Privacy policy
Last updated: October 29, 2026
Wanderoft exists to bring people to the local places that make a town feel like home, and to thank them for coming. To do that, we need to know a little about you, and we take that seriously. This page explains, in plain words, what we collect, why, who helps us, and how you stay in control. It covers members of the Wanderoft app, the businesses and partners who work with us, and anyone who visits wanderoft.com.
Wanderoft LLC ("Wanderoft," "we," "us") is a Georgia company based in Savannah. Questions go to hello@wanderoft.com. A real person answers.
The short version
- We look at your card purchases only to find visits to Wanderoft partners. Everything else is checked once and thrown away. We never store it.
- We never see your bank password or your full card number.
- We do not sell your information, share it for advertising, or use ad trackers.
- Partner businesses see totals, never you.
- You can disconnect a card or delete your whole account from the app, any time.
What we collect from members
Your account. Your name, your email address and, if you choose to add one, your phone number. If you sign in with Apple or Google, they share your name and email with us (Apple may give us a private relay address instead).
Your connected cards. You connect a card through Plaid. You sign in to your bank on Plaid's own screen and choose which credit cards and checking accounts to share. Your bank password goes to Plaid, never to us. If you added a phone number, we share it with Plaid so you can connect faster if you have used Plaid before. Plaid then sends us your bank's name, the last 4 digits and network of each card you chose, and new purchases as they come in. By connecting a card, you acknowledge that Plaid will treat your information under the Plaid End User Privacy Policy.
Your purchases at partners, and nothing else.
- If a purchase is at a Wanderoft partner, we keep a record of it: the business, the location, the amount, the date, and which of your cards was used. That record lets us reward you from Wanderoft's own program. Separately, it lets us show each partner the visits we sent them, which is what our marketing fee to them is based on. The two never touch: your reward never depends on anything a partner pays us.
- Some partners offer a perk instead of cash back. We keep a record of your visits there too, so we can show that partner, in totals only, how Wanderoft members find them.
- If a purchase is anywhere else, we check it once against our partner list and then discard it. It is never stored.
Visiting or living here. When you connect a card, we ask whether you are visiting or live here. You can skip it. If you are visiting, we keep the day you head home so we can disconnect your card a few days later.
Getting paid. The email address you want rewards sent to, and a record of each payout (amount, date, status). Your bank or PayPal details go to our payout partner, Tremendous, never to us.
Inviting friends. Your invite code, who joined with it, and whether they connected a card.
Your location, only in the moment. If you allow it, your phone's location is used to sort places by how close they are and to show you on the map. It is sent with that request and not kept. The map itself is provided by Google Maps, which receives your location when you use it under Google's own privacy policy.
App activity. We count which business pages you open, which places you save, when you use a perk pass, and when you tap for directions, to call, or to visit a business's website. We use it to show partners, in totals only, how members find them, and to make Wanderoft better. We do not use outside analytics, crash reporting or advertising tools in the app.
Notifications. If you allow notifications in the iPhone or Android app, we keep a device code that lets us reach your phone, and a log of which notifications we sent, so we never send the same one twice. Notifications go through a push notification service that receives only that device code and the message. Turn them off any time in the app or in your phone's settings.
Messages you send us. If you write to us, we keep the conversation so we can help.
Original paid memberships. Before the app, Wanderoft sold memberships on wanderoft.com. If you bought one, Shopify handled your order and payment, and our pass partners, Join It and PassKit, issued your digital pass. We keep your name, email and phone from that order so we can welcome you into the app as a Local. We never see your full card number.
What we collect from businesses and partners
- Business owners who join through Wanderoft for Business: your name, email and phone, your business details (name, locations, hours, photos, logo, description, the names your business uses on card statements), your Wanderoft rate and promotion, and your statements and payments.
- Business bank accounts and cards are connected through Stripe. Stripe holds your account details and debit authorization. We see only the bank name, the last 4 digits and the payment status.
- Distribution partners (hotels, tours and others who hand out our brochure): contact details, your payout email, your tracking links and the totals of guests who joined through you. Payouts go through Tremendous, which collects your bank details and, where required, tax forms.
Visitors to wanderoft.com
While we move to the app, wanderoft.com runs on Shopify. Shopify sets the cookies its site and store need, as its own privacy policy explains, and you can choose which you allow in the cookie banner and on our Your Privacy Choices page. We do not use advertising cookies. If you fill in a form (like a brochure request), we keep what you send.
How we use information
- To run your account, sign you in and keep it secure.
