What we collect
We collect your name, email address, and the data you choose to connect - CSV files, API endpoints, and spreadsheet links. We do not sell your data to any third party, ever.
How we use it
To operate the service: authenticate your account, store and display your connected data, and send transactional emails (account verification, password reset). We use Plausible Analytics for aggregate usage statistics - no personal data is tracked by the analytics layer.
Data storage
Data is stored in PostgreSQL databases hosted on Railway in the EU. File uploads are stored on Cloudflare R2. Your API credentials and OAuth tokens are encrypted at rest using AES-256. Backups are retained for 30 days.
Your rights (GDPR)
You can delete your account at any time from the Account settings page. This schedules permanent deletion of all your data within 14 days. To request immediate deletion or a data export, email privacy@whizard.app. You may also request access to a copy of all data we hold on you at any time.
Subprocessors
We share data only with the following subprocessors, each bound by a data processing agreement:
- RailwayDatabase and compute hosting
- Cloudflare R2File and asset storage
- ResendTransactional email delivery
- UpstashRedis caching layer
- PlausibleAggregate analytics (no personal data)