Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This includes:

• Contact information (name, email, phone number)
• Business information (company name, industry, use case)
• Call recordings and transcripts (with your consent)
• Usage data and analytics
• Technical information (IP address, device information)

2. How We Use Your Information

• Provide and improve our AI communication services
• Process transactions and send notifications
• Respond to your comments and questions
• Train and improve our AI models (anonymized)
• Comply with legal obligations

3. Data Sharing

We do not sell, trade, or rent your personal information. We may share your information only in limited circumstances:

• With your explicit consent
• To comply with legal requirements
• With trusted service providers (under strict data processing agreements)
• In case of business transfer (merger, acquisition)

4. Data Security

We implement industry-standard security measures including encryption, access controls, and regular security audits to protect your information.

5. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing

Data Processing Agreement (DPA)

1. Data Processing

When you use Wachsum.app for business purposes, we act as a data processor on your behalf. This DPA governs how we handle personal data of your customers and end-users.

2. Your Responsibilities as Data Controller

• Ensure lawful basis for processing personal data
• Provide appropriate privacy notices to your customers
• Obtain necessary consents for call recording and AI processing
• Respond to data subject requests from your customers

3. Our Commitments as Data Processor

• Process data only according to your documented instructions
• Maintain appropriate technical and organizational measures
• Assist with data subject requests and compliance obligations
• Notify you of any data breaches within 72 hours
• Delete or return data upon termination of services

4. International Transfers

Data may be transferred to and processed in countries outside the EU. We ensure adequate protection through Standard Contractual Clauses (SCCs) and other approved mechanisms.