1. Overview

Wizper is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our Service. It is designed to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Colombia's Law 1581 of 2012.

Wizper does not sell your data and does not train AI models on your data.

2. Scope

This Policy applies when you visit our website or use our Services directly. It does not apply where Wizper processes personal data on behalf of a business customer — in those cases, that customer's privacy policy governs. Please contact the relevant customer directly for details.

3. Data Controller

Wizper acts as the data controller for personal information collected through the Service. Contact: support@wizper.co

4. Information We Collect

4.1 Information You Provide

• Account information: Name, email address, and password at registration.
• Payment information: Billing details collected by Paddle (our payment processor). Wizper stores only card type and last four digits.
• Customer Data: Any content you submit through the Service, including prompts and session context.
• Communications: Messages you send to our support team.

4.2 Information We Collect Automatically

• Log data: IP address, browser type, operating system, date/time of requests.
• Usage data: Features used, session duration, actions taken within the app.
• Device information: Device name, OS version, hardware identifiers.
• Analytics: We use PostHog to analyze how users interact with the Service to improve product quality.

5. Legal Basis for Processing (GDPR)

If you are located in the EEA, we process your personal data under the following legal bases:

• Contract performance: To provide the Services you subscribed to.
• Legitimate interests: Improving the Service, fraud prevention, and security.
• Consent: For optional communications. Withdrawable at any time.
• Legal obligation: Where required by law.

6. How We Use Your Information

• To provide, maintain, and improve the Services.
• To process payments and manage your subscription.
• To send transactional emails (receipts, account notices, security alerts).
• To respond to support requests.
• To analyze usage patterns and improve product features via PostHog.
• To prevent fraud and ensure platform security.
• To comply with legal obligations.

7. Tracking Technologies

• Essential cookies: Required for session management and authentication. Cannot be disabled.
• Analytics — PostHog: We use PostHog to collect anonymized usage data. PostHog respects Do Not Track signals. You may opt out at any time by contacting support@wizper.co.

You may disable non-essential cookies in your browser settings. Where required by law, we request your consent before placing non-essential cookies.

8. Data Sharing & Third Parties

We do not sell your personal data. We share data only with the following trusted providers:

Provider	Purpose	Location
Paddle.com	Payment processing & billing (Merchant of Record)	United Kingdom
PostHog	Product analytics	United States / EU

All providers are contractually obligated to protect your data and may not use it for their own purposes.

9. International Data Transfers

Your data may be processed outside your country, including in the United States. Where required by GDPR, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms to protect your data.

10. Data Retention

We retain account data for as long as your account is active. Upon account deletion, personal data is erased within 30 days, except where retention is required by law (e.g., financial records for up to 7 years).

11. Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest. We limit internal access to personal data on a need-to-know basis. Despite these measures, no internet transmission is 100% secure.

12. Your Rights

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure ("Right to be forgotten"): Request deletion of your data.
• Restriction: Request limits on how we process your data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: At any time where processing is consent-based.

To exercise any right, email support@wizper.co. We respond within 30 days. EEA users may also file a complaint with their local data protection authority.

13. Children's Privacy

Wizper is not directed at children under 16. We do not knowingly collect data from minors. If you believe a minor has provided personal data, contact us for immediate deletion.

14. California Privacy Rights (CCPA)

California residents have the right to know what personal information is collected, the right to delete, and the right to opt out of sale. Wizper does not sell personal information. To exercise CCPA rights, contact support@wizper.co.

15. Changes to This Policy

We may update this Policy periodically. We will notify you of material changes via email or in-app notice at least 30 days before they take effect.

16. Contact

For privacy inquiries: support@wizper.co