Privacy Policy

We collect the following categories of personal data:

• Email address – when you join our waitlist or create an account.
• Account information – name, company name, and password when you register for the product.
• Usage data – pages visited, features used, time spent, and interactions with the application, collected automatically.
• Device and browser information – IP address, browser type, operating system, and referring URLs, collected automatically.
• Payment information – when you subscribe to a paid plan, payment details are processed by Stripe. We do not store your full card number on our servers.
• Lead and prospect data – any data you enter about your own business contacts within the Wonr application (e.g. prospect names, emails, notes). This data belongs to you.

We use the personal data we collect for the following purposes:

• To provide the service – to operate, maintain and improve the Wonr platform and its features.
• Waitlist communication – to notify you when early access becomes available and to keep you informed about product developments.
• Product updates and marketing – to send you information about new features, tips, and offers. You can unsubscribe at any time.
• Customer support – to respond to your enquiries and resolve issues.
• Analytics and product improvement – to understand how the product is used and to make it better.
• Legal compliance – to comply with applicable laws and regulations.

Our legal basis for processing your data is: (a) your consent (for marketing communications), (b) the performance of a contract (to deliver the service you signed up for), and (c) our legitimate interests in operating and improving the service.

Your data is stored securely on servers operated by our infrastructure partners. We use industry-standard security measures including encryption in transit (TLS) and at rest to protect your personal information.

Waitlist emails and account data are stored in Supabase (see Third-Party Services below), hosted on secure cloud infrastructure in the European Union or the United States depending on your region.

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We retain your personal data for as long as your account is active or as needed to provide you with the service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

We use the following trusted third-party services to operate Wonr. Each has its own privacy policy and data processing terms:

• Supabase (supabase.com) – database and authentication infrastructure. Stores your email address and account data.
• Vercel (vercel.com) – hosting and deployment platform. May process request logs and IP addresses.
• Stripe (stripe.com) – payment processing for Pro subscriptions. Handles all payment card data on our behalf. We never store full card details.
• Google Maps API (google.com) – used to power the prospect search feature. Your search queries may be processed by Google.

We do not sell your personal data to third parties. We do not share your data with third parties for their own marketing purposes.

Wonr uses essential cookies required for the service to function (e.g. authentication sessions). We may also use analytics cookies to understand product usage.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the service.

If you are located in the EEA or UK, you have the following rights regarding your personal data:

• Right of access – you can request a copy of the personal data we hold about you.
• Right to rectification – you can ask us to correct inaccurate or incomplete data.
• Right to erasure– you can ask us to delete your personal data ("right to be forgotten").
• Right to restriction – you can ask us to restrict the processing of your data in certain circumstances.
• Right to data portability – you can request your data in a structured, machine-readable format.
• Right to object – you can object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at privacy@wonr.io. We will respond within 30 days.

You also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

Your personal data may be transferred to and processed in countries outside the EEA, including the United States. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Wonr is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice on our website. The "Last updated" date at the top of this page reflects the most recent revision.

Your continued use of Wonr after changes are posted constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at: