Privacy Policy
How we collect, use and protect your personal data in accordance with GDPR.
Introduction
Our commitment to your privacy
Wapi ("we", "our", "us") is committed to protecting the privacy of users of our service. This privacy policy explains how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
Data Controller
Who manages your data
Webedia
Address
367 Avenue Louise
1050 Brussels, Belgium
VAT No.
BE0771506524
Legal Representative
Thomas Timmermans
DPO Contact
[email protected]Data Collected
What we collect and why
Account Data
- Name - to personalize your experience
- Email - for authentication and communications
- Password - stored securely (hashed)
Payment Data
Payments are managed by Stripe. We do not store ever your credit card numbers. Only a Stripe customer ID is retained.
Technical Data
- IP Address - for security and fraud prevention
- User Agent - for security logs
- Cookies - required for operation
Usage Data
- Connected WordPress sites (domains)
- Service usage statistics (WU consumed)
- Daily activity (for the streak system)
Legal Basis for Processing
Legal basis for each processing
| Processing | Legal Basis |
|---|---|
| User account management | Contract execution |
| Billing and payments | Contract execution |
| Security logs | Legitimate interest |
| Usage statistics | Legitimate interest |
| Marketing communications | Consent |
Retention Period
How long we keep your data
Account Data
Until account deletion
Security logs
90 days
Invoices and accounting data
10 years (legal requirement)
Usage statistics
Until account deletion
Your GDPR Rights
What you can request
Right of access
Obtain a copy of your data
Right to rectification
Correct your inaccurate data
Right to erasure
Request deletion
Right to portability
Receive your data
Right to object
Object to processing
Right to restriction
Restrict processing
To exercise these rights, contact us at: [email protected]
Data Security
How we protect your information
Sub-processors
Third-party services we use
Stripe
Payments
OpenAI
AI Processing (via GPT)
Hetzner Online GmbH
Hosting
Google Tag Manager
Analytics
International Transfers
Data outside the European Union
Some data may be transferred to countries outside the EU (notably via OpenAI and Stripe). These transfers are governed by appropriate safeguards : Standard Contractual Clauses (SCC) and Data Privacy Framework (DPF).
Contact and Complaints
For any GDPR question