Privacy Policy

Last Updated: October 12, 2026

This Privacy Policy describes how YOTAKO S.A. ("we," "us," or "our") collects, uses, and protects your personal data when you use WPMaven ("the Service"). This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

YOTAKO S.A.

4 rue Samuel Beckett, Luxmill building

L-4371 Belvaux, Sanem

Grand-Duchy of Luxembourg

R.C.S. n°: B 205443

TVA n°: LU 29326106

Email: privacy@wpmaven.ai

Data Protection Officer: dpo@wpmaven.ai

2. Personal Data We Collect

2.1 Information You Provide Directly

Account Information

Usage Data

Your Site's Customers and Figures

When you connect a WordPress site, our plugin starts copying some of its data to your WPMaven account. Twice a day, and as new orders and signups come in, it copies the names and email addresses of your store's customers and of the people who sign up through forms we made for you, and whether and when each of them agreed to get your emails. Every hour it also copies the day's totals: sales, orders, refunds, top products, stock, bookings and the number of form submissions. Apart from a name and an email address, these copies never include what people typed into your forms, and never anyone's phone number or address. We use the totals for your reports, alerts and dashboard, and our AI provider reads them to write your reports. We use the contacts to count the contacts your plan includes and, when you send an email campaign, to send it only to the people who agreed to get it. When your team works on your site, it can also read the site's own records, such as orders and form entries, and our AI provider processes what it reads. Disconnecting a site stops the copying. Deleting a site deletes its totals, but its contacts stay with your account until you delete the account, and deleting your account deletes everything we copied.

Getting Notified When We Open

Until WPMaven opens on Monday, October 12, 2026, the buttons on this website that lead into WPMaven open a "Launching very soon" box, where you can leave your email address to hear when we open. When you do, we keep your email address, the words on the button you clicked and where it led, the page you were on, the business idea you typed on our home page, if any, and the time. We use them, with your consent, only to email you when WPMaven opens and once more before the launch-week offer ends, and to keep your idea for launch day. They go to our team's mailbox and to a log on our web server. If you accept analytics cookies, we also count these clicks and signups by the words on the button, never with your email address (see Section 7.3). We delete them within three months of the launch, or sooner if you ask: reply to our email or write to privacy@wpmaven.ai.

2.2 Information Collected Automatically

Technical Data

Analytics Data

The $1 First Week

The $1 first week of a monthly plan is offered once per customer every 12 months. To apply that limit, when you pay for a $1 first week we store, linked to your account: a scrambled one-way form of your email address (a SHA-256 hash, not the address itself), the random identifier WPMaven keeps in your browser's storage, and the fingerprint our payment processor gives your card or bank account, which identifies it without revealing its number. During that week we also store a scrambled one-way form of the ID of each social account you connect (X, Facebook Page, Instagram, LinkedIn, TikTok, YouTube, Pinterest and Google Business Profile) and of your own site's domain, never the ID or the domain itself.

If your email address or browser was already used for a $1 first week in the last 12 months, the checkout starts at the regular monthly price. If your card, bank account, a connected social account or your domain was, the $1 week ends, the regular monthly price is charged at once, and our team is alerted to review it. During the week, a social account or site already used that way can only be connected once you start your month. We also use the browser identifier to turn down a referral made from the same browser the referrer used for their own $1 first week. We do this based on our legitimate interest in preventing abuse (see Section 3).

A daily job deletes each of these records once it is more than 12 months old. Disconnecting an account or deleting your WPMaven account does not delete them sooner, because the limit has to hold for the full 12 months. Our payment processor, Stripe, also keeps the one-way form of your email address and the browser identifier with its record of each checkout, under its own retention rules.

Building a Site Before You Sign Up

When you start building a site before creating an account, the first step runs an automated security check, provided by a security service that processes this data on our behalf. It processes technical data, such as your IP address and signals from your browser, to tell people apart from automated scripts, based on our legitimate interest in preventing abuse (see Section 3). If we are too busy to build your site right away and you leave your email address, we use it only to build your site and send you the link, and we keep your IP address and a browser identifier with it only to apply our build limits to that build. We delete all three once the link is sent, or within 30 days if we could not build the site or send the link. Our record of the email we sent says which request it was for, not your address. So that we never email the same address twice, we keep a scrambled one-way form of it (not the address itself) for 30 days after the link is sent, then delete it.

