Legal

Privacy Policy

Last updated:

1. Who we are

ConnectWiz ("we", "us") provides an omnichannel customer communication platform at connectwiz.net and app.connectwiz.net. This policy explains what personal data we collect, why, and the rights you have over it. It covers both this marketing website and the ConnectWiz platform. For data our customers process about their customers through the platform, we act as a processor on the customer’s instructions.

2. Data we collect

Website visitors: basic technical data (IP address, browser type, pages visited) and anything you submit through our contact form (name, email, company, message).

Platform account holders: registration details (name, email, phone where provided), billing information processed by our payment provider (we never store card numbers), workspace configuration, and usage records needed to operate and bill the service.

End users of our customers: messages, contact details and related conversation data are processed on behalf of the workspace owner, under their instructions and their legal basis.

3. Why we process it

To provide and secure the service, respond to your requests, process payments, meet legal obligations, and — only with consent — send product communications. We do not sell personal data, and customer content is never used to train AI models for other customers.

4. AI processing

When a workspace enables AI features, conversation content may be sent to the AI provider selected by that workspace (for example OpenAI, Anthropic, Google, DeepSeek or xAI, or the workspace’s own key) solely to generate the requested response. Provider choice and BYOK are controlled by the workspace administrator.

5. Security

Workspace data is isolated with database-enforced row-level security. Access supports two-factor authentication; webhooks are signature-verified; data is encrypted in transit. Access to production systems is limited and logged.

6. Your rights (GDPR & KVKK)

Depending on your jurisdiction, you can request access, correction, export or deletion of your personal data, object to processing, and withdraw consent. The platform includes self-serve export and verified deletion workflows; you can also email us and we will respond within the statutory period.

7. Retention

We keep personal data only as long as needed for the purposes above or as required by law. Closed accounts are deleted on a fixed schedule after termination; deletion requests are honored across all storage layers, including backups on their rotation cycle.

8. Cookies

This website uses only the cookies necessary for it to function and, where enabled, privacy-respecting analytics. Non-essential cookies are not set without consent.

9. Sub-processors & connected platforms

ConnectWiz moves conversation data to a third platform only when your workspace connects that platform. Messages on WhatsApp, Messenger and Instagram are processed by Meta (see the WhatsApp data-protection guide for the full chain); Telegram by Telegram; SMS and phone calls by the carrier account you connect (e.g. Twilio or NetGSM); campaign email by the ESP you connect (e.g. Mailchimp, Brevo, Resend); store and CRM syncs by the store or CRM you pair. AI answers run on the model configuration your workspace chooses, including bring-your-own-key setups where the model relationship is directly yours. Nothing flows to a platform you have not connected.

10. International transfers

Where a connected platform processes data outside your country (for example Meta’s messaging infrastructure), that transfer is governed by the platform’s own safeguards (such as SCCs and data-transfer addenda) and is described on the relevant integration or channel page. We state these chains plainly instead of hiding them in vendor lists.

11. Complaints

If you believe we process your data unlawfully, contact us first at [email protected] — and you always have the right to lodge a complaint with your supervisory authority (your local EU DPA under GDPR, or KVKK in Türkiye).

12. Contact

Privacy questions and requests: [email protected]. We reply from a monitored inbox, not a void.