Privacy Policy

3. Data We Collect

3.1 Account Data

• Name, surname
• Email address
• Phone number
• Password (encrypted)

3.2 Business Data

• Company name
• Company code / VAT

3.3 Usage Data

• Actions within the platform
• Proposal activity and engagement data
• Scoring data based on user interactions

3.4 Technical Data

• Device information
• Browser data
• Cookies and tracking data

3.5 Customer Data (processed on behalf of clients)

• Contact details
• Behavioral data (e.g. interactions with proposals)

4. How We Use Data (Legal Basis)

We process personal data under the following legal bases:

• Contract performance – to provide our SaaS services
• Legitimate interests – to improve our platform and analytics
• Consent – for marketing and non-essential cookies
• Legal obligation – for accounting and legal compliance

We do not use the contents of Customer Data to train artificial intelligence models. Where we improve our automated import features, we use only structural metadata (such as file and table layouts and formats), not the contents of your catalogs, prices, or client records.

5. Payments

Fees you pay to us for your Wantly subscription are processed by Stripe.

Where you use the Service to collect payments from your own clients, those payments are processed by your own payment provider, connected at your request.

We do not store your payment card data. Payment data is processed directly by the providers.

6. Cookies and Tracking

We use cookies and similar technologies, including:

• Google Analytics
• Facebook Pixel
• Hotjar
• Google Tag Manager

Non-essential cookies are used only with your consent.

You can manage your cookie preferences at any time.

7. Marketing

We may send:

• product updates
• newsletters

Legal basis:

• consent (for newsletters)
• legitimate interest (for existing customers – product updates)

You can unsubscribe at any time.

8. Data Sharing

We share data with trusted service providers, including:

• AWS (hosting)
• HubSpot (CRM, email, analytics)
• Intercom (support, communication)
• Google (analytics)
• Meta/Facebook (ads)
• Stripe (billing for your Wantly subscription)
• OpenAI, Anthropic, and Google (AI processing for catalog import, translation, and content generation)

All providers process data under written agreements. Our AI providers process data through their business or API services and do not use it to train their models.

9. International Data Transfers

Some providers are located outside the EEA.

We ensure protection via:

• Standard Contractual Clauses (SCCs)
• GDPR-compliant safeguards

10. Data Retention

We retain data as follows:

• Account data: during account use + up to 3 years after deletion
• Contracts and documents: up to 10 years
• Analytics data: up to 24 months
• Marketing data: until consent is withdrawn

11. Security

We implement appropriate security measures, including:

• Encryption (HTTPS, AWS infrastructure)
• Access control
• System monitoring

12. Your Rights (GDPR)

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent

To exercise your rights, contact: privacy@wantly.eu

We respond within 1 month.

13. Automated Decision-Making

We use analytics and scoring systems to evaluate proposal engagement.

These do not produce legal or similarly significant effects.

14. Children

Our services are not intended for individuals under 16.

15. Changes to This Policy

We may update this Privacy Policy.

For significant changes, we will notify users via email or in-app notification.

16. Contact

You also have the right to lodge a complaint with your local data protection authority.