2.3 Information from Third Parties

2.4 Information from Social Accounts You Connect

WPMaven only ever connects social accounts you already own, and only after you authorize it yourself. We never create accounts, Pages or profiles on your behalf.

Facebook Pages. If you connect a Facebook Page, we receive from Meta: the list of Pages you manage with their names and IDs, an access token for the Page you select, that Page's published posts, the comments people leave on them, the Page's and posts' engagement statistics, and the Messenger conversations sent to that Page including message text and the sender's Meta-provided name and ID.

Instagram. If you connect an Instagram professional account, we receive: the account's ID and username, an access token, the account's own media and captions, the comments on that media, the account's and media's insights, and the direct messages sent to the account including message text and the sender's Meta-provided username and ID.

Pinterest. If you connect Pinterest, we receive your account name, your boards, the pins we create for you, and their analytics (impressions, pin clicks, outbound clicks and saves).

Google (YouTube and Business Profile). If you connect YouTube we receive your channel identity and can upload videos you approve. For YouTube, Section 2.5 sets out exactly what we read, keep, use, share and delete, and it takes the place of the general paragraphs below. If you connect a Google Business Profile we receive the list of accounts and locations you manage and can create posts on the location you select. WPMaven's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except with your explicit permission, for security purposes, to comply with applicable law, or where the data is aggregated and anonymised.

LinkedIn and X. If you connect these, we receive your account identity and publish only the posts you approve.

TikTok. If you connect TikTok, you sign in with your own TikTok account and we receive your TikTok account ID (the open_id TikTok issues to WPMaven), your display name, and an access token and a refresh token. Before each post we ask TikTok what your account allows: your username and nickname, the audiences you can choose, whether comments, Duet or Stitch are turned off, and the longest video you can post. That answer also includes a link to your profile photo, which we do not use or keep. We also read your account totals (followers, likes and number of videos) and, for your recent public videos, each video's ID, title, description, posting date, and view, like, comment and share counts. We post to TikTok only the videos you approve on the Post to TikTok screen, with the caption shown there and the settings you chose there, including who can see the post. Wherever comments, Duet or Stitch are turned off on your TikTok account, they stay off on the post. We read the numbers above to show you each week how your videos are doing and to plan the next ones. We store your account ID, your display name, the tokens (encrypted at rest and refreshed when they expire while you stay connected), a record of each post (its caption, video link and settings, the publish ID TikTok returns, and whether the upload went through), and the summaries your team writes from your numbers, which may quote them. To disconnect, press Disconnect next to TikTok under Settings, Channels in WPMaven: we delete the stored tokens immediately and stop all further access. You can also remove WPMaven's access in the TikTok app, under Settings and privacy, where TikTok lists the apps and services you have allowed.

Your published posts. For each post WPMaven publishes for you on a network you connected, we keep a record: the network, the ID the network gave the post, its link, the beginning of the text you approved, and when it went out. The Analytics page in WPMaven lists these records so you can open each post where it was published. We keep them while your account exists and delete them with it. Records of TikTok posts are also deleted when you disconnect TikTok, and records of YouTube videos follow the limits in Section 2.5.

TikTok numbers over time. If you connect TikTok and turn on recording for TikTok on the Analytics page in WPMaven, we read, on a schedule and always with your own authorization, the numbers TikTok shares for your own account (followers, likes and number of public videos) and, for each public video WPMaven sent to TikTok for you, its view, like, comment and share counts. We read them about 1, 3, 6, 12 and 24 hours after a video is sent, then once a day for four weeks, then once a week, and we keep each reading with the time it was taken, so you can see how your account and each video change over time. The first point of each video's chart, 0 when the video was sent, is recorded by WPMaven, not read from TikTok. WPMaven shows these numbers apart from other networks' numbers, and only you and the people you invite to your team can see them. We keep them while TikTok stays connected. Stopping recording deletes them at once, and we delete them within 7 days of disconnecting TikTok, of TikTok ending WPMaven's access, or of deleting your account. When you ask your team how your account or videos are doing, it reads your latest numbers from TikTok at that moment, and our AI provider processes them to answer you. This happens whether or not recording is on. Our AI provider may use them only to provide WPMaven to you. We never sell TikTok data or use it for advertising.

What we do with it. We show it to you inside WPMaven, we use it to draft posts and replies for your approval, and we summarise it in the weekly report we send you. We publish or reply only to what you have explicitly approved. We do not sell it, we do not use it for advertising, and we do not combine one customer's social data with another's.

