Introduction
Wawilee ("we", "us", "our", or "Company") operates the wawilee.ai website and platform (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
Information We Collect
Account Information
When you create an account, we collect your name, email address, phone number, professional credentials, experience level, practice areas, and location. For consultants, we also collect your day rate, availability, and work history.
Profile Data
You may voluntarily provide additional information such as your LinkedIn profile, portfolio links, case studies, certifications, and client testimonials to enhance your profile visibility and credibility.
Payment Information
When you make payments or subscribe to services, we collect billing address, payment method details, and invoice history. Payment processing is handled by Stripe and Airwallex — we do not store full credit card numbers.
Usage Data
We automatically collect information about your interactions with our Service, including IP address, browser type, pages visited, time spent, search queries, projects viewed, applications submitted, and message activity.
Communication Data
Messages sent through the platform, support tickets, feedback, and survey responses are stored to improve our Service and provide customer support.
How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve the Service
- To process payments and manage subscriptions
- To match consultants with relevant projects
- To display your profile to potential clients or team members
- To send transactional emails (confirmations, invoices, updates)
- To send marketing communications (with your consent)
- To respond to inquiries and support requests
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
- To analyze usage trends and improve user experience
Who We Share Your Information With
Service Providers
We share data with third-party service providers who assist us in operating our website, conducting business, and servicing you. These include:
- Stripe & Airwallex — Payment processing and invoicing
- Supabase — Database and authentication hosting
- Email providers — Transactional and marketing communications
- Analytics tools — Usage and performance tracking
Other Users
Your profile information (name, photo, expertise, ratings, reviews) is visible to other platform users to facilitate matching and community engagement. You can control the visibility of certain profile sections.
Legal Requirements
We may disclose your information when required by law, court order, or government request, or when we believe in good faith that disclosure is necessary to protect our rights, privacy, safety, or property.
Connected Calendar Accounts
Wawilee lets consultants connect a Google Calendar or Microsoft (Outlook) calendar so the platform can show clients accurate availability and schedule meetings. Connecting a calendar is always optional and is initiated by you; you can disconnect it at any time from Settings → Calendars.
Google Calendar data
When you connect a Google account, Wawilee requests permission to read your calendars' free/busy information and to create calendar events. We use this access only to (a) calculate the times you are available on your public booking page and (b) create a calendar event when a meeting is booked with you. We do not read the titles, descriptions, attendees, or contents of your existing events for any other purpose.
Microsoft (Outlook) Calendar data
When you connect a Microsoft account, Wawilee requests delegated permission to read and write your calendar (Calendars.ReadWrite) for the same two purposes: computing your availability and creating meeting events you have agreed to. Where provisioned, the platform also uses your Wawilee/Microsoft 365 calendar so internal meetings do not clash with public booking slots.
How this data is used and stored
Calendar free/busy data is read on demand to compute availability and is not retained as a copy in our database. The OAuth tokens that authorise this access are stored encrypted and are used solely to perform the actions above. We never sell calendar data, never use it for advertising, and never use it to train machine-learning or AI models.
Limited Use disclosure
Wawilee's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information obtained through Microsoft Graph is used in the same limited manner and in accordance with Microsoft's API terms.
Disconnecting and revoking access
You can disconnect a calendar at any time from Settings → Calendars in your Wawilee account, which deletes the stored tokens. You can also revoke Wawilee's access directly from your Google Account permissions page or your Microsoft account app permissions at any time.
Data Retention
We retain your information for as long as your account is active and as needed to provide you with our Services. You can request deletion of your account at any time, subject to certain legal or contractual obligations.
After account deletion, we retain anonymized transaction data for accounting and legal purposes for up to 7 years. Personal identifying information is deleted within 30 days, except where required to retain by law.
Message and communication history may be retained longer for dispute resolution and service improvement purposes, but will be anonymized after 2 years.
Your Rights
GDPR Rights (EU Users)
If you are a resident of the European Union, you have the following rights:
- Right to Access — Request a copy of your personal data
- Right to Rectification — Correct inaccurate information
- Right to Erasure — Request deletion of your data
- Right to Restrict Processing — Limit how we use your data
- Right to Data Portability — Receive your data in a portable format
- Right to Object — Opt out of certain processing activities
Account Management
You can exercise these rights from your account settings without contacting support:
- Export your data as a single JSON file from /dashboard/settings/data-export — covers profile, subscriptions, payouts, project memberships, invoices, payouts, notifications, and reviews.
- Edit your profile + notification preferences in /dashboard/settings.
- Delete your account via the "Danger zone" tab in the same settings page (sets a deactivated_at flag, signs you out, and removes you from public surfaces immediately; full hard-delete is performed on a 30-day cycle).
For data corrections or deletion requests we can't handle through the product (e.g. removing yourself from an audit trail), email privacy@wawilee.ai.
Marketing Communications
You can opt out of marketing emails by clicking the unsubscribe link in any email or updating your communication preferences in your account settings.
Cookies and Tracking
We use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content. Cookies may be persistent (remain on your device) or session-based (deleted when you close your browser).
You can control cookie preferences through your browser settings. Disabling cookies may affect certain features of our Service. We use both first-party and third-party cookies for analytics, authentication, and advertising purposes.
By using our Service, you consent to our cookie policy. We do not track you across unrelated third-party websites, and we respect Do Not Track signals where applicable.
Security
We implement industry-standard security measures including encryption (TLS), secure password hashing, two-factor authentication, and regular security audits. However, no method of transmission over the internet is 100% secure.
You are responsible for maintaining the confidentiality of your login credentials. If you believe your account has been compromised, contact us immediately at hello@wawilee.ai.
In the event of a data breach affecting personal information, we will notify affected users without undue delay and comply with applicable data breach notification laws.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Wawilee Privacy Team
Email: hello@wawilee.ai
We will respond to privacy inquiries within 30 days.
This Privacy Policy may be updated periodically. We will notify you of material changes via email or a prominent notice on the Service.