Privacy Policy

Introduction & Summary

This Privacy Policy describes how Wisewk Inc. (“we,” “us,” or “our”) collects, uses, shares, and protects your personal information.

• Information We Collect: account registration information, API usage data, payment information, device and security logs, and records of your communications with us.
• How We Use Information: to provide and improve the Services, process payments, maintain platform security, and comply with legal obligations.
• AI Model Training: API content is not used to train Wisewk proprietary models by default unless you explicitly opt in, and we do not provide your data to third parties for their model training purposes.
• Information Sharing: we share necessary information with service providers and Third-Party Model Providers to fulfill your requests, and disclose information when required by law. We do not sell personal information.
• Your Rights: you may access, correct, export, restrict, or delete personal information, subject to applicable law and verification requirements.
• Cross-Border Transfers: your data may be processed in the United States or other jurisdictions, as described in Section 14.

1. Key Definitions

• “Personal Information” means information relating to an identified or identifiable natural person, excluding anonymized information.
• “Sensitive Personal Information” includes information that may readily lead to infringement of dignity or endanger personal or property safety if disclosed or misused, such as biometric data, financial account data, and precise geolocation.
• “Processing” means collection, storage, use, transmission, disclosure, deletion, and other operations performed on personal information.
• “Controller” means the entity determining the purposes and means of processing; under this Policy, the controller is Wisewk Inc.
• “Processor” means an entity processing personal information on behalf of the controller.
• “Third-Party Model Provider” means an external AI model service provider that receives and processes requests routed through Wisewk, currently Microsoft Azure.
• “API Key” means a unique credential issued by Wisewk for authentication and API access.
• “Services” means all products and services provided by Wisewk Inc. through the website, console, API, documentation, billing pages, and related platforms.
• “Cookie” means a small data file stored on your device to maintain preferences, session state, or website functionality.
• “Anonymization” means technical processing that prevents information from identifying a natural person and prevents restoration to an identifiable state.
• “De-identification” means technical processing that prevents identification without additional information, though re-identification may still become possible if combined with other data.

2. Scope & Data Controller

This Privacy Policy is provided by Wisewk Inc., registered in Sheridan, WY 82801, United States. Unless otherwise specified, it applies to the website, console, API, billing and settlement processes, developer portal, and related services operated by Wisewk Inc.

Wisewk operates in a model-routing manner: we receive user requests and forward them to Third-Party Model Providers or Wisewk proprietary infrastructure based on user selection, routing policies, availability, and system conditions, then return the resulting output.

When you visit the website, register, purchase a plan, create an API Key, send requests, receive outputs, contact support, or otherwise interact with us, we may collect, use, store, transmit, or disclose personal information and related business data about you.

We may update this Privacy Policy from time to time. If an update materially affects your rights or the way we process data, we will provide reasonable advance notice through website announcements, in-product notices, or email.

Wisewk Inc. is the data controller of your personal information under this Policy.

3. Legal Bases for Processing

• Performance of Contract: processing necessary to provide subscribed Services, including account management, API routing, payment settlement, and support.
• Legitimate Interests: processing for service security, fraud and abuse prevention, service quality improvement, and internal analytics, provided such interests do not override your rights.
• Legal Obligation: processing necessary to comply with applicable laws, regulations, court orders, regulatory requirements, and lawful law-enforcement requests.
• Consent: in certain circumstances, such as model training opt-in or marketing communications, processing may rely on your explicit consent. You may withdraw consent at any time, without affecting prior lawful processing.
• For EEA users, Wisewk determines the applicable legal basis for each processing activity pursuant to Article 6 of the GDPR.

4. Categories of Information We Collect

We collect information you provide directly, information generated automatically through use of the Services, and information returned by third parties such as payment processors, cloud vendors, identity providers, model providers, and security vendors.

• Account and Identity Information: name, email, encrypted passwords or authentication identifiers, profile picture, language preferences, account status, registration date, login history, and anti-abuse verification data.
• Subscription and Payment Information: plan selection, billing cycle, order status, payment date, currency, tax information, invoice details, billing address, refund status, and payment processor transaction identifiers. We generally do not retain full card numbers or security codes.
• API and Platform Usage Data: API Key names, key creation and deactivation dates, call timestamps, request frequency, target models, routing results, token consumption, action usage, latency, error codes, rate-limiting records, and abuse-prevention flags.
• Request and Response Data: prompts, contextual messages, uploaded text or structured parameters, tool-call parameters, outputs returned by providers, routing and execution metadata, and technical records related to file operations, GUI operations, memory organization, and similar actions.
• Device, Network, and Security Logs: IP address, browser type, operating system, device identifiers, request headers, pages visited, clicks, time zone, referral source, anomalous login records, security alerts, and risk-control logs.
• Communication and Support Data: emails, support tickets, feedback, business consultation records, compliance inquiries, and records generated while responding.

