Privacy Policy

This policy explains how Wirelink (wirelink.app) handles personal data. We wrote it in plain English. If anything is unclear, email us at hello@wirelink.app.

1. Who we are

Wirelink is operated by CB Productions LLC (Sharjah Media City licence no. 2428366.01), Sharjah Media City Business Center, Sharjah Media City, Sharjah, United Arab Emirates ("Wirelink", "we", "us").

Contact: hello@wirelink.app

2. What Wirelink does

Wirelink connects your messaging accounts to the AI assistant you choose. Today this is WhatsApp. LinkedIn is coming soon. In this policy, "messaging account" means any account you connect, now or later.

You sign up with an email code. You link your messaging account (for WhatsApp, as a linked device by scanning a QR code). Your AI assistant (for example Claude, ChatGPT, Cursor or another MCP client) can then read, search, summarize, send and forward your messages on your instruction.

3. Our two roles

We handle two kinds of data, in two different roles.

Account data (we are the controller). This is data about you as our customer: your email, sign-in records, billing details and support emails. We decide how this data is used.

Messaging data (we are the processor). This is the content of your connected messaging accounts. It includes personal data of the people you talk to (your contacts). You decide what happens with this data. We process it only to provide the service to you, on your instructions. You are the controller for it.

As controller of your messaging data, you must have a lawful basis to process your contacts' data with Wirelink. Section 8 of our Terms of Service sets out our duties as your processor.

4. What data we process

Account data

• Your email address
• Sign-in codes and session records
• Billing details: your name, company, billing address and VAT number, and the payment references from Stripe, our payment processor. We never receive or store card numbers; Stripe handles all card data.
• Emails you send us

Messaging data

• Messages, chats and groups, including history from before you connected
• Earlier versions of edited messages, and messages later deleted in the messaging app (kept until you delete them with “Delete everything”)
• Contact names and phone numbers (or profile details, for other platforms)
• Media files: voice notes, images, videos, documents (up to 20 MB each)
• Transcripts of voice notes and text extracted from files

Connection data

• OAuth tokens that connect your AI app to Wirelink
• The link between your account and your messaging account (held via Unipile)

Technical data

• Basic logs: timestamps, requests, errors and IP addresses (our hosting providers' request logs)
• Raw event records from Unipile, used for debugging. These contain message text and phone numbers.

5. Why we use it, and our legal basis

For EU and UK users, the GDPR requires a legal basis. For account data, ours are:

For messaging data, we act on your instructions as your processor. Your legal basis is your responsibility.

With your messages, contacts and files, we do not:

• sell this data
• show ads or use this data for advertising
• train AI models on this data

6. How the AI part works

Your AI assistant only sees what it asks Wirelink for, and only when you use it. The AI app you choose (for example Anthropic Claude or OpenAI ChatGPT) is your own service under your own agreement with that provider. It is not our subprocessor. Its handling of data is covered by its own terms and privacy policy.

To transcribe voice notes and read files, we send that content to AI model providers through OpenRouter (see section 7).

Messages are sent only when your AI asks to send them. When the recipient or the wording is unclear, the AI asks you first.

7. Who we share data with (subprocessors)

We use these service providers to run Wirelink. They process data only on our instructions.

We may also share data:

• if the law requires it, or to protect rights and safety;
• with a buyer, if our business is sold or merged (we will tell you first).

This table is the current list of our subprocessors. Before we add or replace a provider that handles your messaging data, we will email you at least 14 days in advance. If you object, you can cancel before the change takes effect.

8. International transfers

We are based in the UAE. Our providers store and process data in the United States, France and other countries.

When we transfer personal data from the EU, UK or UAE to a country without an adequacy decision, these transfers rely on appropriate safeguards such as standard contractual clauses, where the law requires it. You can ask us for a copy.

9. How long we keep data

• While your account is active, we keep your data so the service works.
• Large files. We do not store attachments over 20 MB.
• Delete everything. You can click "Delete everything" in your account at any time. This disconnects your messaging account and deletes all your data and your account.
• Backups. Copies in system backups may remain for up to 14 days, then are deleted.
• Billing records (invoices and payment records) are kept for as long as tax and accounting law requires.
• Logs. Raw Unipile event records are deleted after 30 days. Our hosting providers keep their request logs for up to 30 days.

10. How we protect data

• Each customer's data is strictly isolated from every other customer's.
• Encryption: all connections use HTTPS (TLS). Our database provider encrypts stored data, files and search indexes at rest (AES-256).
• Access is limited to what is needed to run the service.

No system is fully secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

11. Your rights

Depending on where you live, you can ask us to:

• give you a copy of your data (access)
• correct it
• delete it
• limit or object to how we use it
• give you your data in a portable format
• withdraw consent, where we rely on consent

Users in the EU or UK can also complain to their local data protection authority. Users in the UAE have similar rights under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and can complain to the UAE Data Office.

To use your rights, email hello@wirelink.app. We may need to confirm your identity. We answer within the time the law requires (usually one month).

If you are a contact of a Wirelink customer, the customer controls your data. Please contact them first. If you contact us, we will pass your request to them and help them answer.

12. Cookies

Essential cookies. We use cookies to keep you signed in and to protect your account. The site does not work without them, so they need no consent. Stripe, our payment processor, sets cookies on its checkout pages to detect fraud and keep payments secure.

Not switched on yet. We have not switched on any analytics or advertising tools. Before we do, we will add the consent banner and the "Cookie settings" link described below, and update this policy.

Analytics and advertising cookies. With your consent, our website uses PostHog for analytics and the Meta, LinkedIn, TikTok and Google tags to measure our ads. These set cookies and send data about your visit (such as pages viewed and your device) to those companies. Each provider also processes this data under its own privacy policy.

How we ask for consent. If you are in the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are, none of these tools loads until you choose "Accept all". "Reject all" is offered alongside it and is just as easy. Everywhere else, they run and you can switch them off at any time. We remember your choice for six months. Use "Cookie settings" at the bottom of any page to change it. If you reject after accepting, we stop the tools and delete the cookies they set on our domain.

These tools run on our public website only. They never see your messages, contacts or files.

13. Age

Wirelink is for business use by people aged 18 or over. We do not knowingly collect data from children.

14. Third-party platforms

Wirelink is not affiliated with, endorsed by or sponsored by WhatsApp, Meta or LinkedIn. Those platforms process your data under their own policies.

15. Changes to this policy

We may update this policy. We will post the new version here and change the date at the top. For important changes, we will email you before they take effect.

16. Contact

CB Productions LLC (Sharjah Media City licence no. 2428366.01)
Sharjah Media City Business Center, Sharjah Media City, Sharjah, United Arab Emirates
hello@wirelink.app