Privacy Policy

Questi contenuti non sono ancora disponibili nella tua lingua.

Last updated: 19 June 2026

This policy explains what personal data Wink collects, why, who we share it with, and the rights you have. We collect what we need to run the platform — accounts, bookings, payments and attribution. Card payments are handled by Stripe; we do not store full card numbers. We do not sell your personal data. You have rights to access, correct and delete your data, and to opt out of marketing. This is a summary only — the full policy below governs.

1. Who we are

Wink is a trading name of Winkfluence Inc. (“Wink”, “we”, “us” or “our”), a corporation organised under the laws of the State of Wyoming, USA, with a registered address at 30 N Gould St, Ste 22578, Sheridan, WY 82801, USA. For privacy questions we are the controller (or “business”) responsible for your personal data, except where we act as a processor on behalf of a Hotel or Partner (see Section 2).

2. Scope of this policy

This policy applies to personal data we process through the Wink platform — the wink.travel website, our applications, the Booking Engine, Extranet, Studio, Social, WinkLinks and Traveliko products, payment collection by TripPay Corporation, and our API, MCP server and developer interfaces (the “Platform”) — for travelers, hotels, partners, creators, developers, website visitors and people who contact us.

TripPay Corporation, a Wyoming corporation and wholly owned subsidiary of Winkfluence Inc., collects and settles booking payments as the Hotel’s limited payment collection agent. TripPay processes personal data for that purpose and is a separate controller in respect of it.

When a Hotel or Partner uses the Platform to manage their own guests’ or audience’s data, that Hotel or Partner is the controller of that data and is responsible for its own privacy practices; we process it on their behalf as a processor or service provider, as those terms are defined under applicable law. This policy does not cover third-party websites or services we link to (see Section 16).

3. The personal data we collect

Depending on how you use the Platform, we may collect:

Account and profile data — name, email, phone, password/credentials, business or organization details, role, and (for those who earn) payout, bank and tax information.
Booking and transaction data — guest name and contact details, stay dates, room/rate selections, special requests, booking references and booking history.
Payment data — billing details and transaction records. Card payments are processed by Stripe; Wink does not store full payment-card numbers and receives only limited, tokenized payment information.
Supply and listing data — where you are a Hotel, the property, rate, availability and content you publish (which may include staff contact details you provide).
Content — text, images, links, storefronts and other materials you submit (for example, a Creator’s curated storefront).
Communications — messages, support requests, demo bookings (scheduled via Cal.com), survey responses and feedback.
Usage and device data — IP address, device and browser type, pages viewed, referring URLs, links clicked, and similar technical data collected automatically, including via cookies (Section 6).
Attribution data — the source, campaign and click context used to attribute bookings to a Partner or Creator.
Applicant data — if you apply for a role, the information in your application.

We do not intentionally collect special-category/sensitive data and ask that you not submit it unless necessary.

4. How we collect it

We collect personal data: (a) directly from you when you create an account, make or receive a booking, publish supply or content, contact us or apply for a role; (b) automatically when you use the Platform, via cookies and similar technologies; and (c) from third parties, such as a Hotel or Partner who routes a booking to us, a referrer, or our service providers (for example, payment and verification data from Stripe).

5. How and why we use personal data

We use personal data to:

Provide the Platform — create and manage accounts, process and fulfil bookings through Booking Engine, and take and settle payment through TripPay and Stripe.
Run attribution and payouts — attribute bookings to Partners and Creators and calculate and pay commission.
Communicate — send booking confirmations, service messages, and respond to your requests.
Secure and improve the Platform — prevent fraud and abuse, debug, analyze usage and develop features.
Generate content and translations — where you use these features, process the relevant text/content (including via our AI provider) to produce listings, copy or translated pages.
Comply with law — meet accounting, tax and other legal obligations and respond to lawful requests.
Market, with your consent where required — send newsletters and offers you can opt out of at any time.

Where the EU/UK GDPR applies, our legal bases are: performance of a contract (accounts, bookings, payments); legitimate interests (security, fraud prevention, analytics, attribution and improving the Platform, balanced against your rights); consent (marketing and non-essential cookies); and legal obligation (tax, accounting and lawful requests).

