Privacy Policy

Last updated: August 26, 2026

This Privacy Policy explains how Wiseen ("Wiseen", "we", "us"), operated by [LEGAL ENTITY NAME, ADDRESS, COUNTRY], processes personal data when you use wiseenai.com and the Wiseen application (the "Service"). For questions or requests, contact contact@wiseenai.com.

1. Roles: controller and processor

For account and billing data of the people who sign up, Wiseen is the data controller. For the content our customers put into the Service (projects, KPIs, analyses, boards, rosters of team members), the customer organization is the controller and Wiseen acts as a processor under our Data Processing Addendum.

2. Data we process

• Account data: name, email address, password (hashed by our authentication provider), organization and plan.
• Customer content: whatever your organization enters — projects, KPIs and their data points, improvement actions, analyses, meeting boards, audit results, and rosters that may contain the names of employees (e.g. responsibles, auditors, attendance). Wiseen does not require any further employee data.
• Billing data: processed by Stripe; we never see or store full card numbers.
• Technical data: logs strictly necessary to operate and secure the Service (timestamps, IP-derived rate-limiting keys, error traces).

3. AI features (Wise)

When you actively use an AI feature (the Wise assistant, AI Smart Upload), the relevant content — your chat messages, column headers and data samples, or a compact summary of the project data you ask about — is sent to OpenAI (API) to generate the response. We send the minimum necessary, per request, and OpenAI's API terms state that API data is not used to train their models. AI features are optional: if you don't use them, no content is sent to OpenAI.

4. Google Sheets connector

If your organization connects a Google Sheet to a KPI, you share that specific sheet read-only with a Wiseen service account, and we read only the tab and cell range you configure, on a schedule you control. Revoking the share stops all access immediately.

5. Legal bases (GDPR)

• Contract (Art. 6(1)(b)): providing the Service you signed up for.
• Legitimate interest (Art. 6(1)(f)): securing and improving the Service, preventing abuse.
• Legal obligation (Art. 6(1)(c)): invoicing and accounting.
• Consent (Art. 6(1)(a)): only where we ask for it explicitly.

6. Subprocessors

Transfers outside the EEA rely on the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

7. Retention & deletion

Customer content is kept for as long as your account or organization exists. Cancelling a paid subscription moves you to the Free plan and does not delete your data — your account remains active and you keep access to it.

When you delete your account or organization (which you can do self-service at any time, or by asking us), it is deactivated immediately and kept restorable for 30 days in case the deletion was a mistake. After those 30 days, an automated job permanently and irreversibly deletes the organization and all of its content — projects, tools, KPIs, actions and files — well within 90 days of the deletion. Provider backups may persist for up to 30 additional days before expiring. Billing records are kept by our payment processor as required by tax law.

8. Security

Data is encrypted in transit (TLS) and at rest. Access is isolated per organization through database-level row security. Internal access is limited to what is strictly necessary to operate the Service. See wiseenai.com/security for more.

9. Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability and object to processing, by writing to contact@wiseenai.com. You can also lodge a complaint with your supervisory authority. If your data was entered by your employer as Wiseen customer content, we will refer your request to them as controller.

10. Cookies

Wiseen uses only essential cookies (session/authentication). We do not use advertising or third-party analytics cookies, so no cookie banner is required.

11. Changes

We will announce material changes to this policy by email or in-app notice before they take effect.