Privacy Notice
How Wooo collects, uses, protects, shares, retains, and deletes personal data, including Hong Kong privacy rights.
What this notice covers
This notice explains how Wooo handles account details, prompts, generated content, uploaded material, analytics data, and support messages.
It is written as a counsel-ready baseline for a global service with Hong Kong privacy obligations. It does not replace legal advice for your specific launch markets.
Information we collect
We collect information you provide directly, information created while using Wooo, and limited technical data needed to operate and secure the service.
- Account data such as email address and sign-in provider.
- Workspace content such as prompts, decks, reports, dashboards, brand kits, share-link settings, and source references you choose to save.
- Security records such as audit logs, access logs, provider-key metadata, and rate-limit events.
- Optional analytics events after consent, such as page path, action type, session identifier, and broad device family.
How we use information
We use information to provide the product, generate and export artifacts, secure accounts, respond to requests, keep records required for compliance, and improve the service when analytics consent is given.
AI processing and generated content
Wooo may send the minimum necessary content to AI providers to create drafts, charts, visuals, reports, narrations, and review feedback. Outputs can be inaccurate and must be reviewed before external use.
Confidentiality and provider-retention controls depend on the selected workflow, your settings, and available provider terms. Do not upload material you are not authorised to process.
Hong Kong PDPO rights
If Hong Kong privacy law applies to you, you may request access to or correction of your personal data. We may need to verify your identity and may refuse or limit a request where the law permits.
Requests can be sent to privacy@atriverse.com.
Sharing and subprocessors
We use service providers for hosting, authentication, analytics, AI generation, communications, payments when enabled, and operational support. Current security and subprocessor information is maintained in the Trust center.
Retention and deletion
We keep account and workspace records while your account is active, unless a shorter retention period applies or you delete them. Legal, fraud-prevention, security, tax, and dispute records may be retained where required.
You can request export or deletion from the Privacy settings page. Deletion may be irreversible and can affect saved decks, reports, dashboards, share links, provider keys, and audit history.
International transfers
Your information may be processed outside your location. Where required, we use contractual and operational safeguards for cross-border transfers.
Marketing choices and tracking
Optional analytics and marketing preferences can be changed at any time. We treat Global Privacy Control signals as an analytics opt-out where supported by the browser.
Contact
Privacy requests and questions can be sent to privacy@atriverse.com.