Privacy Policy

WiseFirm24 (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at wisefirm24.com and any associated services (collectively, the “Service”). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

For questions about this policy, contact us at e.kudarauskas@gmail.com.

1. Information We Collect

We collect information you provide directly to us and information generated through your use of the Service.

1.1 Information You Provide

• Account data: name, email address, password (hashed), and organization details when you register or join an organization.
• Profile data: job title, role, avatar, and any other information you choose to add to your profile.
• Content: knowledge-base documents, assessment questions and answers, project materials, and any other content you upload or create.
• Communications: messages you send to us, including support requests and feedback.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, actions taken, time and duration of visits, and navigation paths.
• Device & log data: IP address, browser type and version, operating system, referrer URL, and crash reports.
• Cookies & similar technologies: session cookies required for authentication and preference cookies for language and UI settings. We do not use advertising or tracking cookies.

1.3 Information From Third Parties

• Authentication providers: if you sign in via a third-party OAuth provider, we receive your name, email, and profile picture as permitted by that provider.
• AI service providers: when you interact with AI features (e.g. assessments, chatbot, voice assistant), prompts and responses may be processed by third-party AI APIs (e.g. OpenAI, ElevenLabs) under their respective data policies.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Create and manage your account and organization.
• Deliver AI-powered assessments, knowledge management, and learning features.
• Personalize your experience and remember your preferences.
• Send transactional emails (account confirmation, password reset, invitations).
• Respond to your comments, questions, and support requests.
• Monitor and analyze usage patterns to improve the Service.
• Detect, investigate, and prevent fraudulent transactions and other illegal activity.
• Comply with legal obligations.

We do not sell, rent, or lease your personal data to third parties. We do not use your content to train AI models without your explicit consent.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, we rely on the following legal bases:

• Contract performance: processing necessary to provide the Service you've subscribed to.
• Legitimate interests: improving and securing the Service, preventing fraud.
• Legal obligation: compliance with applicable law.
• Consent: for optional communications such as newsletters, where required by law.

4. Sharing of Information

We may share your information with:

• Service providers: trusted vendors who help us operate the Service (e.g. Supabase for database and authentication, Vercel for hosting, OpenAI for AI features, ElevenLabs for voice AI, Stripe for billing). These providers are contractually obligated to protect your data and may only use it to deliver services on our behalf.
• Your organization: your employer or organization administrator can access your account details, assessment results, and activity within the organization's workspace.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before this occurs.
• Legal requirements: if required by law, court order, or governmental authority, or to protect the rights, property, or safety of WiseFirm24, its users, or the public.

5. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service. If you close your account, we will delete or anonymize your personal data within 90 days, unless we are required by law to retain it longer. Content uploaded by your organization may be retained according to the organization administrator's settings.

6. Security

We implement industry-standard security measures including TLS encryption in transit, hashed passwords, row-level security in our database, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

If you believe your account has been compromised, please contact us immediately at e.kudarauskas@gmail.com.

7. Cookies

We use strictly necessary cookies to keep you logged in and maintain session state. We may also set preference cookies to remember your language selection. We do not use advertising, analytics, or cross-site tracking cookies. You can disable cookies in your browser settings, but this may affect the functionality of the Service.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data (“right to be forgotten”).
• Restrict or object to certain processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, please email e.kudarauskas@gmail.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. International Transfers

Your information may be processed in countries other than your own, including the United States and the European Union. Where we transfer data internationally, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses for transfers from the EEA).

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will notify you by email or via a prominent notice on the Service. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out: