Privacy

Who we are. Wanderbook (wanderbook.in) is a brand of Whimsy Inc., a sole proprietorship registered in Madhya Pradesh, India. We decide how your data is used, so we’re responsible for it. Our full registered details — proprietor, grievance officer and registered address — are on our Contact page.

What we collect, and why.

• Your photos — to make your book and to show it to you.
• Your email — to create your account, save your book, and send you order updates, and (unless you switch them off) reminders and offers.
• Your name, delivery address and phone number — taken at checkout, so the book can be printed and delivered to you. The phone number is for the courier; it’s what stops a parcel going back undelivered.
• Your order details — what you ordered, what you paid, how you paid, and the payment details Razorpay shares with us (see Razorpay below). We need this to fulfil the order, handle refunds, and keep books.
• Basic usage data — which pages were visited and where a visit came from, so we know whether anything we make is working. This is counted in aggregate; we don’t build a profile of you.

Your photos, specifically. We use your photos to make your book and to show it to you. Today our layout engine runs on our own servers, so your photos aren’t sent to any third-party AI service to be analysed.

Who else sees your data. Only the people who have to, and only the part they need:

• Our print studio receives your book’s print files and the delivery label details (name, address, phone) so it can print and dispatch it.
• The courier receives your name, address and phone to deliver the parcel.
• Razorpay handles the payment. Your card number, CVV, UPI PIN and bank login go to Razorpay directly and never reach us. Razorpay tells us whether the payment went through, with its reference, amount and method, and the payer details it shares with businesses: the UPI ID, or a card’s last four digits, network and issuing bank, and the email and phone used to pay. We keep these with your order for refunds, support and our accounts.
• Resend sends our email, so it processes your email address.
• Vercel and Render host the site, the app and our database, and store your photos.
• If you sign in with Google, Google confirms your identity to us. We receive your email address and name, not your password.

We don’t sell your data, and no advertiser gets your name, address or photos. To measure our own advertising we do send Meta hashed contact details and purchase events (see Cookies below). We may disclose information if the law requires it.

Reviews. If you write a review, we may share your words, rating and photo publicly, with your name, the trip and the month. Ask us any time and it comes down.

Email. We email you about your account and your orders. We may also remind you about a book you started, and send occasional news and offers. Each of those has a one-click unsubscribe, and you can switch them off in your account. Opting out never affects emails about your account or orders. We never give your address to anyone else for their marketing.

Where your data is stored. We’re an Indian business, and not all of your data stays in India: the app and the database sit with our hosting provider in Singapore, your photos with our storage provider in India(books made before we moved the photos to India may still have an older copy with the same provider in the United States, which we will delete), and some of the services we use (sign-in, email, payments) may process data elsewhere. India’s DPDP Act allows this, and it doesn’t change any of your rights below or our obligations to you. We’re telling you because it’s the kind of thing you’d reasonably want to know rather than discover.

How long we keep it. A book you haven’t ordered is kept for a limited time after we tell you it’s ready, and then deleted, photos and all. You’ll see the exact date on the book itself, on your account page and in the email we send when it’s ready. A book you’ve ordered stays on your account until you delete it or your account. A book made without signing in may go sooner if we need the storage space back. Order records are kept as long as we’re required to for tax and dispute purposes.

Deleting your data. You can delete your account from your account page, or email us and we’ll do it. That removes your photos, your books, your saved addresses and your preferences. One honest exception: if you have placed a paid order, we keep the commercial record of that order — what was bought, what it cost, when — but we strip your personal details from it (name, address, phone, email). We keep the receipt, not the person. If you ordered a book, we also keep that book, its print file and smaller copies of the photos you added to it, as part of the order record. Orders that were never paid for are deleted outright.

Your rights. Under India’s Digital Personal Data Protection Act, 2023 you can ask us what we hold about you, ask us to correct it, ask us to delete it, and withdraw consent you previously gave. Email hello@wanderbook.in and we’ll respond within 30 days. If you’re not happy with how we’ve handled it, you can escalate to the Data Protection Board of India.

Cookies. We use a cookie to keep you signed in, and a small amount of local storage to remember your book while you’re making it. To measure our advertising we also use the Meta (Facebook) Pixel, which sets cookies and shares standard browsing events with Meta, things like “visited the site” or “placed an order”. To match those events to your Meta account, it can also send a scrambled (hashed) copy of contact details you give us, such as your email, phone number, name or city. We never send Meta your photos; some of the pixel’s automatic events can include the web address of an image on the page while a book is being made; since 26 September 2026 your photos are stored privately and such an address opens nothing on its own. When you place an order we also report the purchase to Meta from our server, with the same hashed details, so a content blocker doesn’t stop that part. You can limit how Meta uses this in your Meta ad preferences, or block the pixel with any standard content blocker; the site works fully without it.

Security. Your connection is encrypted, payment details go straight to Razorpay rather than through us, and access to order data is restricted to the people running Wanderbook. No system is perfect; if something ever goes wrong that affects your data, we will tell you.

Children. Wanderbook isn’t intended for people under 18, and we don’t knowingly collect their data.

Changes. If we change how we handle your data, we’ll update this page and change the date below. If it’s a significant change and we have your email, we’ll tell you.

Questions, requests or complaints: hello@wanderbook.in. Postal address and grievance officer: Contact.

Last updated: 10 October 2026