5. Features Not Currently Offered

As of the date of this Policy, Wisewk does not offer prompt logging, private storage, team sharing, or user-side analytics features.

That does not mean request-related technical records do not exist. To ensure service delivery, settlement, capacity management, security auditing, abuse detection, troubleshooting, and legal compliance, we may process request metadata, error logs, security logs, and short-lived technical caches within a necessary, limited, and proportionate scope.

6. How We Use Your Information

• To provide, maintain, operate, and improve the website, API, authentication systems, billing systems, routing layer, and console functionality.
• To verify identity; create and manage accounts; issue, display, revoke, and limit API Keys and related permissions.
• To process subscriptions, renewals, settlements, refunds, tax obligations, reconciliation, risk control, and anti-fraud reviews.
• To route requests to Third-Party Model Providers or Wisewk systems and return results.
• To monitor availability, error rates, latency, throughput, and capacity; diagnose faults; and maintain quality and stability.
• To detect abnormal access, quota circumvention, malicious scripts, account sharing, payment fraud, content abuse, unlawful use, and Terms violations.
• To respond to inquiries and send billing notices, service notices, security alerts, legal notices, and other important account-related communications.
• To comply with law, regulation, audit, tax, accounting, dispute-prevention, and legitimate-interest requirements.
• Subject to your explicit opt-in, to use anonymized or de-identified data to improve the performance and security of Wisewk proprietary models. API Input and Output are not used for training by default.

7. Model Routing, Third-Party Processing & Downstream Risks

A core function of Wisewk is forwarding your requests to Third-Party Model Providers. We may transmit request content, technical parameters, necessary account identifiers, routing information, geographic information, context window content, and security or risk-control signals to relevant providers, cloud vendors, transmission vendors, or caching vendors.

Third-Party Model Providers may apply different retention, logging, moderation, training, deployment, and compliance practices. While we try to communicate key differences, downstream processing remains governed by each provider’s own implementation, contracts, and privacy policy.

If your requests contain trade secrets, sensitive personal information, confidentiality-restricted data, export-controlled data, regulated data, or other high-risk information, you must evaluate whether the request is appropriate for the relevant provider.

In appropriate cases, we enter into data processing arrangements with principal service providers. Current main categories include AI inference providers (currently Microsoft Azure), cloud infrastructure providers, payment providers, and security or anti-fraud providers.

8. Cookies, Local Storage & Technical Records

We may use cookies, local storage, session identifiers, and similar technologies to maintain login status, remember language settings, protect session security, prevent repeated verification, detect anomalous access, and improve website stability.

Because the current product does not provide an independent user analytics dashboard, we do not offer complex user profiling for product analytics purposes; however, we may retain basic website access logs, authentication logs, and error logs to ensure the proper functioning of the Services.

If you block or delete essential cookies, login status, language selection, or console sessions may be affected.

The technologies we use generally fall into the following categories: Strictly Necessary Cookies, Functional Cookies, and Analytics Cookies that should only be enabled after consent where required by law. We currently do not use advertising or marketing cookies.

9. How We Share or Disclose Information

• With payment processors, identity verification providers, cloud hosting providers, database service providers, email delivery providers, and security vendors acting on our behalf.
• With Third-Party Model Providers to fulfill inference requests, tool calls, and generation tasks initiated through Wisewk.
• Where required by law, regulation, law enforcement, courts, subpoenas, government investigations, audit obligations, or the reasonable exercise of legal rights.
• In connection with financing, mergers, reorganizations, asset sales, changes of control, and similar corporate transactions, subject to lawful continued handling by the recipient.
• Where you have provided explicit consent, authorization, or instruction.
• After anonymization, for analytics, research, or service improvement. Once data is anonymized, it is no longer personal information.
• We do not sell your personal information, and for California residents we do not sell or share personal information for cross-context behavioral advertising purposes.

10. Data Retention & Deletion

We retain data for as long as necessary to fulfill the purposes described in this Policy, including providing the Services, maintaining accounts, calculating charges, troubleshooting, detecting abuse, performing contractual obligations, and complying with legal obligations.

Accounting and transaction records generally require longer retention to satisfy tax, audit, and accounting obligations; security logs may be retained for fraud prevention, abuse investigations, and incident response; and certain request-related caches may exist briefly for transmission, retries, error recovery, or risk-control verification.

You may request deletion of your account or certain personal data. We will process such requests to the extent permitted by law and technically feasible, but some records may remain due to legal, tax, accounting, security, dispute-resolution, or anti-fraud requirements.

• Account Information: generally retained during the life of the account and for up to 30 days after closure, unless law requires otherwise.
• Transaction and Accounting Records: generally retained for 7 years after completion of the transaction.
• API Request Metadata: such as timestamps, target models, and token usage, generally retained for up to 90 days.
• Security and Anti-Abuse Logs: generally retained for up to 1 year.
• Temporary Technical Caches: generally cleared automatically within hours to days.

