Your data

Privacy Policy

What we collect, why we hold it, who else touches it, and how to get it back or have it deleted. Your content stays yours.

Effective date: 2026-07-1714 sections
1

Scope of This Policy

This Privacy Policy explains how WCOLO ("we", "us") collects, uses, shares and protects information when you use our websites, applications, APIs and related services (the "Platform"). It applies to all users worldwide. By using the Platform you agree to the practices described here.

2

Information We Collect

We collect three kinds of information:

  • Information you provide — account details (email, name, password or third-party login), profile and organization settings, the content you create or upload (briefs, drafts, generated posts, images, audio, video, brand knowledge), provider credentials you configure, payment information handled by our payment processor, and messages you send us through support or contact forms.
  • Information collected automatically — log data (IP address, browser and device type, pages visited, timestamps), product usage events (features used, tasks created, credits consumed), and approximate region derived from your IP for language and compliance purposes.
  • Information from third parties — when you connect a publishing channel or sign in through a third-party identity provider, we receive the account identifiers and tokens needed to operate that connection, plus post-performance metrics the platform makes available.
3

How We Use Your Information

We use information to:

  • provide and operate the Platform — generate content you request, store your assets, schedule and publish to channels you connect, and meter credits;
  • maintain safety and integrity — authenticate users, enforce role-based access, detect abuse and fraud, and keep audit records of privileged actions;
  • improve the Platform — measure aggregate feature usage, diagnose failures and improve reliability;
  • communicate with you — service notifications, review reminders, billing receipts, and (only with your consent) product news;
  • comply with legal obligations.
4

AI Processing

When you run a generation, the relevant inputs (your brief, attached brand knowledge, review feedback, selected assets) are transmitted to the AI providers configured for your task, which process them solely to return the result. We do not sell your data and we do not use your private content to train foundation models. Provider selection and credentials are visible to your organization's administrators in the provider registry.

5

How We Share Information

We do not sell your personal information. We share it only:

  • with service providers that process data on our behalf — AI model providers, object storage, payment processing, email delivery and analytics — each bound to use it only to provide their service;
  • with publishing platforms you explicitly connect, when you approve content for publication there;
  • within your organization, according to the roles and workspace permissions its owners and admins configure;
  • for legal reasons — when required by applicable law, legal process, or to protect the rights, safety and integrity of users and the Platform;
  • in a corporate transaction (merger, acquisition, asset sale), in which case this policy continues to apply until amended with notice.
6

Data Storage and International Transfers

Content and media are stored in object storage under your organization's tenant boundary. Because our infrastructure and providers may operate in multiple countries, your information may be transferred to and processed in countries other than your own; where required we use appropriate safeguards such as standard contractual clauses for such transfers.

7

Data Retention

We keep your content until you delete it or your account is closed, after which it is removed from production systems within a reasonable period, subject to backup cycles. Operational logs, credit ledgers and audit records are retained for the period needed for security, billing integrity and legal compliance, then deleted or anonymized.

8

Your Rights and Choices

Depending on your region, you may have rights to access, correct, export, restrict, object to processing of, or delete your personal information. Within the product you can:

  • export or delete content, assets and packages you own;
  • revoke API keys, provider connections and publishing channels at any time;
  • manage member access through organization and workspace roles;
  • request account deletion or exercise any of the rights above via the Contact us page — we respond within the timelines required by applicable law.
9

Security

Provider secrets and API keys are stored server-side (hashed or encrypted) and never returned to the browser in full. Privileged admin and support actions are role-gated and produce immutable audit records. No system is perfectly secure; please report suspected vulnerabilities via Contact us and we will investigate promptly.

10

Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to operate the Platform — for example to keep you signed in, remember your preferences and understand how the product is used. Where required by law, non-essential cookies are used only with your consent, and you can manage or withdraw your choices at any time through the consent controls or your browser settings.

11

Minimum Age

Use of the Platform is subject to any minimum age required by the laws of your jurisdiction. Where such a requirement applies and we learn that we have collected personal information from someone below it, we will delete that information. Parents or guardians who believe this has happened may contact us.

12

Third-Party Platforms and Services

When content is published to a third-party platform, that platform's own terms and privacy policy govern the published content and any data the platform collects. Links to third-party sites are provided for convenience; we are not responsible for their practices.

13

Changes to This Policy

We will update this page when our practices change, revise the effective date below, and — for material changes — provide reasonable advance notice in the product or by email before the change takes effect.

14

Contact Us

For privacy questions, data requests or complaints, use the Contact us page in the product or the contact link in the footer. If you are unsatisfied with our response, you may also lodge a complaint with your local data protection authority.