PRIVACY

Privacy Policy

Last updated: 11 October 2026

This policy describes how Wise & Rise collects, uses, shares and protects information you provide through our website, chat, WhatsApp, email and other channels.

1. Information we collect

Directly from you

• Contact forms & chat: name, phone number, email, company, website, requirements, conversation history.
• WhatsApp: messages you send to our WhatsApp Business number, including any media or location you choose to share.
• Email: the content of emails you send to our addresses (sales@, hr@, etc.).

Automatically

• Web server logs: IP address, browser type, operating system, referring page, pages visited, timestamps.
• Cookies & local storage: we use only essential cookies for session authentication (Supabase Auth) and to remember your chat state. We do not use third-party analytics cookies (e.g. Google Analytics, Meta Pixel) on the website as of the last update date.

2. How we use your information

• To reply to your enquiry and deliver the execution-plan conversation you requested.
• To send a customised proposal, service details or follow-up communication.
• To manage leads and client relationships in our CRM (Supabase).
• To improve our website, chatbot and service offerings (aggregated, anonymised).
• To detect and prevent fraud, abuse or security incidents.
• To comply with legal obligations and respond to lawful requests.

3. Legal bases (where applicable)

• Legitimate interest: responding to business enquiries, improving services, security.
• Contract performance: where you engage us for services.
• Consent: where you opt in to marketing communications.
• Legal obligation: where required by law.

4. Sharing with third parties

We do not sell or rent your personal information. We share data only with:

• Supabase: hosted database and auth (our data processor).
• Meta (WhatsApp Business API): message delivery when you use WhatsApp.
• OpenRouter / DeepSeek: AI chat responses (conversation text only).
• Resend / SMTP provider: transactional email delivery.
• Legal authorities: when required by law or valid legal process.

All processors are bound by written data-processing agreements.

5. Cookies and tracking technologies

As of the last update date, the website uses only essential cookies set by Supabase for authentication (session management) and by our chat widget to maintain conversation state. We do not currently deploy Google Analytics, Meta Pixel, or other third-party tracking scripts. If this changes, we will update this policy and, where required, obtain your consent.

6. Data retention

• Lead and enquiry records: retained while the relationship is active and for up to 24 months after last interaction, unless you request deletion.
• Chat transcripts: stored with the associated lead record.
• Server access logs: rotated per hosting provider policy (typically 30–90 days).
• Marketing opt-in records: retained until you withdraw consent.

7. Security

• HTTPS everywhere; cookies are HttpOnly, Secure, SameSite.
• Supabase Row Level Security restricts database access to authorised roles.
• Admin and sales dashboards require authenticated session with verified role.
• API write endpoints enforce session + role checks before any privileged operation.

8. Your privacy rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure (deletion).
• Restrict or object to processing.
• Data portability.
• Withdraw consent (where processing is based on consent).
• Lodge a complaint with a supervisory authority.

9. How to contact us

To exercise any right or ask a privacy question, contact us:

Please include "Privacy Request" in the subject line and describe your request. We will acknowledge receipt and respond in accordance with applicable law.

10. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top will be revised. Please review periodically.