How long we keep it, and how to delete it. Access and refresh tokens are encrypted at rest. Disconnecting a channel in WPMaven deletes the stored tokens for that account immediately and stops all further access. Posts, comments, messages and statistics we cached to display are deleted with your account, or on request at any time to privacy@wpmaven.ai. YouTube data has shorter limits, set out in Section 2.5. See Section 9 for your full rights, including erasure.

Revoking access. You can review and revoke WPMaven's access at any time from your Facebook settings under Business Integrations, your Instagram settings under Apps and Websites, or your Google Account under Third-party apps with account access. Data received from Meta is additionally handled in accordance with the Meta Platform Terms and Developer Policies.

2.5 YouTube

WPMaven uses YouTube API Services. If you connect YouTube, you sign in with your own Google account and allow WPMaven two things: to upload videos to your channel, and to view your channel. By connecting YouTube you agree to be bound by the YouTube Terms of Service. Google's own use of your data is described in the Google Privacy Policy.

What we access. Your channel's ID and title, and its public statistics: total views, number of videos and, unless you hide it, the approximate number of subscribers. For your channel's most recent uploads (up to 10 at a time), we read each video's ID, title, publishing date and privacy setting. For those that are public or unlisted, which can include videos WPMaven uploaded for you, we also read their view, like and comment counts. YouTube's answers also include other details, such as descriptions and thumbnails, which we do not use or keep. We do not read the comments on your videos, who your subscribers are, or your watch history.

If you turn on recording for YouTube on the Analytics page in WPMaven, we also read, on a schedule and always with your own authorization: for each video WPMaven uploaded for you, its title, its privacy setting, and its view, like and comment counts; and for your channel, its total views, its number of public videos and, unless you hide it, its approximate number of subscribers. We read them about 1, 3, 6, 12 and 24 hours after an upload, then once a day for four weeks, then once a week.

What we upload. We upload only the videos you approved, each with the visibility you chose for it: public, unlisted or private. Each one is marked as not made for kids. Its title is the first line of the text you approved (up to 100 characters), and its description is that text as you approved it (up to 4,900 characters). YouTube then tells us the video's ID and the privacy setting it gave the video. If a video is made for kids, go to YouTube on a computer right away and mark it as made for kids.

What we store. The access and refresh tokens Google issues to WPMaven, encrypted at rest; your channel's ID and title; and, for each video we uploaded for you, its ID, its link and the privacy setting YouTube gave it. If you turn on recording, we also keep each reading with the time it was taken, so you can see how your channel and each video change over time, and we keep each uploaded video's title and privacy setting as YouTube last returned them. The first point of each video's chart, 0 at the time of upload, is recorded by WPMaven, not read from YouTube. Without recording, we do not keep the statistics or the video titles we read from YouTube: your team reads them fresh each time it needs them. The reply your team writes each time it reads your channel can quote them, so we treat that reply, and a summary of that piece of work that mentions YouTube, as YouTube data too. Your team's other messages, the short titles it gives your conversations, and the running summary it keeps of each long conversation so it can remember it, can also repeat your YouTube results in its own words. How long each of these stays is set out below.

How we use and share it. We use it to upload the videos you approve, to tell you in WPMaven how your channel and videos are doing, and to plan your next videos. The Analytics page in WPMaven shows how your channel and each video are doing. It shows YouTube's numbers apart from other networks' numbers and never adds them to another network's, and only you and the people you invite to your team can see them there. When you ask your team how your channel or videos are doing, it reads your latest numbers from YouTube at that moment, and our AI provider processes them to answer you. This happens whether or not recording is on. We never sell YouTube data, never use it for advertising, and never use it to train AI models. We share it only with the service providers that host and run WPMaven for us, listed in Section 4.1: our cloud host, and our AI provider, which reads the numbers and titles while your team works on your request. They may use it only to provide WPMaven to you. If you talk to your team on WhatsApp or get its updates by email, its messages to you can include your YouTube results. When you approve a post that also shares a video on your other networks, the video's YouTube link is posted there.

