Privacy Policy

1. Who we are

MyAndén is a software service for shuttle and black car operators. We provide an operator panel (bookings, dispatch, drivers, vehicles, rates, trip emails and a commission ledger) and build and host each operator's public website. We earn referral commissions from tour, activity and hotel partners when travellers book through those websites.

• Legal entity: Wayuup LLC, a Florida limited liability company. MyAndén is a brand of Wayuup LLC; contracts and invoices are issued in the name of Wayuup LLC.
• Mailing address: 12086 Miramar Pkwy, Miramar, FL 33025
• Privacy contact:

2. Whose information this covers, and our role

• Website visitors and prospects. People who visit myanden.com or fill in one of our forms (operators applying to join, or tour, attraction, hotel and restaurant businesses interested in our partner network). For this information, MyAndén decides how it is used, and this policy applies in full.
• Operators and their staff. The businesses that use MyAndén (our customers) and the people who use the panel for them, such as owners, dispatchers and administrators. MyAndén decides how account and billing information is used.
• Drivers and passengers of our operators. When an operator uses MyAndén, it enters or receives information about its drivers and its passengers (for example through booking requests on its website). We process this information on behalf of, and on the instructions of, the operator, as its service provider (or "processor"). The operator is responsible to its drivers and passengers for how that information is collected and used, and for giving them its own privacy notice. If you are a passenger or a driver, please contact the operator you deal with first. We will help the operator respond to your request. See Your choices and rights.

3. Information we collect

3.1 Information you give us through our forms

• Operator application form: your name, company, email, phone or WhatsApp number, number of vehicles, bookings per month, country and city.
• Partner form: your name, business name, email, country, city, the type of business you run and whether you already run an affiliate programme.
• Anything else you choose to tell us in messages, calls or video calls.

3.2 Operator account and business information

• Account details for panel users: name, email address, role, login credentials (passwords are stored in hashed form by our authentication provider), and sign-in links sent by email.
• Business details: legal name, address, contacts, fleet, routes, fares, photos and other content you upload, and the domain and online listings you ask us to manage.
• Commercial and tax information: signed agreements and acceptance records (document version, date and time, IP address, browser), commission ledger, payout details, and tax forms such as IRS Form W-9 or W-8.
• Support and communications history.

3.3 Information we process on behalf of operators

• Passengers: name, email, phone, pickup and drop-off locations, dates and times, flight number, number of passengers and bags, notes the passenger or operator adds (for example a request for child seats), quotes, booking status, payment status, and the trip emails sent in the operator's name.
• Drivers and staff: name, phone, email, licence and document expiry dates (and licence numbers if the operator chooses to enter them), assigned vehicles and trips, and trip status updates made from the driver's link. MyAndén does not collect live or real-time location from drivers. If we add live driver location in the future, we will update this policy and notify operators before we start collecting it.
• Vehicles: vehicle details such as make, model, VIN and service dates.

Payment card data: passengers pay operators directly through the operator's own Stripe or PayPal account. MyAndén does not receive or store full payment card numbers. Those payments are governed by the payment provider's own terms and privacy policy.

3.4 Information collected automatically

• Technical data your browser sends when you visit our sites: IP address, browser and device type, pages requested, referring page, and date and time. This is processed by our hosting and security provider (Cloudflare).
• Aggregate, cookieless usage measurement through Cloudflare Web Analytics.
• Security signals used to block bots and abuse (for example Cloudflare Turnstile and our own anti-spam checks on forms).
• Technical reports sent automatically by your browser when a page's security policy is triggered, which may include the page address and your browser details.
• On operator websites: clicks on partner links, so we can attribute bookings and calculate commissions, and visit statistics shown in the operator's panel.

4. How we use information

• To answer enquiries and assess whether MyAndén is a fit for an operator or partner.
• To provide, maintain, secure and support the panel and operator websites, including sending trip emails on the operator's behalf.
• To track partner referrals, calculate commissions, keep the commission ledger and make payouts.
• To create and keep records of agreements, acceptances and transactions, and to meet tax, accounting and legal obligations.
• To detect, prevent and investigate fraud, spam, abuse and security incidents.
• To improve our services, using aggregated or de-identified information where possible.
• To send service and account messages, and, where permitted, information about MyAndén. You can opt out of marketing at any time.

We use information that we process on behalf of an operator only to provide our services to that operator and as the operator instructs, and not for our own marketing.

5. Service providers and other recipients

We share personal information only as described here. Our service providers may use it only to provide services to us.

• Cloudflare, Inc.: content delivery, hosting, security, bot protection (Turnstile) and cookieless web analytics.
• Web3Forms: receives the information submitted through the forms on myanden.com and delivers it to us by email.
• Supabase, Inc.: database, authentication and hosting for the operator panel (United States).
• Resend: email delivery, including sign-in links and trip emails sent in the operator's name.
• Google LLC: web fonts (Google Fonts) loaded from Google's servers, and Google Maps / Places services used for addresses and locations.
• Cloudflare, Inc. (email forwarding) and our email hosting provider: our business email, where form submissions and correspondence are received.
• Payment providers chosen by the operator (Stripe, PayPal): passengers pay operators directly. These providers act under their own terms and privacy policies.
• Tour, activity and hotel partners and affiliate networks: when a visitor clicks a partner link on an operator website, they are taken to the partner's site, which may use its own cookies to attribute the booking. We do not give partners passengers' names or contact details. Partners receive only the information the traveller gives them directly when booking.
• Tools an operator chooses to connect: if an operator connects a third-party analytics, advertising or accounting tool to its website or panel, information is shared with that tool on the operator's instructions.
• Professional advisers (lawyers, accountants), authorities when required by law or to protect rights, safety and security, and a successor in a merger, acquisition or sale of assets, subject to this policy.