11. Data Security

We employ reasonable administrative, technical, and organizational measures to protect information, including access controls, encryption in transit, secrets management, least privilege, audit logging, authentication, and environment isolation.

No internet transmission, cloud system, third-party model platform, or electronic storage system can guarantee absolute security. You are responsible for safeguarding your passwords, API Keys, access tokens, and internal credentials.

If you suspect account compromise, credential leakage, abnormal payment information, request interception, or another security incident, contact us immediately at wisewk.com@gmail.com.

If a personal-information security incident occurs, we will provide notices required by applicable law. Where GDPR applies, we will notify the relevant supervisory authority within 72 hours where required.

12. Minors

Wisewk Services are available only to individuals at least 18 years of age, or authorized representatives of entities with the capacity to enter binding agreements. Individuals under 18 may not register, purchase, subscribe, or use the Services.

If we discover that a person under 18 created an account or submitted personal information in violation of this Policy, we may suspend the account and delete the information, except where retention is required by law.

For U.S. users, we comply with COPPA and do not knowingly collect personal information from children under 13. If discovered, such information will be deleted promptly.

13. Your Rights & Choices

• You may generally view and modify certain account, subscription, and billing information through account settings.
• You may request access, correction, deletion, export, or restriction of processing of your personal information, subject to applicable law and verification.
• You may manage cookies through your browser, control certain notification preferences through account settings, and unsubscribe from marketing communications by email.
• We may refuse deletion in whole or in part where retention is required by law or reasonably necessary for fraud prevention, dispute resolution, or contract performance.

13.1 Additional Rights for EEA, UK, and Swiss Residents (GDPR)

• Right to Object to processing based on legitimate interests, including direct marketing.
• Right to Data Portability for information you provided in a structured, commonly used, machine-readable format.
• Right to Restriction of Processing in certain circumstances.
• Right Not to Be Subject to purely automated decisions producing legal or similarly significant effects.
• Right to Lodge a Complaint with the relevant supervisory authority.
• We generally respond within one month, subject to lawful extensions for complexity or volume.

13.2 Additional Rights for California Residents (CCPA/CPRA)

• Right to Know categories and specific pieces of personal information collected in the preceding 12 months, the sources, the purposes, and the categories of third parties involved.
• Right to Delete personal information, subject to legal exceptions.
• Right to Correct inaccurate personal information.
• Right to Opt Out of sale or sharing. Wisewk currently does not sell personal information and does not share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination for exercising privacy rights.
• Requests may be submitted by you or your authorized agent by emailing wisewk.com@gmail.com, subject to verification.

13.3 Other U.S. State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other jurisdictions with enacted state privacy laws may have similar rights to access, deletion, correction, and opt-out. The specific scope depends on the applicable law.

13.4 How to Exercise Your Rights & Response Times

You may exercise rights through self-service account settings where available or by emailing wisewk.com@gmail.com. We generally respond within 30 days, subject to lawful extensions, and may need to verify your identity before processing the request.

14. International Data Transfers

Wisewk Inc. is registered in the United States. Because we may use infrastructure, payment services, email services, security services, and model providers located in the United States or other jurisdictions, your data may be transferred to, accessed from, processed in, or stored outside your place of residence.

By using the Services, you acknowledge that such cross-border transfers may occur. We seek to mitigate associated risks through contractual arrangements, technical safeguards, and access controls.

For personal data transferred from the EEA, UK, or Switzerland, we may rely on Standard Contractual Clauses, adequacy decisions where applicable, and other lawful transfer mechanisms recognized under applicable law.

15. Automated Decision-Making

We do not currently use personal information to make purely automated decisions, including profiling, that produce legal or similarly significant effects on you.

Automated processing used in the Services, such as routing, abuse detection, and risk scoring, is intended to provide and protect normal service operations rather than to make legal-effect decisions. If this changes in the future, we will provide advance notice and applicable safeguards.

16. Third-Party Links & Services

The Services may contain links to third-party websites, apps, or services, including Third-Party Model Provider services accessed through routing. These third parties have their own independent privacy policies and processing practices, and we are not responsible for them.

17. Do Not Track Signals

Some browsers offer Do Not Track signals. Because there is currently no industry-wide standard for processing such signals, our website does not currently respond to browser DNT signals.

18. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in processing practices, service features, or applicable law. If a revision materially affects your rights or the way we process personal information, we will notify you before the effective date through a prominent website notice, in-product notice, or email.

For material changes, we generally aim to provide at least 3 days of advance notice before the effective date. Continued use of the Services after the revision takes effect constitutes acceptance of the revised Policy.

19. Contact Us

If you have questions about this Privacy Policy, our data processing practices, account deletion, data access requests, or security incidents, contact Wisewk Inc. at wisewk.com@gmail.com, Sheridan, WY 82801, United States.

If you believe our processing infringes your rights, you may also file a complaint with the competent data protection supervisory authority in your jurisdiction.

20. Policy Version History

• Version 1.0 — Initial version published.