Wisayo Privacy Policy
1. Scope
This policy explains how Wisayo handles information on its public website, subscription portal, and web application.
2. Information and storage
2.1 Account and operational information
Wisayo stores the information required to operate an account, including email, authentication records, subscription and billing state, device registrations, content-blind usage counters, security events, and support correspondence.
2.2 Local encrypted vault
Your profiles, Key Person details, insights, chat history, favorites, and guidance are kept in your encrypted local vault. Wisayo's durable server systems are designed not to store that material as readable application content.
2.3 Encrypted continuity
When encrypted backup is enabled, Wisayo stores ciphertext and content-blind metadata in private object storage. Encryption keys remain under the client-side vault design; the server does not receive a plaintext copy of the vault.
2.4 AI requests
When you request an insight or chat response, the minimum selected context needed for that request is transmitted through Wisayo's service to the configured AI provider for transient processing. Wisayo does not durably store that request or response as readable server content. Provider processing is governed by the applicable provider terms and Wisayo's configured data controls.
3. Payments and service providers
Dodo processes checkout, payment methods, tax, receipts, recurring billing, refunds or disputes handled at provider level, and related transaction support. Wisayo does not store full payment-card details.
Wisayo also uses infrastructure and communications providers for hosting, managed PostgreSQL, encrypted object storage, transactional email, and optional sign-in methods. Each provider processes only the information required for its configured function.
4. Cookies and analytics
Wisayo uses essential browser storage for authentication, security, language, theme, vault operation, and saved privacy choices. Optional analytics may be enabled only after the relevant consent where required. Wisayo does not currently serve advertising.
5. Security
Wisayo uses HTTPS in transit, restricted operational access, a device-first encrypted vault, and ciphertext-only continuity storage. No system is guaranteed to be perfectly secure; report suspected security issues to security@wisayo.com.
6. Retention, cancellation, and deletion
Subscription cancellation does not delete the Wisayo account or the local vault. Paid online access continues through a provider-confirmed paid-period end when cancellation is scheduled for period end.
Eligible unavailable accounts enter the disclosed inactivity lifecycle after 365 days without foreground authenticated use, receive a final warning 30 days later, and enter deletion another 30 days later. A foreground sign-in before deletion is claimed cancels the abandonment countdown, although paid access still requires valid billing or wallet balance.
An explicit account deletion cancels known non-terminal subscriptions, removes encrypted Domain C objects and operational account records through the durable deletion workflow, and retires login identities using versioned keyed fingerprints. Legally required pseudonymized billing records may be retained. Data that remains only in your browser or device stays under your control until you erase that local storage.
7. Adults and minor Key Person profiles
Wisayo accounts are available only to people aged 18 or older. An adult Unlimited account owner may add a minor child as a Key Person solely for the adult's own private guidance. The child does not receive a Wisayo account or login and cannot use the service. Wisayo does not run a separate guardian-consent workflow for this adult-controlled profile; the adult is responsible for having lawful authority to provide the information.
8. Your choices and rights
Depending on applicable law, you may request access, correction, portability, restriction, objection, or deletion of personal information Wisayo holds. You may also withdraw optional consent. Email security@wisayo.com with the subject “Data Request.” Wisayo may verify account ownership before acting.
9. International processing
Operational information may be processed where Wisayo and its configured providers operate. Where applicable law requires a transfer safeguard, Wisayo relies on an available lawful mechanism appropriate to that provider and transfer.
10. Changes and contact
Material changes will be communicated by appropriate means before they take effect when required. Questions may be sent to security@wisayo.com.