Privacy Policy

1. Introduction

World On Demand ("WOD") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, process, and safeguard your personal data when you use our platform, in strict compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

We collect data necessary to provide our services and comply with tax regulations:

• Identity & Contact Data: Email address, full name, and authentication tokens (via Google Auth/Supabase).
• Financial & Billing Data: Billing address, country of residence, and IP address. This is strictly required to calculate applicable digital taxes (e.g., EU VAT). We do NOT store your credit card details; these are handled securely by Stripe.
• Platform Usage Data: Chat logs during live streams, purchase history, and profile metadata.

3. Third-Party Processors

To operate globally, we share data with trusted sub-processors under strict Data Processing Agreements (DPAs):

• Supabase: For database hosting and user authentication.
• Stripe: For secure payment processing, identity verification, and tax calculation.
• Agora.io: For real-time video routing.

4. Legal Basis for Processing

Under GDPR, we process your data on the following bases:

• Contractual Necessity: To deliver the live tours you purchased.
• Legal Obligation: To collect VAT and maintain accounting records (Invoices, IP location).
• Legitimate Interest: To secure the platform through video moderation and analytics to improve our service.

5. Cookies & Tracking

Currently, WOD uses strictly necessary cookies (session tokens via Supabase) required to keep you logged in. You will be presented with a specific Cookie Consent Banner before any non-essential tracking occurs.

6. Your Rights (GDPR)

You have the right to:

• Request access to the personal data we hold.
• Request correction of inaccurate data.
• Request deletion of your data ("Right to be forgotten"), subject to legal billing record retention.