Campaign Privacy Notice.

The short version.

We collect the story you submit, your contact details, your consent records, and basic technical metadata (IP, user agent, approximate location).

We use it to: judge the contest, draw the sweepstakes, moderate content for safety, prevent fraud, contact winners, and (if you opt in separately) send marketing email.

We don't train AI models on your submissions. Automated moderation is used for safety review only, never for model improvement.

You can request deletion, export, or correction of your data at any time · see "Your rights" below.

What we collect, and why.

Submission content · the written story, video file, photo, audio, or social-post URL you upload; the story title; the social handle and platform name you optionally provide. Used to judge the UGC contest and, if approved, display in the public gallery and in our marketing under the content license you granted at submission.

Contact + identity data · first name, last name, email, phone, U.S. state and country. Used to verify eligibility, contact you about your submission, deliver prizes, and (for winners) issue required tax documentation.

Mailing address (Alternate Method of Entry only) · collected on the free-entry form to validate U.S. residency. Used only for sweepstakes administration and is not used for marketing unless you also opt in separately.

Age verification · you certify you are 21+ at submit time. We do not require a date of birth, but you may optionally provide one. Required because the Promotion is restricted to U.S. residents 21+ by U.S. sweepstakes law.

Consent records · for each required and optional checkbox, we record whether you checked it, the exact text of the checkbox you saw, the version of these Rules and this Privacy Notice in effect at the time (2026-07-01), the timestamp, your IP, and your browser's user-agent. This is required by GDPR Article 7 as proof you actually consented.

Technical metadata · IP address, approximate geolocation (country and region derived from IP, never precise GPS), browser user-agent, referrer, and any UTM tags from the link you arrived on. Used for fraud prevention, eligibility checks, traffic attribution, and content moderation evidence.

Trip + invite signals (app-qualified entries) · if you create a WeGoing! account from a Promotion link, we associate your subsequent trip creation and friend-invite actions with the Promotion attribution so your entry can qualify automatically. Trip and invite contents themselves remain governed by the broader WeGoing! Privacy Policy.

Moderation + safety processing.

Every submission is reviewed before any team member sees the raw upload. Text is screened by a third-party moderation service (OpenAI's moderation API) against categories including sexual content, content involving minors, violence, self-harm, harassment, and hate. Videos and images are screened by a separate third-party service (AWS Rekognition) against a similar safety taxonomy.

Submissions flagged for severe content (including any suspected exploitation of minors) are quarantined, removed from staff-viewable surfaces, preserved as required by applicable U.S. reporting law, and may be reported to relevant authorities. Submissions flagged for moderate policy violations (e.g. copyrighted music, nudity, third-party PII) are rejected and not published.

Moderation providers receive only the submission content necessary to perform the safety check · they do not receive your name, email, or other identifying information beyond what is embedded in the content itself.

No AI training.

We do not use your submissions to train, fine-tune, or otherwise improve any AI model owned or licensed by us. The automated moderation providers we use to keep the contest safe (above) are contractually bound to similar terms · they process submissions only for the safety classification task, not for their own model training. See each provider's policy for specifics: OpenAI api-data-usage-policies · AWS Rekognition service-terms.

Marketing opt-in (separate from contest entry).

The marketing checkbox on the submission form is optional and independent of your contest entry · you can enter the contest and sweepstakes without agreeing to receive marketing email, and we will not disadvantage your entry if you decline. If you opt in, you can unsubscribe at any time via the link in any marketing email or by emailing privacy@wegoingapp.com.

International entrants.

If you are outside the United States, you may submit content for our marketing consideration but you are not eligible to win any Promotion prize. We'll mark your record accordingly and apply the same content-license, moderation, and data-rights handling described here. Your data will be transferred to and processed in the United States by our hosting and database providers.

Retention.

Approved submissions· retained while the content license is active so we can continue to use it in marketing under the license you granted. You may revoke the license and request deletion at any time (see "Your rights").

Rejected submissions · retained for 90 days for fraud prevention and dispute resolution, then deleted except where law requires longer retention.

Sweepstakes entries · retained through the end of the Promotion period plus 12 months for audit and prize-fulfillment records.

Consent records · retained for 7 years per standard GDPR Article 7 documentation practice.

Quarantined content (severe-safety flagged) · retained as required by U.S. reporting law; access is restricted to authorized personnel and law-enforcement channels.

Your rights.

You can ask us to:

Access · provide a copy of the Promotion data we hold about you.

Correct · fix incorrect information (a misspelled name, a wrong email).

Delete · remove your submission and associated records. We retain only what law requires (e.g. tax records for paid winners).

Export · receive your data in a machine-readable format.

Opt out · revoke marketing consent. (Your contest entry is separate and is not affected.)

Use the self-service form below to submit a deletion, export, correction, or marketing-opt-out request. We email-verify every request before acting on it so no one else can act on your data using your email. Responses within 30 days as required by GDPR. Or email privacy@wegoingapp.com with "Campaign data request" in the subject line

Third-party processors specific to this Promotion.

In addition to the processors listed in our broader Privacy Policy, the Promotion uses:

OpenAI (text moderation) · openai.com/policies/privacy-policy

Amazon Web Services (Rekognition video + image moderation, S3 staging storage) · aws.amazon.com/privacy

Cloudflare (Turnstile bot-protection on submission forms) · cloudflare.com/privacypolicy

Disclaimer.

The Promotion is in no way sponsored, endorsed, administered by, or associated with Instagram, TikTok, Meta, YouTube, Threads, X (Twitter), or any airline. See the Official Rules for the full release.

Contact.

Questions about this Privacy Notice or about the Promotion data we hold: privacy@wegoingapp.com.