Privacy
We collect what WOVI needs to write drafts for you, keep it in the EU, send it to an AI model only for your own runs, and never sell it. You can download it or delete it yourself.
1. Who is responsible
WOVI decides how your data is used for WOVI and is responsible for it. Write to getwovi@gmail.com about anything in this notice; a person answers.
2. What we collect, why, and for how long
We collect only what WOVI needs to work. No ads, no selling data, and no analytics or advertising cookies: the only cookies are the one that keeps you signed in and one that remembers which client you are working for.
| What | Why | Legal basis | How long |
|---|---|---|---|
| Your email, name, passkeys (public keys only) and sign-ins (device, times) | Your account and signing you in safely | Our agreement with you; security is our legitimate interest | While you have an account. A session ends after 30 days at most. |
| What you put in a workspace: Brand Brains, posts you paste, mood board files, what you type in forms, the drafts, comments and decisions | Running the agents for you and your team | Our agreement with you | Until you delete it, the workspace or your account |
| Credits, top-ups and payments | Selling credits and keeping the books | The law (bookkeeping) | Seven years after the end of the year they belong to. After an account is deleted, without your name. |
| Wallets you link and the $WOVI they hold | The holder badge and holder credits | Our agreement with you, when you link one | Until you unlink the wallet |
| Your answer to "Use my edits to improve agents" | Letting builders read your notes and drafts | Your consent | Until you turn it off or delete your account |
| Your confirmation that you own an upload | Handling copyright claims | Our legitimate interest | As long as the file |
| Reports you send us | Handling them, as the Digital Services Act asks | The law | Your name and email 12 months after the decision, the report itself longer |
| Webhook delivery logs | Showing a workspace what was sent | Our agreement with you | 30 days |
| Read notifications | Your list of what happened | Our agreement with you | 180 days after you read them |
| Sign-in links and codes, rate limits | Security | Our legitimate interest | Until used or expired (minutes) |
You need to give your email to have an account; without it we cannot sign you in (a passkey-only account is the exception). Everything else is up to you.
3. AI and your data
- When an agent runs, what you typed and the parts of your Brand Brain it reads are sent to an AI model to write the draft. Nothing else is sent. Trend Scout also runs a web search with the niche and platform you typed.
- When you ask the AI to read your past posts for a Brand Brain, those posts are sent to an AI model. Reading them with plain counts sends nothing.
- No decision about you with legal or similar effects is made by automated means. Automated rules do read requests and drafts for the content rules in the terms.
- Use my edits to improve agents. When you ask for changes or edit a result, the builder of that agent may read your note and the draft to make the agent better. Off by default. Turning it off stops this for everything from then on. You change it under Account, Your data. Without it, builders see counts and scores only.
4. Who helps us run WOVI
These companies process data for us under data processing agreements, only to provide their part:
| Who | What they do | What they get | Where |
|---|---|---|---|
| Railway | Hosts WOVI: the app, its stored data and its backups. | Everything WOVI keeps (accounts, workspaces, Brand Brains, runs, credits) and the address each request comes from, in its logs. | Its EU West region (Amsterdam, the Netherlands). |
| OpenRouter | Passes each run to the AI model that writes it. Today those models come from OpenAI and Anthropic. Trend Scout's live trend search runs through it on Parallel's search. | What you typed in the run's form, the parts of your Brand Brain the agent reads, and the agent's own examples. A trend search sends only the niche and the platform, which OpenRouter passes on to Parallel. When you ask the AI to read your past posts, those posts. | The United States, as are the model makers. |
| Resend | Sends WOVI's email: sign-in links and codes, receipts, invites and notices. | Your email address and the email itself. | The United States. |
| Alchemy | Answers WOVI's reads of Robinhood Chain: $WOVI holdings for the holder badge, and payments in a stablecoin, ETH or $WOVI. | The wallet addresses linked to accounts and the transactions WOVI checks. These are public on the chain already. | Where that node provider runs its servers. |
OpenRouter, Resend and the model makers process data in the United States. Data goes there under the European Commission's Standard Contractual Clauses in each one's data processing agreement, or under the EU-US Data Privacy Framework for companies certified under it. Ask us at getwovi@gmail.com for a copy of the safeguards.
Wallet addresses and payments in $WOVI, stablecoins and ETH are on Robinhood Chain, a public blockchain, where anyone can read them. We only read from it.
5. Your rights
- A copy of your data, in a file you can take elsewhere: Account, Your data, Download my data.
- Deleting your account: Account, Your data, Delete my account. It shows what happens to each workspace before anything is deleted.
- Correcting your data, restricting or objecting to how we use it, and withdrawing a consent at any time. Withdrawing does not undo what was done before.
For anything the buttons do not cover, write to getwovi@gmail.com. We answer within one month, for free.
You can complain to the data protection authority where you live or work.
6. What deleting your account does
- Workspaces where you are the only member are deleted with everything in them. Paid credits left in them are paid back.
- Shared workspaces stay with the team. You leave them, your name on comments and decisions becomes “Deleted member”, and API keys you made stop working. If you are the only owner of a shared workspace, you make someone else an owner first.
- Your sign-in, passkeys, wallets, holder reading, notifications and consents are deleted.
- Records of credits and payments stay for the books, as bookkeeping law asks, without your name.
7. How we keep it safe
- Sign-in tokens, API keys and share links are stored only as hashes; webhook secrets are sealed. Passkeys keep their private key on your device.
- Every workspace is kept apart: one workspace never sees another's data.
8. Changes
When this notice changes in a way that matters, we tell you by email and in the app before it takes effect.