Host directly. You may also contact Wayrove at privacy@wayrove.com, and we will direct your request to the appropriate Host.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Hosts (for Guest data) — When you submit a booking or RSVP, your personal information is shared with the venue owner or event Host for the purpose of fulfilling your reservation or managing event attendance. The Host's use of your data is governed by their own privacy practices.
• With payment processors — When a Host has connected a payment provider (Stripe, Square, or PayPal), necessary transaction data is shared with that provider to process payments. Each payment provider has its own privacy policy.
• With your consent — When you explicitly authorize us to share information.
• Service providers — With third parties who help us operate our Service (see Section 6).
• Legal requirements — When required by law, subpoena, court order, or to protect our rights, safety, or property.
• Business transfers — In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

6. Third-Party Services

We use the following third-party services to operate Wayrove:

• Firebase (Google) — Authentication, database, hosting, and analytics
• Whop — Subscription billing and payment processing (Merchant of Record for Wayrove platform subscriptions)
• Stripe — Payment processing for bookings and RSVPs (connected by Hosts via their own Stripe accounts)
• Square — Payment processing for bookings and RSVPs (connected by Hosts via their own Square accounts)
• PayPal — Payment processing for bookings and RSVPs (connected by Hosts via their own PayPal accounts)
• OpenAI — AI-powered quest and content generation features
• Cloudflare Turnstile — Bot protection and abuse prevention

Each of these services has their own privacy policies governing how they handle your data. We encourage you to review their policies. When a Host connects a payment provider, Wayrove uses the platform's integration keys; your card data is tokenized by the provider and never passes through Wayrove's servers.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication through Firebase
• Card data tokenized by payment providers, never stored on Wayrove servers
• Payment provider credentials stored in secure, encrypted vaults separate from application databases
• Access controls and authentication requirements
• Regular security assessments

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your information for the following periods:

• Account data: Retained while your account is active. You may request deletion of your account and associated data at any time by contacting us.
• Guest booking and RSVP data: Retained as long as the Host (venue owner or event organizer) maintains an active Wayrove account, or until deletion is requested by the Guest or the Host. Guests may request deletion by contacting the Host or Wayrove directly.
• Payment metadata: Transaction records (amounts, confirmation codes, payment status) are retained for up to 7 years as required for tax, legal, and compliance purposes.
• Automatically collected data: Usage analytics and log data are retained for up to 24 months.
• User-generated content: Retained until you delete it or your account is terminated.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of your personal data
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your personal data
• Portability — Request your data in a portable, machine-readable format
• Opt-out — Opt out of marketing communications
• Restriction — Request that we restrict processing of your data under certain circumstances
• Objection — Object to processing of your data based on legitimate interests

To exercise these rights, please contact us at privacy@wayrove.com. We will respond to your request within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before fulfilling your request.

For Guest data where the Host is the data controller, we will forward your request to the appropriate Host or direct you to contact them. We will cooperate with the Host to fulfill your request.

10. International Users

Wayrove is operated by LiveLife LLC, based in the United States, and data is stored and processed on servers located in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For EU/EEA Users

If you are located in the European Union or European Economic Area, the following additional provisions apply:

• We process your data based on one or more of the following legal bases: your consent, performance of a contract, our legitimate interests, or compliance with legal obligations
• Data transfers from the EU/EEA to the United States are conducted in reliance on Standard Contractual Clauses approved by the European Commission (included in our third-party providers' data processing terms), or other legally recognized transfer mechanisms
• You have the right to lodge a complaint with your local supervisory authority (data protection authority) if you believe we have not complied with applicable data protection laws
• You have the rights described in Section 9, plus the right to withdraw consent at any time (where processing is based on consent)

For California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of your personal information
• The right to non-discrimination for exercising your privacy rights

We do not sell your personal information, nor do we share it for cross-context behavioral advertising as defined by the CCPA/CPRA. Because we do not engage in these practices, no separate opt-out mechanism is required. If our practices change in the future, we will update this policy and provide an appropriate opt-out mechanism.

To exercise any of the rights listed above, contact us at privacy@wayrove.com.

11. Cookies & Tracking Technologies

We use the following cookies and similar technologies:

• Essential cookies — Required for authentication, session management, and core functionality. These cannot be disabled.
• Analytics cookies — Firebase Analytics to understand how users interact with the Service and to improve the experience.
• Affiliate tracking cookies — To track referral activity for our affiliate and partner programs.
• Bot protection — Cloudflare Turnstile uses tokens to verify that interactions come from real users, not bots.

Most web browsers allow you to control cookies through their settings. Disabling essential cookies may prevent you from using certain features of the Service.

12. Children's Privacy

Wayrove is designed for use by adults and supervised minors. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected information from a child under 13, please contact us immediately at privacy@wayrove.com, and we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also provide additional notice (such as email notification for account holders). We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

LiveLife LLC, d/b/a Wayrove
Email: privacy@wayrove.com

For data protection inquiries related to a specific booking or RSVP, please include the venue name or event name and your confirmation code (if applicable) to help us assist you efficiently.