6. No sale of personal information

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not sell or rent passenger or driver information to partners, advertisers or anyone else. We earn from partner commissions, not from personal data.

7. Cookies and similar technologies

As of the last update, the public pages of myanden.com do not set advertising or analytics cookies. Our analytics are cookieless. Our security provider may set strictly necessary cookies when it needs to check that a visitor is not a bot. The operator panel uses your browser's local storage to keep you signed in. If we ever add non-essential cookies, we will update this policy and ask for consent where the law requires it.

Operator websites may use additional technologies that the operator chooses to enable. In that case the operator's own privacy notice applies.

8. Email, WhatsApp and SMS

Email. We send service and account emails (such as sign-in links and important notices). Marketing emails from MyAndén always include an unsubscribe link and our postal address.

WhatsApp and SMS from MyAndén. We contact you by WhatsApp or SMS only if you have given us your consent, for example by ticking the optional box on our form. If you consent, you agree to receive messages from MyAndén (Wayuup LLC) about your enquiry and your account at the number you provided. These messages may be sent using automated technology. Consent is not a condition of buying anything. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help, or contact . We do not share mobile numbers or messaging consent with third parties for their own marketing.

Messages to passengers (when enabled). When WhatsApp or SMS messaging with passengers becomes available in the panel, operators will send those messages through MyAndén on their own behalf. The operator is responsible for having the passenger's consent where the law requires it (including under the Telephone Consumer Protection Act and the Florida Telephone Solicitation Act). MyAndén will honour opt-out requests such as STOP.

9. How long we keep information

• Form enquiries that do not become customers: up to 24 months after our last contact, then deleted.
• Operator account and business information: for as long as the operator uses MyAndén, and then for the data-export period described in our Terms of Service (30 days). After that it is deleted or de-identified within 90 days, except for records we must keep.
• Information processed for operators (passengers, drivers, vehicles): kept as the operator instructs while the account is active. It is returned or exported to the operator and then deleted after the account ends, as described above.
• Backups: overwritten on a rolling cycle of up to 35 days.
• Agreements, acceptance records, commission, payout and tax records: for as long as required by tax and accounting law and for the period in which legal claims may be brought (7 years).
• Security logs: for up to 12 months.

10. Security and breach notification

We use reasonable administrative, technical and physical measures to protect personal information. These include encrypted connections (HTTPS), access controls, hashed passwords, revocable driver links that show drivers only their own trips, and limiting access to people who need it. No system is perfectly secure.

If we discover a breach of security affecting personal information, we will investigate promptly and notify in line with applicable law, including the Florida Information Protection Act (section 501.171, Florida Statutes):

• For information we hold on behalf of an operator, we will notify the operator without unreasonable delay and no later than 10 days after we determine that a breach occurred or reasonably suspect that one occurred. We will cooperate with the operator's own notifications.
• For information we hold for our own purposes, we will notify affected individuals as quickly as possible and no later than 30 days after we determine that a breach occurred, unless law enforcement asks us to delay or the law allows otherwise. We will notify the Florida Department of Legal Affairs where 500 or more Florida residents are affected, and consumer reporting agencies where the law requires it.

11. Your choices and rights

Depending on where you live, you may have the right to ask us to: confirm whether we process your personal information and give you access to it; correct it; delete it; give you a portable copy; or stop using it for marketing. You can opt out of marketing emails using the unsubscribe link, and out of WhatsApp or SMS by replying STOP.

• How to ask: email with your request and the email or phone number you used with us. We may need to verify your identity before acting. An authorised agent may make a request for you with proof of authority.
• When we respond: within 45 days, or sooner where the law requires it. We will tell you if we need more time or cannot meet a request, and why.
• Passengers and drivers: if your information was given to us by an operator, please contact that operator. If you contact us, we will pass your request to the operator and help it respond.
• No discrimination: we will not treat you differently for exercising your rights.

12. International visitors

MyAndén is based in the United States, and our service providers process information in the United States and in other countries where they operate. If you use our sites or services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where the law requires it, we put appropriate safeguards in place for these transfers. Operators established outside the United States can request a data processing agreement that includes those safeguards by writing to .

13. Children

Our sites and services are intended for businesses and are not directed to children. We do not knowingly collect personal information directly from children under 13. Operators may record information about passengers who are minors (for example a child seat request) as part of a booking, and we process it only on the operator's behalf. If you believe a child has given us personal information directly, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change the "Last updated" date. If we make material changes, we will notify operators by email or in the panel at least 30 days before they take effect.

15. Contact us

Wayuup LLC
Mailing address: 12086 Miramar Pkwy, Miramar, FL 33025
Email: