Privacy Policy
Last updated: April 2026
What We Collect
WhereNext collects minimal data to provide and improve the service:
- Account data: Email address and authentication tokens when you sign in (via Supabase Auth).
- Profile preferences: Your onboarding quiz answers (profile type, budget, priorities) stored locally in your browser and optionally on our servers if you save simulations.
- Anonymous analytics: Page views, feature usage, and conversion events via PostHog. No personally identifiable information is linked to analytics data.
- Payment data: Processed entirely by Stripe. We never see or store your full card number.
How We Use Your Data
- Personalize country rankings based on your profile preferences.
- Save and restore your simulations across devices.
- Process premium report purchases via Stripe.
- Improve product features based on anonymous usage patterns.
What We Don't Do
- We never sell your personal information to third parties.
- We never use AI in our scoring algorithm — all rankings are deterministic and data-driven.
- We never share your profile data with advertisers.
Premium Report Data
If you purchase a Premium Relocation Report, the interview collects additional personal information to personalize your report:
- Interview answers: Income, budget, household size, nationality, medical needs, tax situation, and relocation preferences. This data is stored securely in our database with row-level access controls — only you can see your answers.
- How it's used: Your answers are combined with our structured data (country scores, city prices, tax brackets, visa requirements) and sent to Anthropic's Claude AI to generate your personalized report. Anthropic does not use this data for training and does not retain it beyond processing your request.
- What's NOT shared: Your interview answers are never sent to analytics platforms (PostHog, Google Analytics), never stored in your browser, and never visible to other users.
- Report artifacts: Your generated report is stored in our database, accessible only to you. It contains synthesized analysis, not your raw interview answers.
- Deletion: You can delete any report and all associated interview data at any time from your workspace. Deletion is permanent and cascading — removing a report removes the interview answers, generation logs, and report content.
- Retention: Interview data and report artifacts are retained for as long as your account exists. When you delete your account, all report data is permanently deleted.
Data Retention
We retain different categories of data for different periods. Each entry is retained no longer than necessary for the stated purpose:
- Account data (email + auth): Until you delete your account. Deletion is immediate and irreversible. See /account/delete.
- Interview answers: Retained for the lifetime of the associated report (you can delete a report and its interview at any time). 24 months max if your account remains inactive.
- Generated reports: Retained for the lifetime of your account. Deleted with the account.
- Stripe payment records: Retained by Stripe for 7 years (legal/tax requirement). We retain only the payment intent ID for reconciliation; the customer record is removed on account deletion.
- Anonymous analytics (PostHog): 12 months. After that, events are aggregated and de-identified.
- Server logs (Vercel): 30 days for production logs; access logs are anonymised after 7 days.
- Sentry error reports: 90 days. PII is scrubbed from breadcrumbs before transmission.
- Support emails (Resend): 24 months from last interaction.
- Browser localStorage: 30-90 days; automatic cleanup of stale entries.
You can request immediate deletion of any category at any time via your workspace, the account-delete page, or by emailing privacy@getwherenext.com.
Data Sources
Country data is sourced from official institutional APIs including the World Bank, WHO, IMF, OECD, and Open-Meteo. This data is publicly available and refreshed periodically via ISR (Incremental Static Regeneration).
Local Storage
WhereNext stores preferences, recent views, and onboarding drafts in your browser's localStorage. This data never leaves your device unless you explicitly save a simulation to your account. Stale entries are automatically cleaned up after 30-90 days.
Your Rights
- Delete your data: Delete individual reports (and all associated interview data) from your workspace, or delete your entire account by contacting us.
- Export your data: Contact us at privacy@getwherenext.com and we will provide a copy of all data associated with your account.
- Clear local data: Use your browser's "Clear Site Data" function or the "Reset draft" button in the onboarding quiz.
Contact
Questions about this policy? Reach us at privacy@getwherenext.com.