Privacy Policy

Wuvr provides AI search analytics and recommendations for businesses. This policy explains how we collect, use and protect personal information when you visit our website, use Wuvr or contact us.

1. Who we are

Wuvr is operated by Clan Labs Ltd, registered in England and Wales under company number 16356274, with its registered office at 20 Wenlock Road, London, N1 7GU, United Kingdom. In this policy, “Wuvr”, “we”, “us” and “our” refer to Clan Labs Ltd.

For privacy questions or requests, contact product@wuvr.ai, or write to our registered office marked “Privacy”.

We are the data controller when we decide how and why personal information is used, including for account administration, billing, support and security.

When a customer provides personal information for us to process on its behalf within a project, the customer is generally the controller and we act as its processor. That processing is governed by our agreement with the customer and the applicable data processing agreement. If your request concerns information held in an organisation’s project, contact that organisation first; we can help identify the appropriate contact and assist it with your request.

2. Information we collect

Account and organisation information. Your name, email address, sign-in information, organisation, membership, role, project access and preferences. We also receive information when another user invites you to a workspace.

Project information. Business information, prompts, websites and content you or your team provide, together with reports, notes and work created in your projects. Business information can include personal information, for example when it identifies a sole trader or a named employee.

Research information. AI answers, citations and information from publicly accessible websites used in our analysis. These sources may include names, professional details and other personal information about people who do not have a Wuvr account.

Billing information. Subscription details, transaction references, payment status and payment-method identifiers used to administer billing and trials. Stripe processes payment details. We do not store your full payment card number or security code.

Technical information. Information generated when you use the service, such as IP addresses, browser and device information, request timestamps, authentication events and diagnostic logs. Some of this information is processed by our hosting and authentication providers.

Communications and connected services. Information you send when contacting us, together with account identifiers, authorisation details and content needed to operate integrations you enable.

You provide some of this information directly. We receive other information from your organisation, connected services, payment and infrastructure providers, AI services and public websites. If you do not provide information needed to create an account, process a payment or run a feature, we may be unable to provide that part of Wuvr.

3. How we use information

We use information to:

• Create accounts, authenticate users and manage organisation and project access.
• Run selected prompts, analyse AI answers and sources, and produce reports, recommendations, plans and drafts.
• Read website pages you select and check changes relevant to your project.
• Administer subscriptions, payments, trials and billing records.
• Send service messages, respond to questions and provide support.
• Deliver information through integrations you enable.
• Investigate errors, protect accounts, prevent abuse and maintain the service.
• Meet legal obligations and establish, exercise or defend legal claims.

4. Our lawful bases

Where UK or European data protection law applies and we act as controller, we rely on the following bases:

• Contract: processing necessary to provide a service you contract for personally, including managing your subscription and responding to service requests.
• Legitimate interests: administering our relationship with a business customer and its users, delivering and securing Wuvr, responding to enquiries, preventing fraud and resolving disputes. We consider the impact on individuals and do not rely on this basis where their rights override those interests.
• Legal obligations: keeping required accounting records and responding to legally binding requests.
• Consent: processing for which consent is required, such as certain marketing communications or uses of cookies and similar technologies. You can withdraw consent without affecting processing that was lawful before withdrawal.

Where we act as a processor, we follow the customer’s lawful instructions; the customer is responsible for identifying its lawful basis.

5. AI services and your prompts

Wuvr sends monitoring prompts to external services to obtain AI answers. For analysis and drafting features, we may also send relevant business context, website extracts, answers or draft content to an AI provider.

Monitoring prompts should describe questions a potential customer might ask publicly. Do not include passwords, private customer records, sensitive personal information or confidential material in those prompts.

Information collected from AI services and public websites may support reports for multiple customers. This does not give those customers access to your account or private project content, or identify you as monitoring a question.

6. Who receives information

Your organisation and authorised collaborators. Information is available to users according to their permissions. Workspace owners and administrators can manage access and may access projects within their organisation. Information you send through an integration becomes available to the recipients selected there.

Service providers. We use providers for hosting, storage, authentication, payment processing, AI processing, answer collection, email delivery and operational infrastructure. These include Cloudflare, Supabase, Stripe and OpenAI. Providers receive information needed for their role. Payment providers and other services may also act as independent controllers for some of their own purposes.

Professional advisers and authorities. We may disclose relevant information to advisers, regulators, courts or other authorities where necessary for legal obligations, disputes or protecting rights and safety.

Business transfers. If our business is involved in a merger, acquisition or sale, relevant information may be disclosed to advisers and prospective or new owners, subject to appropriate confidentiality and data protection safeguards.

7. Cookies and similar technologies

Wuvr uses cookies and browser storage to support sign-in and remember interface preferences. Blocking some of these technologies may prevent parts of the service from working.

8. International processing

Our providers may process information outside the country where you live, including outside the UK and European Economic Area.

9. How long we keep information

Cancelling a subscription does not itself delete an account or its saved project information. Subscription cancellation and requests to delete personal information are separate actions.

We assess retention by the purpose of the information, the service relationship, legal recordkeeping requirements and the need to investigate security incidents or resolve disputes. Some information may need to remain after an account closes, for example records needed for tax obligations or an ongoing legal claim.

To request deletion of your personal information, contact product@wuvr.ai. We will assess the request under applicable law, including any lawful retention requirements and the role of your organisation as controller.

10. Security

We protect access to information through account authentication, role-based permissions and project access controls. You can help protect your account by keeping your sign-in credentials secure and reporting suspected unauthorised access to product@wuvr.ai.

11. Your rights and choices

Depending on the law that applies and the circumstances, you may have rights to access your personal information, correct it, request erasure, restrict its use, receive a portable copy, or object to processing based on legitimate interests. You can object to direct marketing at any time and withdraw consent where processing relies on it.

Contact product@wuvr.ai to exercise your rights. We may need proportionate information to verify your identity. We respond within the time required by applicable law and explain any applicable exception.

12. Children

Wuvr is a business service intended for people aged 18 and over. If you believe a child has provided personal information to us, contact product@wuvr.ai so we can investigate and take appropriate action.

13. Changes and contact

We may update this policy as our service or practices change. We will publish the revised version with an updated date and give additional notice of material changes where appropriate or required by law. Where a new use requires consent, we will obtain it before starting that use.

For questions, contact product@wuvr.ai or write to Clan Labs Ltd, 20 Wenlock Road, London, N1 7GU, United Kingdom.