6. Cookies and similar technologies

We and our providers use cookies and similar technologies for essential functionality, preferences, analytics (for example, Google Analytics) and measurement. You can control non-essential cookies as described in our Cookie Policy, which explains the specific cookies we use and your choices.

We share personal data only as needed:

With Hotels — to create, confirm and fulfil a booking (for example, sharing the guest’s name and stay details with the Hotel that will host them).
With Partners and Creators — limited booking and attribution data needed to calculate and report commission, without exposing more guest data than necessary.
With service providers / sub-processors — who process data on our behalf under contract (Section 8).
For legal reasons — to comply with law, enforce our Terms, or protect the rights, safety and property of Wink, our users or the public.
In a business transfer — in connection with a merger, financing, acquisition or sale of assets, subject to this policy.

We do not sell your personal data. See Section 13 for how “sale” and “sharing” are treated under U.S. state laws.

8. Service providers and sub-processors

We rely on trusted providers to operate the Platform. These currently include: Stripe (payment processing), MailerSend (transactional and contact email), Cloudinary (image hosting and delivery), Google (Firebase Hosting and Google Analytics), Cloudflare (content delivery and email-address obfuscation), OpenAI (AI content generation and translation) and Cal.com (demo scheduling). Each processes personal data only on our instructions and under appropriate contractual and security obligations. We review this list periodically and will update it when a sub-processor is added or removed.

9. International data transfers

Wink is based in the United States and works with providers in various countries, so your personal data may be transferred to and processed outside your country of residence, including the United States. Where we transfer personal data from the EEA, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, together with the UK International Data Transfer Addendum where the transfer originates in the United Kingdom.

10. How long we keep personal data

We keep personal data only as long as needed for the purposes in this policy: for the life of your account and your relationship with us; for as long as required to fulfil bookings and resolve disputes; and for the periods required by tax, accounting and other applicable laws. Where data is no longer needed, we delete or de-identify it. Where you have given consent, we keep the data until you withdraw it.

11. How we protect personal data

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse or alteration, and we review them regularly. Payment-card data is handled by Stripe under the PCI-DSS standard. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Your rights

Subject to your jurisdiction and applicable law, you may have the right to: withdraw consent; access your personal data and request a copy; correct inaccurate data; object to or restrict certain processing; request portability; request deletion or de-identification; and file a complaint with a supervisory authority. To exercise any right, contact us using Section 18. We will respond within the timeframes required by applicable law and may need to verify your identity first.

If you are in the EEA or UK, you may contact us at [email protected] about any aspect of how we handle your personal data, and you may lodge a complaint with your local data-protection authority.

13. U.S. state privacy rights (incl. California)

Depending on your U.S. state of residence (for example, under the California Consumer Privacy Act, as amended by the CPRA), you may have the right to: know/access the personal information we collect and how we use and disclose it; delete it; correct it; and not be discriminated against for exercising your rights.

We do not sell personal information for money, and we do not knowingly “sell” or “share” it for cross-context behavioral advertising as those terms are defined under California law. We use Google Analytics to understand how the Platform is used. Analytics cookies are not set until you accept them — analytics storage is denied by default and is enabled only if you choose Accept in our cookie banner. You can change that choice at any time by clearing your site data. We also honour the Global Privacy Control (GPC) signal: where your browser sends one, we treat it as an opt-out and keep analytics storage denied regardless of any earlier choice. To exercise your rights, contact us as described in Section 18; you may use an authorized agent where the law permits.

14. Children’s privacy

The Platform is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it. Where local law sets a lower age of digital consent, we apply that age for the purposes of consent-based processing, but account holders must still be 18 or over.

15. Marketing communications

Where we send marketing communications, you can opt out at any time using the unsubscribe link in the message or by contacting us. Opting out of marketing does not affect service messages necessary to operate your account or bookings (for example, booking confirmations).

16. Third-party links

The Platform links to and integrates with third-party services (for example, Stripe, Hotels and external sites). Their privacy practices are governed by their own policies, and we are not responsible for them. Please review those policies before providing personal data.

17. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new “Last updated” date and, where required, take additional steps to notify you. Your continued use of the Platform after changes take effect constitutes acceptance.

18. How to contact us

For privacy questions or to exercise your rights, contact us:

Email: [email protected]
Address: Winkfluence Inc., 30 N Gould St, Ste 22578, Sheridan, WY 82801, USA