Privacy policy

Who we are

Wiseflow provides software that regulated businesses use to onboard, verify and monitor their customers and partners. This policy explains how we handle personal data in connection with our website and our platform.

For questions about this policy or how we handle personal data, contact privacy@wiseflow.ai.

Controller and processor

We act as controller for personal data we collect directly — for example when you complete a form on this website, contact us, or use our website.

We act as processor for personal data our customers put into the platform about their own applicants, customers and partners. In that case our customer is the controller and determines why and how that data is processed. If you are an applicant in an onboarding journey powered by Wiseflow and want to exercise your rights, please contact the business you applied to. We will support them in responding.

What we collect

• Contact details you give us, such as name, work email, company and role.
• Message content when you enquire or request a demonstration.
• Usage data about how this website is used, including pages viewed and approximate location derived from IP address.
• Account data for platform users, such as authentication identifiers, role assignments and activity logs.

Why we use it

• To respond to enquiries and arrange demonstrations.
• To provide, secure and support the platform.
• To maintain audit records, which our customers rely on to meet their own regulatory obligations.
• To understand how our website is used so we can improve it.
• To meet our own legal, tax and regulatory obligations.

Our lawful bases are typically legitimate interests (running and improving our business), performance of a contract, and compliance with a legal obligation. Where we rely on consent, you can withdraw it at any time.

Sharing

We share personal data with service providers who help us operate — including cloud hosting, product analytics, email delivery and customer relationship management — and with professional advisers where necessary. Where we act as processor, we also share data with the verification and data providers our customer has configured. Our current sub-processor list is available on request.

We do not sell personal data. Where data is transferred outside the UK or EEA, we put appropriate safeguards in place.

Retention

We keep personal data only as long as needed for the purposes above. Platform data is retained according to the retention period our customer configures, which is often driven by their own regulatory record-keeping obligations. Enquiry data is kept for as long as we have a legitimate interest in following up, and then deleted.

Your rights

Subject to conditions, you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. To exercise a right in relation to data we control, email privacy@wiseflow.ai.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we would appreciate the chance to resolve it first.

Changes

We may update this policy from time to time. The date at the top reflects the most recent revision.