Privacy Policy

1.1 Information You Provide: When you book a tour, submit an inquiry, or contact us, we collect information you voluntarily provide, including:

• Name and contact information (email, phone number)
• Tour preferences (dates, party size, winery interests)
• Messages and communications with our team
• Payment information (processed securely through our payment provider — we do not store credit card numbers)

1.2 Information Collected Automatically: When you visit our website, we may automatically collect:

• Browser type and device information
• Pages visited and time spent on the site
• Referring website or search terms
• IP address (anonymized for analytics)

1.3 AI Chat Interactions: When you use our geology chat feature on the website, we store chat messages with anonymized session identifiers. We do not link chat messages to your personal identity unless you voluntarily provide identifying information in the conversation.

1.4 ChatGPT Store GPTs: When you interact with our GPTs (Walla Walla Travel Concierge, Walla Walla Geology Guide) through ChatGPT, your conversations are handled by OpenAI. We only receive data when the GPT calls our API endpoints — specifically, search queries and inquiry submissions. We do not receive or store your ChatGPT conversation history.

We use the information we collect to:

• Process and fulfill tour bookings and inquiries
• Communicate with you about your reservations
• Coordinate with wineries and restaurants for your itinerary
• Improve our website, services, and AI tools
• Respond to your questions and support requests
• Send booking confirmations and follow-up communications

We do not sell your personal information. We may share limited information with:

• Transportation partner: NW Touring & Concierge (Northwest Touring LLC), our preferred transportation provider, receives booking details necessary to operate your tour
• Wineries and restaurants: We share your name and party size when making reservations on your behalf
• Payment processors: Secure payment processing through industry-standard providers
• Hosting and infrastructure: Our website and database are hosted on Vercel and Supabase, both of which maintain their own privacy and security practices

We may also disclose information if required by law or to protect the safety of our guests and staff.

Your data is stored in a secure PostgreSQL database hosted by Supabase with encryption at rest and in transit. We use industry-standard security measures to protect your information, including HTTPS encryption for all web traffic and secure authentication for administrative access.

While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Our website uses cookies for essential functionality (such as authentication sessions) and may use analytics cookies to understand how visitors use the site. You can control cookie preferences through your browser settings.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information (subject to legal and business retention requirements)
• Opt out of marketing communications at any time

To exercise any of these rights, contact us at info@wallawalla.travel or (509) 200-8000.

Our website and services integrate with third-party platforms that have their own privacy policies:

• OpenAI / ChatGPT: Our GPT Store integrations are subject to OpenAI's Privacy Policy
• Supabase: Database hosting and authentication
• Vercel: Website hosting

We encourage you to review the privacy policies of these services.

Our services are not directed to individuals under 18 years of age. Wine tasting services require guests to be 21 or older. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when the most recent changes were made. Continued use of our services after changes constitutes acceptance of the updated policy.