At wiiz.app (“we,” “us,” or “our”), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Wiiz platform, including our website, web dashboard, and mobile applications (collectively, the “Service”). Please read this policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
1. Information We Collect
We collect information that you provide directly to us, information collected automatically when you use the Service, and information from third-party sources.
1.1 Information You Provide
- Account Information: When you register for an account, we collect your name, email address, phone number, password, and business name.
- Business Data: Information about your business including services offered, staff members, working hours, branding assets (logos, colors), and branch/location details.
- Customer Data: If you are a business owner, you may input customer names, contact details, appointment histories, and preferences into the platform.
- Payment Information: Billing details such as credit card numbers and billing addresses, processed securely through our payment partner Stripe. We do not store your full payment card details on our servers.
- Communications: Any messages, feedback, or correspondence you send to us or through the Service, including SMS messages sent via our Twilio integration.
1.2 Information Collected Automatically
- Usage Data: Pages visited, features used, actions taken, time spent on the platform, and interaction patterns.
- Device Information: Device type, operating system, browser type, screen resolution, and unique device identifiers.
- Log Data: IP address, access times, referring URLs, and error logs.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information. See our Cookie Policy for details.
1.3 Information from Third Parties
- Payment Processors: Transaction confirmations and billing information from Stripe.
- Analytics Providers: Aggregated usage statistics from analytics services.
- App Stores: Installation and subscription data from Apple App Store and Google Play Store.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and Maintain the Service: To create and manage your account, process bookings, deliver your branded mobile app, and provide customer support.
- Process Transactions: To process usage-based charges, manage credit top-ups, send invoices, and handle billing inquiries.
- Improve the Service: To analyze usage patterns, identify trends, fix bugs, and develop new features, including our Duration Intelligence and AI-powered business insights.
- Communications: To send appointment reminders, service notifications, security alerts, and administrative messages. With your consent, we may also send promotional communications.
- Personalization: To customize your experience, provide relevant recommendations, and deliver AI-generated content tailored to your business.
- Security and Fraud Prevention: To detect, prevent, and respond to security incidents, fraud, and abuse.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With trusted third-party vendors who perform services on our behalf, including Stripe (payments), Twilio (SMS), OpenAI (AI features), cloud hosting providers, and analytics services. These providers are contractually bound to protect your information.
- Business Clients and Their Customers: When a customer books through a business’s branded app, relevant booking information is shared between the customer and the business.
- Legal Requirements: When required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of wiiz.app, our users, or the public.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
- With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and track information about your usage of the Service and to improve your experience. Cookies are small data files stored on your device. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted or expired).
For detailed information about the cookies we use and how to manage your cookie preferences, please refer to our Cookie Policy.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Service. When you close your account or request deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as resolving disputes, enforcing our agreements, or meeting tax and accounting obligations), in which case we may retain certain information for up to 7 years.
Aggregated or anonymized data that can no longer be associated with an identifiable individual may be retained indefinitely for analytics and service improvement purposes.
6. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest.
- Secure authentication mechanisms including token-based API authentication.
- Multi-tenant data isolation ensuring that each business’s data is accessible only to authorized users of that business.
- Regular security assessments and monitoring.
- Access controls limiting employee access to personal information on a need-to-know basis.
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected users in the event of a data breach, in accordance with applicable law.
7. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information. These rights may include:
- Right of Access: You may request a copy of the personal information we hold about you.
- Right to Rectification: You may request that we correct inaccurate or incomplete personal information.
- Right to Erasure: You may request that we delete your personal information, subject to certain exceptions.
- Right to Restriction: You may request that we restrict the processing of your personal information in certain circumstances.
- Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
- Right to Object: You may object to the processing of your personal information for direct marketing purposes or where processing is based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact us at the details provided in Section 10 below. We will respond to your request within 30 days, or as required by applicable law. We may ask you to verify your identity before processing your request.
You can also manage certain preferences directly through your account settings, including updating your profile information and managing communication preferences.
8. Children’s Privacy
The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 16, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally, including the use of Standard Contractual Clauses approved by relevant authorities, where applicable.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, where appropriate, by sending you a notification via email or through the Service. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
If you are located in the European Economic Area and believe that we have not adequately resolved your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.