Wonderful | The Enterprise AI OS

Wonderful Privacy Policy

Updated Date:

Sep 8, 2026

Last updated: September 8, 2026

This Privacy Policy (“Privacy Policy”) describes how Wonderful Systems Ltd., its subsidiary, and its affiliates (together, “Wonderful”, “we”, “us” or “our”) collect, use, disclose, and otherwise process Personal Data (as defined below) while interacting with our website, platform, services or marketing digital assets.

This Privacy Policy applies to: (i) customers using our agentic AI solution for enterprises (“Customer” and the “Services”, respectively) and the Customer’s designated personnel authorized to use the Services (“Authorized Users”); (ii) individuals who interact with or browse our website at https://www.wonderful.ai/ (“website”), including our blogs, demos, and similar forums or otherwise engage with the website or related landing pages (each, a “Prospect”). Unless otherwise specified, Customers, Authorized Users and Prospects are referred to collectively and individually as “you” or “your”.

This Privacy Policy forms an integral part of our Terms of Use (“Terms”) and governs our practices for collecting, processing, using, and transferring certain data, including Personal Data (as defined below), in connection with the interactions described above.

This Privacy Policy does NOT apply to:

The content that our Customers and their Authorized Users upload, submit, or integrate while using the Services (“Customer Data”). Wonderful processes Customer Data only on the Customer’s behalf, in its role as a “processor” or “service provider” (as those terms are defined under applicable data protection laws). Customer Data processing is governed by the applicable Data Processing Agreement.
Job applicants, which should refer to our Candidates Privacy Notice, which describes our Personal Data processing practices for job applicants.
Employees and former employees.

The information you provide will be stored in Wonderful databases and used only as described in this Privacy Policy. We will not transfer your information to third parties except as described in this Privacy Policy or as required to comply with applicable legal obligations. You are not legally required to provide personal data to Wonderful; however, if you do not provide certain Personal Data, we may be unable to provide certain services or respond to your inquiries. You have the right to review and request correction of your information in accordance with the applicable data protection laws.

Google API Services and Limited Use Disclosure

Wonderful’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Google user data is never used, transferred, or sold to create, train, or improve foundational or generalized machine learning or artificial intelligence models. Where our Services process Google user data using third-party AI providers, we do so exclusively under paid API terms that contractually prohibit training on customer data, with data-sharing features disabled and, where available, Zero Data Retention enabled. Google user data is not used for personalized advertising and is not transferred to third parties except as necessary to provide user-facing features, for security purposes, or to comply with applicable law.

1. POLICY AMENDMENTS

We reserve the right to amend this Privacy Policy from time to time, at our sole discretion. The most recent version of this Privacy Policy will always be posted on the website, and the update date will be reflected in the “Last Updated” heading. We will provide notice to you if these changes are material, and, where required by applicable law, we will obtain your consent. Any amendments to the Privacy Policy will become effective immediately, unless we notify otherwise. We recommend you review this Privacy Policy periodically to ensure that you understand our most updated privacy practices.

2. CONTACT INFORMATION AND DATA CONTROLLER INFORMATION

Wonderful is incorporated under the laws of the State of Israel and acts as the data controller (as defined in the EU General Data Protection Regulation (“GDPR”) or other applicable privacy laws) for the Personal Data we collect from you. This means we determine the purposes and means of processing the Personal Data described in this Privacy Policy.

If you have any questions, requests, or concerns about this Privacy Policy or how we process your Personal Data, please contact us using the details below.

Data Protection Officer Contact Information

By email: dpo@wonderful.ai

Representative for Data Subjects in the EU and UK Contact Information

Wonderful has designated its Prighter Group as its representative in the European Union for data protection matters relating to the processing of Personal Data of EU residents, pursuant to Article 27 of the GDPR. If you have any comments or questions regarding this Notice, concerns regarding your privacy, or wish to make a complaint about how Wonderful processes your Personal Data, please contact us at https://app.prighter.com/portal/15048825761

3. TYPES OF DATA WE COLLECT

We may collect the following types of information, depending on how you interact with us. We may process information that is non-identifiable, anonymous, or aggregated information (“Non-Personal Data”), meaning information that does not identify you and that we cannot reasonably use to identify you. Non-Personal Data may include technical and usage information about your device, browser, and activity, to the extent such information in an aggregated or de-identified manner. We may further process Personal Data that becomes Non-Personal Data (for example, by anonymizing or aggregating it). We may use Non-Personal Data for any lawful purpose.