How long we keep it. We keep the tokens only while YouTube stays connected. Every day we check that Google still accepts them, and we refresh your channel's ID and title from YouTube. If that check keeps failing, we disconnect YouTube and delete its data before 30 days pass. If you turn on recording, we keep the recorded numbers and each uploaded video's ID, link, title and privacy setting while YouTube stays connected, and we check them with YouTube about once a week while your WPMaven plan is active. When a video no longer exists on YouTube, we delete its numbers and details, and we delete anything YouTube has not confirmed for 28 days. Without recording, we delete the ID, link and privacy setting of each video we uploaded for you within 30 days. Within 30 days, with or without recording, we remove YouTube links from what your team wrote, remove the reply it wrote each time it read your channel, and remove from its conversation summaries the lines that mention YouTube. Its other messages and the titles of your conversations stay in your WPMaven history until you delete your account.

Disconnecting and deleting. To disconnect, press Disconnect next to YouTube under Settings, Channels in WPMaven. We delete the stored tokens at once and revoke them at Google. Within 7 days we delete the YouTube data we stored, listed above, including the numbers recorded for the Analytics page, remove the reply your team wrote each time it read your channel, and clear the summaries of those conversations. Google ends our access to the channel as a whole, so any other business of yours that uses the same channel is disconnected too. Deleting a business, or your WPMaven account, disconnects YouTube in the same way. You can also write to privacy@wpmaven.ai and we will do the same within 7 days of your request. Stopping recording on the Analytics page deletes the recorded numbers at once. Deleting the data WPMaven keeps does not affect anything stored on YouTube: your channel and your videos stay as they are. To delete videos or other data on YouTube, use YouTube itself, or another app you have authorized that can delete it.

Revoking access at Google. In addition to disconnecting in WPMaven, you can revoke WPMaven's access to your data at any time on Google's security settings page at https://security.google.com/settings/security/permissions. If you do, WPMaven can no longer reach your channel, and within 30 days we delete the YouTube data we stored, listed above, remove the reply your team wrote each time it read your channel, and clear the summaries of those conversations.

Ads, other services and your device. WPMaven shows no advertising, and no third party serves ads in it. Some screens load content from other services, such as the live preview of your website and a security check that tells people from bots; none of them receives your YouTube data. WPMaven stores and reads small pieces of information on your device, in cookies and your browser's storage, to keep you signed in, remember your settings, and measure how WPMaven is used with an analytics tool we run on our own server. Section 7 explains this in full.

Questions or complaints. Write to privacy@wpmaven.ai or to our Data Protection Officer at dpo@wpmaven.ai. Section 14 lists our postal address.

3. How We Use Your Personal Data

We process your personal data for the following purposes, based on the legal grounds indicated:

Purpose Legal Basis (GDPR)
Provide and maintain the Service Contract Performance (Art. 6(1)(b))
Process AI requests and generate responses Contract Performance (Art. 6(1)(b))
Process payments and billing Contract Performance (Art. 6(1)(b))
Send service updates and notifications Contract Performance (Art. 6(1)(b))
Provide customer support Contract Performance (Art. 6(1)(b))
Improve and optimize the Service Legitimate Interest (Art. 6(1)(f))
Detect and prevent fraud and abuse Legitimate Interest (Art. 6(1)(f))
Ensure security and prevent threats Legitimate Interest (Art. 6(1)(f))
Comply with legal obligations Legal Obligation (Art. 6(1)(c))
Send marketing communications Consent (Art. 6(1)(a))*
Remind existing customers on WhatsApp before an offer they can still claim ends Legitimate Interest (Art. 6(1)(f)); you can object at any time (see Section 9.6)

* You can withdraw consent at any time by clicking "unsubscribe" in emails or updating preferences.

If you have linked your WhatsApp number to your WPMaven account, we may send you there, as an existing customer and on the basis of our legitimate interest (Article 6(1)(f) GDPR), a reminder before a WPMaven offer you can still claim ends, such as Founder Annual, and you can stop these reminders at any time by tapping Stop offers under the message, replying STOP OFFERS or turning off Offers and reminders on WhatsApp in Settings, while your build updates and approvals keep coming.

4. Data Sharing and Disclosure

4.1 Service Providers

We share data with trusted third-party service providers who process data on our behalf:

Provider Purpose Data Shared Location
Google Cloud Platform Cloud hosting, database, and the servers your site runs on All service data EU (Belgium, europe-west1)
Stripe Payment processing Payment information Global (GDPR compliant)
Amazon SES Email delivery Email, name US (N. Virginia, us-east-1)
Security check provider Telling people apart from automated scripts when you build a site before signing up (see 2.2) IP address, browser signals May be outside the EU (see Section 5)
Google (Gemini) AI model processing Your description and prompts, as written, and the data from your connected channels that your team works with (see 2.4 and 2.5) US (DPA in place)

All service providers are contractually bound to:

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your data if required by law, court order, or governmental authority, or to:

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify you with:

5. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States.

