1. Introduction
Wake is operated by Slingshot Apps Ltd ("we", "our", or "us"), a company registered in England and Wales. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ambassador marketing platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, company name, password
- Billing Information: Payment card details (processed by Stripe), billing address
- Store Data: Shopify store information, customer data you choose to sync
- Communications: Messages you send through the platform
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, actions taken
- Device Information: IP address, browser type, operating system
- Cookies: Session and preference cookies
2.3 Information from Third Parties
- Shopify: Customer and order data from your connected store
- Social Profiles: Publicly available social media information
- Authentication Providers: Basic profile data from Clerk (our auth provider)
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve our Service
- Process transactions and manage subscriptions
- Calculate ambassador scores and provide recommendations
- Send transactional emails (welcome, receipts, alerts)
- Respond to your requests and provide customer support
- Analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues or fraud
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
- Service Providers: Third parties that help us operate (Stripe for payments, Clerk for authentication, Resend for email)
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Legal Requirements: When required by law or to protect our rights
- With Your Consent: When you explicitly authorize sharing
5. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion, we retain certain data for up to 90 days for backup purposes, and may retain anonymized data for analytics. Legal and financial records are kept as required by law.
6. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS/SSL) and at rest
- Secure cloud infrastructure (Railway, Vercel)
- Regular security audits and updates
- Access controls and authentication
- Payment processing through PCI-compliant Stripe
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Portability: Receive your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Withdraw Consent: Where processing is based on consent
To exercise these rights, contact us at privacy@wearewake.com.
8. Cookies and Tracking
We use cookies for:
- Essential: Required for the Service to function
- Preferences: Remember your settings and choices
- Analytics: Understand how users interact with the Service
You can control cookies through your browser settings. Disabling cookies may affect Service functionality.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for transfers outside the EEA.
10. GDPR (European Users)
If you are in the European Economic Area, you have additional rights under GDPR:
- Right to object to processing
- Right to restrict processing
- Right to lodge a complaint with a supervisory authority
Our legal bases for processing are: contract performance, legitimate interests, consent, and legal obligations.
11. CCPA (California Users)
California residents have the right to know what personal information is collected, request deletion, and opt-out of sales. We do not sell personal information. To make a request, contact privacy@wearewake.com.
12. Children's Privacy
Our Service is not intended for children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance of the revised policy.
14. Contact Us
For questions about this Privacy Policy or our data practices:
Company: Slingshot Apps Ltd
Email: privacy@wearewake.com
Data Protection Officer: dpo@wearewake.com
Address: United Kingdom