Privacy Policy

3.1 Personal Data You Provide

• Account Information: Name, email address, username, password
• Contact Information: Phone number (optional), business information
• Payment Information: Billing address, payment method details (processed by Stripe)
• Profile Data: Preferences, settings, profile picture (optional)
• Communication Data: Support tickets, feedback, correspondence

3.2 Data You Upload or Process

• User Content: Data files, datasets, analysis results
• AI Inputs/Outputs: Prompts, queries, generated content
• Project Data: Workflows, configurations, saved analyses

3.3 Automatically Collected Data

• Technical Data: IP address, browser type, device information
• Usage Data: Pages visited, features used, time spent, click patterns (only if you accept analytics cookies)
• Performance Data: Error logs, system performance metrics
• Analytics Data: Usage statistics, feature adoption rates (only if you accept analytics cookies)

4.1 Contractual Necessity (Article 6(1)(b) GDPR)

• Account creation and authentication
• Service provision and feature delivery
• Payment processing and billing
• Customer support

4.2 Legitimate Interest (Article 6(1)(f) GDPR)

• Service improvement and optimization
• Security monitoring and fraud prevention
• Error and performance logs from our servers
• Technical support and troubleshooting

4.3 Consent (Article 6(1)(a) GDPR)

• Marketing communications (where required)
• Analytics (PostHog) and other optional cookies, only after you accept them in the cookie banner
• Processing of special categories of data (where applicable)

4.4 Legal Obligation (Article 6(1)(c) GDPR)

• Tax and accounting requirements
• Regulatory compliance
• Law enforcement requests

5.1 Service Provision

• Authenticate users and maintain accounts
• Process data analysis and AI automation requests
• Manage credit-based billing and payments
• Provide customer support and technical assistance

5.2 Service Improvement

• Analyze usage patterns to enhance features
• Choose and configure the AI models we offer. We do not use your content to train AI models
• Optimize platform performance and reliability
• Develop new features and services

5.3 Security and Compliance

• Monitor for unauthorized access and security threats
• Prevent fraud and abuse
• Comply with legal and regulatory requirements
• Enforce our Terms of Service

6.1 Service Providers

We share data with trusted third-party providers who assist in delivering our services:

Cloud Infrastructure

AI Model Providers

Payments and Analytics

Authentication and Social

waiyers reserves the right to add, replace, or remove any service provider at its sole discretion. Material changes affecting data processing will be reflected in updates to this Privacy Policy.

6.2 Legal Requirements

We may disclose personal data when required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Respond to law enforcement requests

6.3 Business Transfers

In the event of a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice and ensure continued protection under this Privacy Policy.

8.1 Retention Periods

• Account Data: Until you delete your account at account.waiyers.com/privacy. Deletion starts right away; invoices, your credit history and the record of your cookie and consent choices are kept as accounting and legal records
• Usage Data: 26 months from collection
• Financial Records: 10 years (French tax law requirement)
• Support Data: 3 years from last interaction
• Marketing Data: Until consent withdrawal + 30 days

8.2 Retention Criteria

We determine retention periods based on:

• Legal and regulatory requirements
• Legitimate business purposes
• Data subject rights and requests
• Security and fraud prevention needs

9.1 Individual Rights

You have the following rights regarding your personal data:

9.2 Exercising Your Rights

To exercise any of these rights, contact us at privacy@waiyers.com. We will respond within 1 month (or 3 months for complex requests). You may also lodge a complaint with the CNIL (French data protection authority) or your local supervisory authority.

INPI data.inpi.fr/marques/FR5193943

10.1 Proprietary Architecture

The data architecture, database schemas, infrastructure topology, and technical management practices employed by waiyers are proprietary and confidential. These constitute trade secrets of waiyers and are not disclosed to users or third parties except as required by law.

10.2 Infrastructure Freedom

waiyers reserves the right to freely select, change, or replace any backend services, cloud providers, databases, and infrastructure components used to operate the platform. Users acknowledge that these technical choices are made at our sole discretion to ensure the best balance of performance, security, and compliance.

10.3 Confidential Data Inquiries

For confidential inquiries regarding how your data is handled, infrastructure security, or private data management concerns, contact us directly at:

10.1 Technical Measures

• TLS 1.3 encryption for data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication for admin access
• Regular security audits and penetration testing
• AWS security controls and compliance certifications

10.2 Organizational Measures

• Employee training on data protection
• Access controls and need-to-know basis
• Regular backup and disaster recovery procedures
• Incident response and breach notification procedures
• Data processing agreements with vendors

11.1 Essential Cookies

Required for the website to function properly:

• Authentication and session management
• Security and fraud prevention
• Load balancing and performance

11.2 Analytics Cookies

Used to understand how the site is used, only after you accept analytics in the cookie banner. Until then PostHog is not loaded and nothing is sent:

• PostHog Analytics: pages visited, clicks, device and browser type, approximate location derived from your IP address
• Session recordings of how pages are used, with all text and form fields masked
• Performance monitoring (page load times)

11.3 Marketing Cookies

Used for targeted advertising (with explicit consent):

• Retargeting and conversion tracking
• Social media integration
• Preference-based content delivery

You can change your choice at any time with the button below or in your browser settings. If you withdraw consent, analytics and session recordings stop at once.