The second type of information is individually identifiable information (“Personal Data”) that includes information that identifies you or that may, with reasonable effort, be used to identify you. For the avoidance of doubt, any Non-Personal Data connected or linked to Personal Data shall be deemed as Personal Data as long as such connection or linkage exists.

4. PERSONAL DATA SETS WE PROCESS & PURPOSE OF COLLECTION AND USE

The table below details the types of Personal Data we process, the purpose and our processing operations, and the lawful basis for such processing:

PERSONAL DATA SET	PURPOSE AND OPERATIONS	LAWFUL BASIS
PROSPECTS We process your information for marketing and sales purposes, including to identify and engage leads and prospective customers through our digital assets, analyze how our website and other digital properties are used, perform analytics and reporting, collect and evaluate feedback, identify usage trends, measure the effectiveness of our marketing campaigns, and improve our marketing and sales activities. This may include processing the following categories of data:
Analytics, Telemetry and Usage Data: When you interact with our website, landing pages, our blog, and other content published by us, we collect online identifiers, such as IP address, Cookie ID, and unique identifiers (“Online Identifiers”). These Online Identifiers may be used to derive additional details, such as your approximate geographic location (for example, your country or ZIP code). Additional information is automatically collected regarding your browsing data and interests, including the pages you viewed, actions conducted on such webpages and digital assets, clickstream data, access time stamp, referrals, telemetry data, browser type, device type, etc. (collectively “Tracking Data”). To the extent applicable, Tracking Data is collected automatically by our third-party service providers as detailed below.	To operate our website and ensure its proper functionality (for example, to remember your preferences and recognize you when you return to the website); To maintain security and prevent fraud (for example, to help verify that interactions are conducted by a legitimate user); To debug and resolve technical issues; For marketing purposes.	Online Identifiers collected through strictly necessary cookies that are required for the basic operation of the website are processed based on our legitimate interest. Tracking Data is processed subject to your explicit consent provided through the cookie banner placed on the website. You can withdraw consent at any time by using the cookie preference tool available at the Website.
Contact Information: If you voluntarily contact us, we may collect certain information from you. This includes when you submit an inquiry, request support, register for our newsletter, webinar, demo, or other event, or otherwise communicate with us. Depending on your interaction with us, the information we collect may include your name, job title, company name, email address, and phone number, as applicable (“Contact Information”). Any communication between us whether by email, phone, Zoom, Chat AI, Slack, or other channels, may be processed, recorded and stored, summarized and transmitted (“Communications Data”).	We use Contact Information for the following purposes: To provide the support you requested or to respond to your inquiries. Our correspondence with you, and its contents, may be processed and stored to improve our customer service and, where we believe continued retention is necessary, for example, in connection with potential claims or to provide further assistance (as applicable); We may use your email address to send you service-related communications and marketing promotions, such as information about new features, additional offerings, special opportunities or other information we think you will find valuable (“Direct Marketing”); We will further use your email address, if applicable, under our suppression list, when you request to opt-out to ensure we comply with such preference and choice. We use Communication Data to develop, maintain, and improve the quality and effectiveness of our sales and marketing activities, train our personnel and AI-enabled agents and tools, and review and analyze communications for quality assurance, training, compliance, recordkeeping, and support purposes.	We process Contact Information based on our legitimate interest when you register for events, webinars, etc., in order to provide a seamless webinar experience, including by sending confirmations and reminders. If you register to receive our newsletter, provide feedback or respond to a survey, we process your Contact Information based on your consent. You may withdraw your consent at any time using the “unsubscribe” option within the body of the message. We process Communication Data based on our legitimate interest in improving our customer service and training our staff.
CUSTOMERS AND AUTHORIZED USERS We process your information for our legitimate business purposes, including to provide and administer the Services, operate and secure the platform, validate and authenticate users, provide customer support, conduct customer surveys, perform data analytics and audits, collect and evaluate feedback, identify usage trends, measure the effectiveness of our marketing campaigns, and evaluate and improve our products, services, marketing, and customer relationships.
Customer and Authorized Users’ Account Details: In order to use our Services, you will be required to enter into an agreement with us. You will be requested to provide us with your Contact Information (as defined above) and, where applicable, additional details such as information about the company you represent, billing and payment information, and other account-related details (collectively “Registration Information”).	We use the Registration Information for the following purposes: To create and administer your account; To manage your account, including billing, payments, and invoices; To provide, maintain, and support the Services; and To send you Direct Marketing (as defined above), service-related communications, and other operational emails.	We process Registration Information to fulfill our contractual obligations to you, all as agreed in the terms of use or other agreement governing your use of the Service. Processing your Registration Information for Direct Marketing purposes is subject to our legitimate interest. You can opt-out at any time using the “unsubscribe” option within the email. Please note that if you choose to unsubscribe from our direct marketing, we will still retain your contact details and send you service-related emails, such as invoices.
Usage Data: When you use our platform and Services, access your account, dashboard, we automatically generated and collect Online Identifiers, access logs, duration of use, click stream, session recording, Services use, errors or bugs, crash data and analytics, login data, how you interact with the Services and platform (“Usage Data”).	We use Usage Data for the following purposes: To understand how you use our Services and to operate, maintain, improve, and develop our Services, including by evaluating our operations and designing new products, features, and technologies; To troubleshoot and resolve technical issues you may encounter; To respond to your requests for assistance and support; To analyze errors and crash reports; and To repair and restore the Services.	We process Service Usage Data subject to our legitimate interest.
Customer Support Communications: We collect and retain customer support communications, support tickets, and related correspondence, including Contact Information and records of our interactions with you. These records may include email communications and chat transcripts call. Support may be provided by our personnel or through automated tools, including bots and AI-enabled technologies and, where required and in accordance with applicable law, we will bring this to your attention.	We use Customer Support Communications for the following purposes: To provide the customer support you request and to maintain appropriate records of the support provided; To improve the quality of our Services, train our staff (including in connection with recorded or monitored calls), and maintain information security; To review, analyze, and store our correspondence with you, its contents, and any call recordings for quality assurance, training, and compliance purposes, including in connection with potential claims or to provide further assistance (as applicable); and To maintain internal records where necessary to evidence the support provided or to address any potential, actual, or threatened claim, dispute, or complaint.	Customer support communications are processed as necessary to fulfil our contract with you. Processing information exchanged with our customer support for internal recordkeeping and service improvement is based on our legitimate interest. Where required by applicable law, call recordings are processed based on your consent. You have the right to withdraw consent at any time.

