Privacy Policy

Introduction

Wakeworth ('we', 'us', 'our') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our AI-powered business valuation platform. This policy complies with GDPR (General Data Protection Regulation) and other applicable data protection laws.

1. Information We Collect

Personal Information

• Name and contact details
• Email address and phone number
• Company name and position
• Professional information

Business Data

• Financial information (revenue, expenses, growth metrics)
• Customer metrics (count, CAC, LTV, churn rate)
• Business documents (pitch decks, financial statements, cap tables)
• Market and industry information

Technical Data

• IP address and location data
• Browser type and device information
• Cookies and similar tracking technologies
• Usage data and interaction patterns

2. How We Use Your Information

• Providing and maintaining our valuation services
• Analyzing your financial data using AI/LLM technology
• Generating personalized valuation reports
• Improving and optimizing our platform
• Communicating with you about service updates
• Ensuring security and preventing fraud
• Complying with legal obligations

3. AI and Data Processing

Wakeworth uses Large Language Models (LLMs) to automate data extraction and analysis:

LLM Processing

• We use OpenAI GPT-4o-mini and Anthropic Claude to extract structured data from your documents
• AI models analyze your financial data to generate valuation estimates
• Machine learning helps identify insights and provide recommendations

AI Service Providers

• OpenAI (GPT-4o-mini): Processes document extraction and financial analysis
• Anthropic (Claude): Provides alternative LLM processing and quality checks

Our Commitment: Your data is sent to AI providers in encrypted form. We use enterprise agreements that ensure your data is NOT used for training AI models. All AI processing is done exclusively for your valuation requests.

4. Data Sharing and Disclosure

We do not sell your personal data. We only share data with:

Third-Party Service Providers

• Auth0: Authentication and identity management
• AWS: Cloud hosting and storage (S3, RDS)
• OpenAI/Anthropic: AI-powered data extraction (encrypted)
• Stripe: Payment processing

Legal Requirements

We may disclose data if required by law or necessary to defend our rights.

5. Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for data at rest and in transit
• Role-based access control and least privilege principle
• Continuous security monitoring and threat detection
• Compliance with SOC 2, ISO 27001, and GDPR standards
• Regular backups and disaster recovery plans

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, unless a longer retention period is required by law. After account deletion, your data is removed within 90 days, subject to legal retention requirements.

7. Your Rights (GDPR)

If you are located in the EU, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Delete your personal data ('right to be forgotten')
• Right to Restriction: Restrict processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Withdraw Consent: Withdraw your previously given consent to data processing

To exercise these rights, please contact us at privacy@wakeworth.app. We will respond within 30 days.

8. International Data Transfers

Your data may be processed outside your country of residence. We ensure such transfers comply with applicable data protection laws, including EU Standard Contractual Clauses and adequate safeguards.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Required for basic functionality (authentication, security)
• Analytics Cookies: Help us understand how users interact with our platform
• Functional Cookies: Remember your preferences and settings

10. Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on our platform. Your continued use after such changes constitutes acceptance of the updated policy.

12. Contact Information

For questions about this Privacy Policy or to exercise your rights, please use the helper button in the bottom-right corner of the page.