Privacy Policy

1. Information We Collect

Account information. When you register, we collect your name, email address, company name, and authentication credentials managed through our identity provider. We do not store raw passwords.

Usage data. We automatically record information about how you interact with the platform, including pages visited, features used, timestamps, IP addresses, browser type, and referring URLs. This data is used solely to operate and improve the service.

App integration data. To provide the service, you connect third-party accounts such as Apple Search Ads and RevenueCat. We store the API credentials you provide (encrypted at rest via Supabase Vault) and the performance data we retrieve on your behalf, including campaign metrics, install records, and revenue events. This data belongs to you and is processed only to deliver the reconciliation and reporting features you have requested.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Wily App platform.
• Execute scheduled data pulls, reconciliations, and automated actions you have approved.
• Improve product quality, fix bugs, and develop new features based on aggregated, anonymised usage patterns.
• Send you transactional communications, such as email confirmations, error alerts, and billing receipts.
• Send product updates and marketing communications where you have given consent and may opt out at any time.
• Comply with legal obligations and enforce our Terms of Service.

3. Data Sharing

We do not sell, rent, or trade your personal information to third parties.

We share data only with the following categories of service providers who process it on our behalf under data processing agreements:

• Infrastructure and hosting (Railway, Supabase) — to run the application and store your data.
• Authentication (Clerk) — to manage user identities and sessions securely.
• Payment processing — to handle subscription billing. We do not store full card details.
• Analytics — aggregated, anonymised usage metrics to understand product engagement.

We may also disclose information if required by law, legal process, or to protect the rights, property, or safety of Wily App, our users, or others.

4. Data Security

We apply industry-standard security measures appropriate to the sensitivity of the data we hold:

• All data in transit is encrypted using TLS 1.2 or higher.
• Data at rest is encrypted using AES-256. API credentials you provide are additionally stored via Supabase Vault with envelope encryption.
• Access to production data is restricted to authorised personnel on a need-to-know basis and is logged.
• Row-level security policies in the database ensure that each organisation can only access its own data.

No method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we maintain a responsible disclosure program and will notify affected users of a breach as required by applicable law.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Ask us to correct inaccurate or incomplete data.
• Deletion. Request that we delete your personal data, subject to legal retention obligations.
• Portability. Receive your data in a structured, machine-readable format.
• Objection. Object to processing based on legitimate interests or for direct marketing.
• Restriction. Request that we restrict processing while a dispute is resolved.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Cookies

We use cookies and similar technologies to operate the service and understand usage patterns. For a detailed breakdown of the cookies we set, how to manage them, and third-party cookies, please read our Cookie Policy.

7. Data Retention

We retain your account data for as long as your account is active. After account closure we delete or anonymise personal data within 90 days, unless a longer retention period is required by law (for example, financial transaction records) or is necessary to resolve a dispute. Aggregated, anonymised data may be retained indefinitely.

8. International Transfers

Wily App is based in the United States. If you access the service from outside the United States, your data will be transferred to and processed in the United States. Where required by law, we rely on approved transfer mechanisms such as Standard Contractual Clauses to ensure adequate protection.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or in-product notice. Your continued use of the service after any update constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions, requests, or complaints, please contact our privacy team at [email protected].