Privacy Policy

1. Introduction

Welcome to Wyloe ("we", "our", or "us"). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our web application, in compliance with the General Data Protection Regulation (GDPR) and UK data protection laws.

2. Data Controller

For the purposes of the GDPR, Wyloe is the Data Controller of your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

3. Information We Collect

We collect the following categories of personal data:

• Identity & Contact Data: Name, email address, and authentication credentials provided during sign-up (e.g., via GitHub or Email).
• Content Data: The content of the snippets, notes, folders, and JSON/CSV documents you actively create and store in our database.
• Transaction Data: Details about payments (processed securely via Stripe; we do not store your full credit card details) and your subscription status.
• Technical & Usage Data: IP address, browser type, usage patterns, and cookies (see our Cookie Policy).

4. Legal Basis for Processing

Under GDPR, we process your personal data under the following lawful bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., analytics cookies).
• Contract: The processing is necessary for a contract we have with you (e.g., providing the Wyloe service, processing subscriptions).
• Legitimate Interests: The processing is necessary for our legitimate interests (e.g., securing the platform, preventing fraud) unless those interests are overridden by your rights.

5. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. When you delete your account, your personal data and content (snippets, folders) are permanently purged from our active databases.

6. Your Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate.
• The right to erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions. You can trigger this directly by deleting your account in the App Settings.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you.

To exercise any of these rights, please contact us at contact@wyloe.com. We have one month to respond to you.

7. Third-Party Service Providers

We use select third-party processors to provide our services. These processors are strictly bound by data processing agreements:

• Convex: Real-time database and backend infrastructure.
• Vercel: Hosting and analytics.
• Stripe: Secure payment processing.

8. Changes to This Privacy Policy

We keep our privacy policy under regular review and place any updates on this web page. We will notify you of any material changes via email or prominent notice on our platform.