1. Scope and overview

This Privacy Policy applies to WayConnect websites, applications, customer workspaces, and related support services. It does not replace the privacy notices of businesses that use WayConnect to communicate with their own customers.

Depending on the context, WayConnect may act as a controller of account and website information or as a processor of content submitted by a customer through the platform.

2. Information we collect

We collect only the information needed to provide, secure, support, and improve the service.

Account and profile details, such as name, work email, phone number, role, and organisation.
Workspace content and configuration submitted by authorised users.
Usage, device, browser, diagnostic, and security log information.
Billing, subscription, demo-request, support, and communication records.
Information received from connected services when an administrator enables an integration.

3. How we use information

Provide and operate customer workspaces and requested features.
Authenticate users, prevent abuse, and protect accounts and infrastructure.
Process subscriptions, provide support, and communicate service updates.
Measure reliability and improve product experience using aggregated or appropriately protected data.
Comply with applicable law and enforce contractual obligations.

4. Sharing and service providers

We do not sell personal information. Information may be shared with vetted infrastructure, communications, analytics, payment, and support providers where necessary to operate the service. These providers may process data only for authorised purposes and under appropriate contractual safeguards.

We may also disclose information when required by law, to protect rights or safety, during a corporate transaction, or when an authorised customer administrator directs us to do so.

5. Retention and security

We retain information for as long as needed to provide the service, meet contractual and legal requirements, resolve disputes, and maintain legitimate security records. Retention periods vary by data type, workspace settings, and applicable agreements.

WayConnect uses layered administrative, technical, and organisational safeguards. No online service can guarantee absolute security, so customers should also use strong authentication, appropriate permissions, and secure connected accounts.

6. Your choices and rights

Subject to local law, individuals may request access, correction, deletion, restriction, portability, or objection regarding their personal information. Where WayConnect processes data for a customer, requests should normally be directed to that customer first.

Users may manage communication preferences and workspace settings at any time. Some essential service and security notices cannot be disabled while an account remains active.

7. GDPR and international transfers

For EEA and UK personal data, processing is based on contract, legitimate interests, consent, or legal obligations as appropriate. When data is transferred across borders, WayConnect uses recognised transfer mechanisms and supplementary safeguards where required.

Customers remain responsible for configuring their use of WayConnect lawfully, providing required notices, and responding to data-subject requests for information they control.

8. Data Processing Addendum

Business and enterprise customers may request WayConnect's Data Processing Addendum for customer content processed on their behalf. The DPA describes processing instructions, confidentiality, subprocessors, security measures, assistance obligations, deletion, and applicable transfer terms.

Signed contract documents and Order Forms take precedence if they contain terms that differ from this public summary.

9. Contact and updates

Questions or privacy requests can be sent to privacy@wayconnect.co. We may update this policy as our services or legal obligations change; material updates will be communicated through an appropriate channel.