Privacy Policy

Last updated: January 27, 2026

Summary: We collect minimal personal information (name and email), use Stripe for secure payment processing, and never sell your data. You have full control over your data and can delete it anytime.

1. Information We Collect

Information You Provide

Account Information: Name, email address
Business Information: Business name, address, tax identification (optional)
Client Data: Information about your clients/venues (names, addresses, contact details) that you choose to store
Certificate Data: Details about your certificates of residence that you upload
Financial Data: Invoice details, performance fees, tax calculations

Information Automatically Collected

Usage Data: Pages visited, features used, time spent on platform
Device Information: Browser type, operating system, IP address
Cookies: Session cookies for authentication and preferences

2. How We Use Your Information

We use your information to:

Provide and maintain the Tourwise service
Process your subscription payments
Send you important updates about your account or the service
Calculate withholding tax rates and generate reports
Provide customer support
Improve our service and develop new features
Comply with legal obligations

3. How We Share Your Information

We do NOT sell your personal information. We only share your data with:

Service Providers

Stripe: Payment processing (they handle all credit card information)
Supabase: Database hosting and user authentication
Vercel/Railway: Website and application hosting

Legal Requirements

We may disclose your information if required by law, court order, or government request.

4. Data Storage and Security

Storage Location: Your data is stored in secure cloud infrastructure (Supabase servers in EU/US)
Encryption: Data transmitted via HTTPS; sensitive data encrypted at rest
Local Storage: Some data temporarily stored in your browser's local storage
Retention: We retain your data as long as your account is active, or as required by law

5. Your Data Rights (GDPR)

If you are located in the European Economic Area (EEA) or UK, you have the following rights:

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate data
Right to Erasure: Request deletion of your data
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Object to processing of your data
Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at support@tourwise.io or use the GDPR tools in your account settings.

6. Cookies and Tracking

We use essential cookies for:

User authentication (keeping you logged in)
Session management
Storing your preferences

We do NOT use third-party advertising cookies or sell data to advertisers.

7. Third-Party Links

Tourwise may contain links to external websites (e.g., official tax authority sites). We are not responsible for the privacy practices of these sites. Please review their privacy policies.

8. Children's Privacy

Tourwise is not intended for users under 18 years old. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us immediately.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the Service. The "Last updated" date at the top will reflect when changes were made.

11. Contact Us

For questions about this Privacy Policy or to exercise your data rights:

Email: support@tourwise.io
Website: https://tourwise.io

By using Tourwise, you acknowledge that you have read and understood this Privacy Policy.