Privacy Policy

This Privacy Policy explains how Wand (“Wand,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit our website, communicate with us, or use our AI-assisted marketing compliance platform and related services (collectively, the “Services”).

Organizations use Wand to review marketing materials against regulatory and internal requirements. When we process personal information in materials or systems provided by a customer (“Customer Content”), we generally act on that customer’s instructions as its service provider or processor. The customer’s agreement with Wand, including any data processing addendum, governs that processing. If your information was submitted to Wand by one of our customers, please contact that customer first about your privacy rights.

Information we collect

We collect the following categories of information:

• Account and contact information. This includes your name, work email address, password or authentication data, organization, role, profile image, team membership, and the information you provide when you request access, join our waitlist, contact us, or receive a team invitation.
• Customer Content and service data. Customers may submit marketing materials, PDFs, text, URLs, rulebooks, regulatory requirements, product and jurisdiction details, and other content for review. We also process revision history, comments, review status, findings, suggested changes, and related audit information generated through the Services. Customer Content may include personal information if a customer chooses to include it.
• Integration information. If an organization connects Wand to another service, we receive the account, workspace, content, and authorization information needed to operate that integration. Integration credentials are stored in encrypted form.
• Information collected automatically. When you use the Services, we and our service providers collect IP address, device and browser type, session and authentication data, pages or features used, referring pages, timestamps, diagnostic data, interactions, and similar usage information through logs, cookies, and related technologies.
• Information from customers and third parties. We may receive information from your employer or organization, customer-selected integrations, public regulatory sources, and service providers. On our public website, advertising data partners may identify a visit and associate it with information they or others hold about you, including your email address or online profiles.

The Services are designed for business marketing and compliance content, not medical records, payment card data, or other sensitive personal information. Customers should not submit sensitive personal information unless it is necessary, authorized, and covered by an agreement with Wand.

How we use information

• To provide, operate, maintain, and secure the Services, including authenticating users, managing organizations, processing Customer Content, and supporting customer-selected integrations.
• To analyze submitted content against regulatory and customer requirements and generate compliance findings, explanations, and suggested changes.
• To provide support, respond to requests, send service messages, manage our waitlist, and communicate with you about Wand.
• To monitor performance, troubleshoot, prevent fraud and abuse, protect the Services, and understand feature usage through analytics.
• To develop and improve the Services using feedback and aggregated or de-identified information. Wand does not use Customer Content to train its own general-purpose AI models.
• To market Wand and deliver relevant advertising on the public website as described below. We do not use Customer Content for targeted advertising.
• To comply with law, enforce agreements, and protect Wand, our customers, users, and others.

AI-assisted processing

Wand uses artificial intelligence to compare submitted marketing content with regulatory and customer-provided requirements and to produce draft findings and suggested revisions. Relevant Customer Content and requirements may be sent to AI service providers acting on our behalf for this purpose. Wand’s outputs are intended to support review by authorized business users; they do not make decisions about an individual’s insurance eligibility, pricing, coverage, claims, employment, credit, or other legal or similarly significant matters.

How Customer Content flows through the Services

Customer Content enters Wand through an authorized user or a customer-selected integration. Wand stores the source material and a review copy within the customer’s logically separated organization workspace. The Services extract or normalize content as needed, send the minimum relevant content and review requirements to our AI provider, store the resulting findings, and return them to authorized users for human review. At a customer’s direction, Wand may send content or notifications back through a connected service.

Cookies and tracking technologies

We use cookies and similar technologies to authenticate users, keep the Services secure, remember settings, understand usage, and measure and improve performance. This includes product analytics provided by PostHog and the third-party advertising technologies described in the next section. Most browsers let you refuse or delete cookies through their settings; doing so may affect how the Services function.

Third-party advertising and “sharing” of personal information

We use RB2B and similar online advertising technologies. Under some privacy laws, this activity may be considered “sharing” of personal information for cross-context behavioral advertising. Specifically:

When you visit our public website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or online profiles. We (or service providers on our behalf) may then send communications and marketing to these emails or profiles. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

We do not sell Customer Content, and we do not share Customer Content for cross-context behavioral advertising. The advertising practices described in this section are limited to data associated with visits to our public website.

How we disclose information

We may disclose information to the following recipients:

• Service providers. Vendors that provide cloud hosting and database services, AI processing, security, analytics, customer communications, and email delivery. These providers currently include Vercel, Neon, OpenAI, PostHog, Loops, and Resend, depending on the features used.
• Customer-selected integrations. Services such as Slack or another content source when an authorized customer connects the service or asks Wand to send information to it.
• Your organization. Administrators and other authorized users of the same customer workspace, according to their roles and permissions.
• Legal, safety, and corporate recipients. Advisers, authorities, counterparties, or successors when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or complete a financing, acquisition, reorganization, or sale of all or part of our business.

We may also disclose aggregated or de-identified information that cannot reasonably be linked to an individual.

Your privacy rights and how to opt out

Depending on where you live, you may have the right to opt out of the “sale” or “sharing” of your personal information, including for cross-context behavioral advertising. You can exercise these choices at any time:

• To opt out of this advertising, visit https://app.retention.com/optout.
• For California residents, additional details and CCPA opt-out options are available at https://app.retention.com/ccpa_details/.

Because opt-outs are typically tied to a cookie or an identifier, you may need to opt out again if you clear your cookies, use a different browser, or use a different device.

Depending on where you live, you may also have rights to access, obtain a copy of, correct, or delete personal information; to object to or restrict certain processing; to limit certain uses of sensitive personal information; and to appeal a denied request. We will not discriminate against you for exercising an applicable privacy right.

To make a request, email us at privacy@joinwand.com. We may need to verify your identity and authority before completing a request. You may use an authorized agent where permitted by law. If Wand processes the information only on behalf of a customer, we may refer the request to that customer.

Data retention

We retain account information and Customer Content while needed to provide the Services and for the period set out in the applicable customer agreement. We retain website, waitlist, support, security, and usage information for as long as reasonably necessary for the purposes described in this policy. Retention periods depend on the type and sensitivity of the information, customer instructions, contractual requirements, security and support needs, and legal obligations. When information is no longer needed, we delete or de-identify it, subject to limited backup, legal, fraud-prevention, dispute, and enforcement needs.

Security

We use administrative, technical, and organizational measures designed to protect personal information, including authentication and role-based access, logical separation of customer organizations, encryption of stored integration credentials, encrypted network transport, logging and monitoring, and access limited to personnel and service providers with a business need. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

International data transfers

Wand and our service providers may process information in the United States and other countries where we or they operate. Where required, we use contractual or other safeguards designed to protect personal information transferred across borders.

Children’s privacy

Our website is intended for a business audience and is not directed to children under 16. We do not knowingly collect personal information from children under 16, and our customers should not submit it through the Services.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected on this page.

Contact us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Wand
415 Mission St, San Francisco, CA 94105
privacy@joinwand.com