- To find your visits to Wanderoft partners, work out your rewards and level, and send rewards to you.
- To bill partner businesses for the visits members make, and to pay distribution partners their share.
- To show each partner how Wanderoft members find them, in totals only (see below).
- To send emails about your account: payouts, a card that has gone quiet, a bank that needs you to sign in again, or a safe-travels note when your trip ends. You cannot turn these off while you have an account, because they are part of how Wanderoft works.
- To send our newsletter, only if you say yes. Every newsletter has an unsubscribe link that works right away. Our newsletter emails tell us whether they were opened and which links were clicked, so we learn what readers love and send more of it. That stays with us and is never used for advertising.
- To prevent fraud, keep Wanderoft safe, and follow the law.
What partner businesses see
A partner sees totals for its own business only: how many Wanderoft members visited, came back, saved it or opened its page, what they spent there, and what share of its members live nearby or are visiting. A partner sees a number like that only once enough members are behind it that no one can be picked out. Partners never see your name, your email, your card or your other purchases.
Who helps us
We work with a few companies that handle information only to do their job for us.
| Company | What they do for us | What they receive |
|---|---|---|
| Plaid | Connects your card to Wanderoft | Your bank sign-in, the accounts you choose, your phone number if you added one. See plaid.com/legal |
| Tremendous | Sends rewards to members and shares to partners | Payout email, name and amount |
| Stripe | Business bank debits and marketing purchases | Business bank and card details (businesses only) |
| Supabase | Hosts our database and app services, in the United States | The information on this page |
| Resend | Delivers account emails | Your email address and the email |
| Klaviyo | Delivers our newsletter, if you said yes | Your name, your email, and whether you opened each newsletter and clicked its links |
| Maps, sign-in if you choose it, fonts on our website | Location while you use the map, what you agree to share at sign-in, your IP address | |
| Apple | Sign-in if you choose it, the iPhone app | What you agree to share at sign-in |
| FlutterFlow | Builds and serves our app screens | No member data is stored there |
| Shopify, Join It and PassKit | Run wanderoft.com and our original paid memberships while we move to the app | Your visit to the website, your order, name, email and phone. Card details stay with the payment processor |
We may also share information if the law requires it, to protect someone's safety or our rights, or if Wanderoft is ever sold or merged, in which case this policy travels with your information.
We do not sell your information. We do not share it for targeted advertising. We do not use ad trackers.
How long we keep it
- Account details: while your account is open.
- Card connections: until you remove a card, your trip ends, or the card rests after 30 days with no partner visit. When a connection closes, we close it at Plaid too.
- Records of visits to partners and payouts: 7 years, because they are financial records we need for tax and accounting. If you delete your account, we remove everything on those records that points back to you.
- If you delete your account while rewards are still on their way, we keep only your payout email until they are sent, then erase it.
- Newsletter details: until you unsubscribe.
Your choices and rights
- Remove a card: in the app, remove the card. It stops earning right away.
- Delete your account: Account, then Delete account. It happens right away. We remove your name, email and phone, disconnect every card at Plaid, and clear your saved places. You can also ask at wanderoft.com/delete-account or by email, and we will finish within 7 days.
- Stop the newsletter: use the unsubscribe link in any issue.
- Notifications: turn them off in the app or in your phone's settings. Account emails still arrive.
- Location: turn it off in your phone's settings. The app still works; places just are not sorted by distance.
- See, correct or get a copy of your information: most of it is in the app. For anything else, write to us. Depending on where you live, you may have further rights, like deleting or correcting information, or appealing a decision we make about a request. Write to hello@wanderoft.com from your account email and we will answer within 45 days. You will never be treated differently for using your rights.
Keeping it safe
Everything travels encrypted, and our database is encrypted at rest. Bank connection keys are kept in an encrypted vault, not in our regular tables, and only our servers can use them. Only the two founders can reach member information, with two-step verification on every system that holds it, and only to run Wanderoft. If a breach ever affects your information, we will tell you as the law requires, and sooner if we can.
Who Wanderoft is for
Wanderoft is for people 18 and older. We do not knowingly collect information from anyone younger. If you think someone under 18 has signed up, tell us and we will delete the account.
Where your information lives
Wanderoft is a US company and stores information in the United States. If you join from another country, your information is handled in the United States under this policy.
Changes
If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect.
Contact
Wanderoft LLC, Savannah, Georgia
hello@wanderoft.com
See also our Member Terms and how to delete your account.