5.1 Transfer Mechanisms

For transfers outside the EEA, we use:

5.2 AI Model Processing

Important: Prompts sent to our AI provider (Google Gemini) may be processed in the United States. We:

  • Have a Data Processing Agreement with our AI provider, under which it may not use your text to train its models
  • Rely on Standard Contractual Clauses for the transfer to the United States (Section 5.1)
  • Also send the images in your videos, with the instructions for each clip, to our video clip provider, which may process them in the United States and other countries, under Standard Contractual Clauses too (see Section 12.1)
  • Send what you write as you wrote it. We do not remove names, addresses, or phone numbers first, so anything you put in the box goes to the provider
  • Ask you not to include payment card details, passwords, or health information you would not want processed in the United States. We cannot filter these out for you

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

Data Type Retention Period
Account information Duration of account + 90 days after closure
Descriptions and prompts you write Kept while your account exists, and indefinitely if you never create one (see 6.1). Erased when your account is deleted, or sooner on request (see 9.3), keeping only the unlinked details listed in 6.1
Billing records 7 years (legal requirement)
Usage logs 12 months
YouTube data (see 2.5) Tokens while connected. Channel ID and title refreshed daily. With recording on (Analytics page), the recorded numbers and uploaded video IDs, links, titles and privacy settings kept while connected and checked with YouTube about weekly while your plan is active; a video's numbers and details deleted when it no longer exists on YouTube, and anything YouTube has not confirmed for 28 days deleted. Without recording, uploaded video IDs, links and privacy settings removed within 30 days. The reply your team wrote each time it read your channel, and summary lines that mention YouTube, removed within 30 days. Recorded numbers deleted within 7 days of stopping recording, disconnecting YouTube or deleting your account, or within 30 days of revoking access at Google. All of it removed, and conversation summaries cleared, within 7 days of disconnecting YouTube or 30 days of revoking access at Google. Other messages and conversation titles that repeat your YouTube results stay until you delete your account
Records of posts WPMaven published (Analytics) While your account exists. TikTok records deleted when you disconnect TikTok. YouTube records as set out in Section 2.5
TikTok numbers recorded over time (Analytics) While TikTok stays connected and recording is on. Deleted at once when you stop recording, and within 7 days of disconnecting TikTok, TikTok ending WPMaven's access, or deleting your account
Waiting-list email address, IP address and browser identifier (building a site before you sign up, see 2.2) Deleted once the link is sent, or within 30 days if we could not build the site or send the link. A scrambled one-way form of the address kept for 30 days after the link is sent, so we never email it twice
Launch list: your email address, the button you clicked, the page and the business idea you typed (getting notified when we open, see 2.1) Deleted within three months of the launch, or sooner on request
$1 first week records: one-way forms of your email address, connected social account IDs and site domain, the browser identifier, and the card or bank account fingerprint (see 2.2) Deleted by a daily job once more than 12 months old. Not deleted sooner when you disconnect an account or delete your WPMaven account
Support communications 3 years
Marketing consent records Duration of consent + 3 years
Anonymized analytics Indefinitely (cannot identify individuals)

6.1 Why We Keep What You Write

We keep the descriptions and prompts you write for as long as your account exists, not only while we build your site. That is a deliberate choice rather than an oversight, so it deserves a plain explanation.

When you describe your business to us, that sentence is what teaches us what people actually want to build. We read these descriptions to find the kinds of business we do not support yet, to fix the cases where we understood someone incorrectly, and to write our own website in the words people really use instead of the words we assume. A summary or a count cannot tell us any of that, so we keep the text itself.

We are telling you this rather than burying it because the descriptions people write are often personal. They frequently include a business name, an address, a phone number, and the founder's own name. Some of them, for example those written by clinics, therapists, and support groups, describe health matters, which European law treats as a special category needing extra care.

What this means in practice:

6.2 Early Deletion

You can request early deletion of your data at any time (see Section 9).

