Privacy Policy

1. About Us and This Policy

Weird Wisdom Ltd ("Weird Wisdom", "us", "we", or "our") operates the Process.SL website and provides the services described in our Terms and Conditions (the "Service"). This Privacy Policy explains how we collect, use, and protect your Personal Data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to data we collect when you visit our websites (including process.sl and related domains) and when you use our Service.

2. Data We Collect

We collect different types of data depending on your interaction with us.

a) When you sign up for an account:

• Data Collected: Email address, password (hashed), IP address.
• Purpose: To create and secure your account, and to communicate with you about your account and the Service.
• Legal Basis: Consent and necessity for the performance of our contract with you.

b) When you become a paying customer:

• Data Collected: Your name, company name, billing address, VAT number.
• Purpose: To process payments, manage your subscription, and for invoicing.
• Legal Basis: Necessity for the performance of our contract with you.
• Note: We use third-party payment processors (e.g., Stripe) to handle payment card details. We do not store your full credit card information.

c) When you use the Service:

• Data Collected: Navigational data, feature usage, IP addresses, system logs, and data you input into the service (e.g., persona configurations, campaign settings, content for generation).
• Purpose: To provide, maintain, and improve the Service; to provide customer support; to monitor for security threats and abuse.
• Legal Basis: Legitimate interest and necessity for the performance of our contract with you.

d) Data You Process Using Our Service (as a Processor):

• When you use our Service for digital persona deployment, audience targeting, or managing your campaign data, you are the Data Controller, and we are the Data Processor. The data you process may include names, email addresses, social media profiles, and other personal data of your target audiences. Our obligations as a Data Processor are outlined in our Data Processing Agreement (DPA).
• AI Services: When you use our AI services (e.g., persona generation, behavioral modeling, content creation), you are responsible for the data you provide as input. You must not input sensitive personal data or data you do not have the right to use for this purpose.

3. Sharing and Disclosure of Your Data

We do not sell your Personal Data. We may share your information with third parties in the following situations:

• Sub-processors and Service Providers: We share data with third-party service providers (sub-processors) who help us operate our Service, such as payment processors, cloud hosting providers, and analytics services. We have contracts in place with these providers to ensure they protect your data. A list of our key sub-processors is available in our Data Processing Agreement (DPA).
• Legal Compliance and Protection: We may disclose your information if required by law, or if we believe in good faith that such action is necessary to comply with legal proceedings, to protect and defend our rights or property, or to protect the personal safety of our users or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your Personal Data may be transferred as part of that transaction.

4. How We Use Your Data

We use your data to:

• Provide, operate, and maintain our Service.
• Process and complete transactions, and send you related information, including purchase confirmations and invoices.
• Send transactional messages, including responses to your comments, questions, and requests; provide customer service and support; and send you technical notices, updates, security alerts, and administrative messages.
• Monitor and analyse trends, usage, and activities in connection with our websites and services to improve them.
• Investigate and prevent fraudulent transactions, unauthorised access to our services, and other illegal activities.

5. Data Security

We implement robust technical and organisational measures to protect your Personal Data from unauthorised access, use, disclosure, alteration, or destruction. This includes encryption, access controls, and training for our staff.

6. International Data Transfers

We process and store data primarily within the United Kingdom and the European Economic Area (EEA). If we transfer Personal Data outside the UK/EEA, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or an adequacy decision, to provide the same level of protection as required by UK GDPR.

7. Your Data Protection Rights

Under UK data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You can exercise these rights by contacting us at legal@process.sl.

8. Data Retention

We retain your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements, or as long as your account is active.

9. Cookies

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. For more detailed information about the cookies we use, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.