Privacy Policy

Service: AI accommodation finder (futurestays.ai) Effective date: 11 August 2026

1. Data controller

The controller of your personal data is:

WONDEL.AI Sp. z o.o. ul. Twarda 18, 00-105 Warszawa KRS 0001029516, NIP 5252951298, REGON 524989057 E-mail:

The controller operates several artificial intelligence services available under different domains. This policy applies to the AI accommodation finder service and is identical for all of the controller's services.

We have not appointed a data protection officer. For all matters concerning personal data, write to .

2. What data we process

Account data — e-mail address and password stored solely as a cryptographic hash. If you use the service without registering, we create a temporary (guest) account for you, identified by a generated identifier.
Conversation content — your prompts, the files and attachments you upload and the responses generated by artificial intelligence, as well as conversation titles created automatically on the basis of the first message.
Documents and materials — documents and files created in the service (including those generated by AI), together with their version history.
Assistant memory — notes that the assistant saves about your preferences in order to retain context between conversations (a feature available to registered users).
Technical and session data — IP address, browser information (user agent), login timestamps, session identifier.
Diagnostic data — error logs and performance data, including — to the extent described in section 3 — the content of prompts and responses.
Analytics data — only with your consent: events relating to your use of the service and masked session recordings (see the Cookie Policy).

3. Purposes and legal bases of processing

Purpose	Legal basis
Providing the AI assistant service, maintaining the account, saving and displaying conversation history	Article 6(1)(b) GDPR — performance of a contract (the Terms of Service)
Ensuring the security of the service, preventing abuse, diagnosing and resolving failures — including recording the content of prompts and responses in the error monitoring tool (Sentry) in order to reconstruct the course of an error	Article 6(1)(f) GDPR — the controller's legitimate interest in maintaining the correct and secure operation of the service
Product analytics and masked session recordings	Article 6(1)(a) GDPR — your consent, which you may withdraw at any time in "Cookie settings"
Handling complaints, pursuing and defending claims	Article 6(1)(f) GDPR — legitimate interest
Compliance with the legal obligations incumbent on the controller	Article 6(1)(c) GDPR

Important as regards diagnostics. The content of your prompts and of the assistant's responses is saved in the error monitoring system (Sentry) together with technical data about the request. This data serves solely to detect and repair failures, has a limited retention period (section 6) and is not used for profiling or for marketing purposes. If you do not want the content of a particular conversation to reach these systems, do not include in it data whose disclosure could harm you (see section 9).

4. Recipients of the data

In order to provide the service, we use external providers acting as processors or — as regards their own purposes — as separate controllers. The scope of the data transferred is always limited to the necessary minimum.

Artificial intelligence model providers (they receive the content of your conversations in order to generate responses):

Anthropic Ireland Ltd / Anthropic PBC (Ireland/USA) — Claude models; in addition, the files you upload for analysis are transferred to the Anthropic files service;
OpenAI Ireland Ltd / OpenAI, L.L.C. (Ireland/USA) — GPT models; we also use this provider for the automatic creation of conversation titles;
Cerebras Systems Inc. (USA) and Cloudflare, Inc. (USA/EU, Workers AI) — alternative models selected by the user.

Infrastructure and tools:

Cloudflare, Inc. — application hosting, database, file storage and content delivery network;
Functional Software, Inc. (Sentry) (USA) — error and performance monitoring, to the extent described in section 3;
Langfuse GmbH (cloud service, USA) — telemetry of model operation; we transfer the content of the model's response (up to 10,000 characters), the model identifier and token usage statistics, without the content of your prompts and without user identifiers;
PostHog, Inc. (instance in the European Union) — product analytics and session recordings, only after consent has been given.

Search and retrieval of content from the internet (they receive search queries created on the basis of your messages when the assistant uses search tools): Exa Labs, Inc., Tavily, SerpApi, LLC, Firecrawl and the controller's tool servers (mcp.wondel.ai).

We may also disclose data to entities authorised to receive it under the law.

5. Transfers of data outside the European Economic Area

Some of the providers indicated above have their seat in, or process data in, the United States. Transfers take place on the basis of standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR) and, in the case of certified providers, on the basis of an adequacy decision (the EU-U.S. Data Privacy Framework). You may obtain a copy of the safeguards applied by writing to .

6. Retention periods

Account, conversations, documents and files — until you delete them or until the account is deleted. You may at any time delete an individual conversation, all conversations or the entire account (section 7).
Temporary (guest) accounts — deleted together with the associated data as part of periodic housekeeping, if they contain no activity.
Session data — 7 days from last use.
Error logs and diagnostic data — no longer than 90 days.
Analytics data — in accordance with PostHog's retention policy, no longer than 12 months from collection.
Cookie consent — 12 months, after which we will ask again.
Data necessary to defend claims — until the limitation periods expire.

7. Your rights

You have the right to:

access your data and obtain a copy of it (Article 15 GDPR),
rectification of inaccurate data (Article 16 GDPR),
erasure of data, the "right to be forgotten" (Article 17 GDPR),
restriction of processing (Article 18 GDPR),
portability of data in a commonly used format (Article 20 GDPR),
object to processing based on a legitimate interest (Article 21 GDPR),
withdraw consent at any time, without affecting the lawfulness of the processing carried out before its withdrawal (Article 7(3) GDPR).

You can exercise the rights to erasure and to data portability yourself in the user menu: "Delete account" permanently deletes the account together with conversations, documents and uploaded files, and "Export my data" downloads the whole of your data in a JSON file. We give effect to the remaining rights upon a request sent to — we respond without undue delay and no later than within one month.

What deletion of the account does not cover. After the account has been deleted, certain data may for a limited time still remain outside our direct control: copies of files transferred to the Anthropic files service, events in the Sentry, Langfuse and PostHog systems (deleted in accordance with the retention periods in section 6), as well as backups of the Cloudflare infrastructure, which are overwritten in the normal cycle. If you want this data deleted sooner, write to us — we will pass the request on to the providers.

You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warszawa.

8. Automated decision-making and information about AI

The service is an artificial intelligence system within the meaning of Regulation (EU) 2024/1689 (the AI Act). Responses are generated by a language model — we inform you of this in the interface in accordance with Article 50 of the AI Act, and generated content is labelled accordingly.

We do not take decisions in relation to you based solely on automated processing which would produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR). The assistant's responses do not constitute legal, medical, financial or any other professional advice.

9. The voluntary nature of providing data and conversation content

Providing an e-mail address is voluntary but necessary in order to set up an account. You provide conversation content voluntarily — remember that it is transferred to the AI model providers indicated in section 4. Do not include in conversations special categories of data (Article 9 GDPR), other people's data without a legal basis, or information covered by professional secrecy, unless this is necessary and you accept the manner of processing described above.

10. Security

We apply technical and organisational measures appropriate to the risk: encryption of transmission (TLS), storage of passwords solely as hashes, access control over users' files at the level of the owner of the resource, and limiting access to data to those persons for whom it is necessary. Remember that a conversation marked as public is available to anyone who knows its link — until the setting is changed to private.

11. Changes to the policy

We will give advance notice of material changes in the service. The current version is always available at /privacy.