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

Cookie Type Purpose Duration
Essential Cookies Authentication, security, core functionality Session / 1 year
Functional Cookies Remember preferences, settings 1 year
Analytics Cookies Usage statistics, performance monitoring 2 years
Marketing Cookies Track campaign effectiveness (with consent) 1 year

7.2 Managing Cookies

You can control cookies through:

Note: Disabling essential cookies may affect Service functionality.

7.3 Who Measures You, and Where That Data Goes

We do not use Google Analytics. We use Matomo, an open source analytics tool that we run ourselves on our own server at analytics.yotako.io, operated by Yotako S.A. That means the record of your visit is not shared with an advertising company, is not used to build a profile of you across other websites, and is not sold to anyone. It stays on infrastructure we control.

WPMaven has its own separate space inside that Matomo, so its data is not mixed with any other Yotako product.

What we measure, if you accept:

What we do about the obvious risk in that list:

8. Data Security

We implement industry-standard security measures to protect your personal data:

8.1 Technical Measures

8.2 Organizational Measures

8.3 Data Breach Notification

In the event of a data breach affecting your personal data, we will:

8.4 When Our Team Works in Your Account

When something goes wrong, or you ask us for help, a member of our team can act in your account on your behalf, either by opening it, for up to an hour at a time, or from our staff tools. They can act as you would, for example approve and publish posts, change your site, delete a site or delete your account. They can also change your account's name and whether your account is active, and the email address you sign in with, which only our team can do. Some things stay yours alone: they cannot create sign-in codes or keys, change who is on your team, connect a social account, link your WhatsApp, or post to YouTube or TikTok for you.

9. Your Rights Under GDPR

As a data subject in the European Economic Area, you have the following rights:

9.1 Right of Access (Art. 15 GDPR)

You can request:

How to exercise: Email privacy@wpmaven.ai and we will send you a copy

9.2 Right to Rectification (Art. 16 GDPR)

You can request correction of inaccurate or incomplete data.

How to exercise: Update your details under Settings → Profile, or email privacy@wpmaven.ai

9.3 Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR)

You can request deletion of your personal data in certain circumstances.

How to exercise: Email privacy@wpmaven.ai. This covers the descriptions and prompts you wrote, including anything you typed before creating an account

Note: We may retain some data if required by law (e.g., billing records). We also keep the $1 first week records described in Section 2.2 until they are 12 months old, to prevent abuse of the offer.

9.4 Right to Restriction of Processing (Art. 18 GDPR)

You can request that we limit how we use your data.

How to exercise: Email privacy@wpmaven.ai

9.5 Right to Data Portability (Art. 20 GDPR)

You can receive your data in a structured, machine-readable format and transfer it to another service.

How to exercise: Email privacy@wpmaven.ai and we will send your data in a machine-readable format

9.6 Right to Object (Art. 21 GDPR)

You can object to processing based on legitimate interests or for direct marketing.

How to exercise: Settings → Notifications, or email privacy@wpmaven.ai

9.7 Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing is based on consent, you can withdraw it at any time.

How to exercise: Settings → Notifications, or click "unsubscribe" in any email we send

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:

9.9 Response Time

We will respond to requests within 30 days. If we need more time, we'll notify you of the extension and reason.

10. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@wpmaven.ai.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

11.1 Right to Know

You can request information about the personal data we've collected, used, disclosed, or sold in the past 12 months.

11.2 Right to Delete

You can request deletion of your personal data, subject to certain exceptions.

11.3 Right to Opt-Out of Sale

We do not sell your personal data.

11.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

How to exercise: Email privacy@wpmaven.ai with "CCPA Request" in the subject line.

12. AI-Specific Privacy Considerations

12.1 Prompt Processing

12.2 Generated Content

12.3 How We Improve the Service

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes:

We encourage you to review this Privacy Policy periodically.

14. Contact Us

For questions, concerns, or to exercise your privacy rights, contact us:

Privacy Inquiries: privacy@wpmaven.ai

Data Protection Officer: dpo@wpmaven.ai

General Support: support@wpmaven.ai

Postal Address:

YOTAKO S.A. - Privacy Department

4 rue Samuel Beckett, Luxmill building

L-4371 Belvaux, Sanem

Grand-Duchy of Luxembourg

15. Data Processing Agreement (DPA)

For White label customers requiring a Data Processing Agreement, please contact legal@wpmaven.ai. We provide standard DPAs that include: