Legal Protocol 01

Privacy
Policy.

Last Updated
October 24, 2025
Effective Date
November 1, 2025
Version
2.4.0 (Active)

Key Highlights

No Training on Data

We strictly isolate customer data. Your data is never used to train our foundation models or shared with other customers.

Data Residency

Enterprise customers can choose to store data in US, EU, or APAC regions to comply with local sovereignty laws.

Encryption Standards

AES-256 encryption at rest and TLS 1.3 in transit. Keys are managed via AWS KMS with automatic rotation.

Transparency

We provide detailed audit logs for every access to your data. You always know who, when, and what was accessed.

1. Introduction

WUF.AI ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. We believe that privacy is a fundamental human right, and we design our systems with privacy-by-default principles.

2. Information We Collect

We collect information that you provide directly to us, such as when you create an account, update your profile, or contact customer support. This may include:

  • Account Information: Name, email address, password, and contact details.
  • Billing Data: Payment method details (processed via Stripe), billing address, and transaction history.
  • Customer Data: Content you upload, ingest, or process through the Service (documents, API payloads, etc.).
  • Usage Metadata: Logs of API calls, feature usage, and system performance metrics.

3. How We Use Your Information

We use the information we collect strictly to provide and improve our services. We do not sell your data. Usage includes:

  • Service DeliveryProcessing your data to extract facts, detect conflicts, and generate patches.
  • Security & FraudMonitoring for suspicious activity, enforcing rate limits, and preventing abuse.
  • CommunicationsSending transactional emails, security alerts, and critical service updates.
  • ComplianceFulfilling legal obligations and enforcing our Terms of Service.

4. Data Sharing & Disclosure

We do not share your personal information with third parties except as described in this policy:

  • With vendors, consultants, and other service providers who need access to such information to carry out work on our behalf (see Subprocessors section).
  • In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation, or legal process.
  • If we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property, and safety of WUF.AI or others.
  • In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

5. Security Measures

We employ defense-in-depth security strategies. Our security posture includes:

ENCRYPTION
AES-256 at rest. TLS 1.3 in transit.
ACCESS CONTROL
Strict RBAC & ABAC. MFA required for all employees.
AUDITS
Annual SOC 2 Type II audits and regular pen-testing.

6. Your Rights (GDPR & CCPA)

Depending on your location, you may have certain rights regarding your personal information, including:

  • Right to Access: You can request a copy of your personal data.
  • Right to Rectification: You can ask us to correct inaccurate data.
  • Right to Deletion: You can ask us to delete your data ("Right to be Forgotten").
  • Right to Restrict Processing: You can ask us to limit how we use your data.
  • Right to Data Portability: You can request your data in a structured, machine-readable format.

To exercise these rights, please contact our Data Protection Officer at privacy@wuf.ai.

7. Subprocessors

We use the following third-party service providers to process data on our behalf:

ProviderPurposeLocation
Amazon Web Services (AWS)Cloud Infrastructure & HostingUS, EU, APAC
OpenAILLM Inference (Zero Retention)US
PineconeVector DatabaseUS, EU
StripePayment ProcessingUS
PostHogProduct AnalyticsUS

8. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

9. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

10. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there.

11. Children's Privacy

Our Service does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us.

Data Protection Officer

privacy@wuf.ai

WUF.AI Inc.
548 Market St, Suite 12345
Copenhagen, Denmark