PERSONAL DATA SET

PURPOSE AND OPERATIONS

LAWFUL BASIS

PROSPECTS

We process your information for marketing and sales purposes, including to identify and engage leads and prospective customers through our digital assets, analyze how our website and other digital properties are used, perform analytics and reporting, collect and evaluate feedback, identify usage trends, measure the effectiveness of our marketing campaigns, and improve our marketing and sales activities. This may include processing the following categories of data:

Analytics, Telemetry and Usage Data:
When you interact with our website, landing pages, our blog, and other content published by us, we collect online identifiers, such as IP address, Cookie ID, and unique identifiers (“Online Identifiers”). These Online Identifiers may be used to derive additional details, such as your approximate geographic location (for example, your country or ZIP code). Additional information is automatically collected regarding your browsing data and interests, including the pages you viewed, actions conducted on such webpages and digital assets, clickstream data, access time stamp, referrals, telemetry data, browser type, device type, etc. (collectively “Tracking Data”). To the extent applicable, Tracking Data is collected automatically by our third-party service providers as detailed below.

To operate our website and ensure its proper functionality (for example, to remember your preferences and recognize you when you return to the website);

To maintain security and prevent fraud (for example, to help verify that interactions are conducted by a legitimate user);

To debug and resolve technical issues;

For marketing purposes.

Online Identifiers collected through strictly necessary cookies that are required for the basic operation of the website are processed based on our legitimate interest.

Tracking Data is processed subject to your explicit consent provided through the cookie banner placed on the website.

You can withdraw consent at any time by using the cookie preference tool available at the Website.

Contact Information:

If you voluntarily contact us, we may collect certain information from you. This includes when you submit an inquiry, request support, register for our newsletter, webinar, demo, or other event, or otherwise communicate with us. Depending on your interaction with us, the information we collect may include your name, job title, company name, email address, and phone number, as applicable (“Contact Information”).

Any communication between us whether by email, phone, Zoom, Chat AI, Slack, or other channels, may be processed, recorded and stored, summarized and transmitted (“Communications Data”).

We use Contact Information for the following purposes:

To provide the support you requested or to respond to your inquiries. Our correspondence with you, and its contents, may be processed and stored to improve our customer service and, where we believe continued retention is necessary, for example, in connection with potential claims or to provide further assistance (as applicable);

We may use your email address to send you service-related communications and marketing promotions, such as information about new features, additional offerings, special opportunities or other information we think you will find valuable (“Direct Marketing”);

We will further use your email address, if applicable, under our suppression list, when you request to opt-out to ensure we comply with such preference and choice.

We use Communication Data to develop, maintain, and improve the quality and effectiveness of our sales and marketing activities, train our personnel and AI-enabled agents and tools, and review and analyze communications for quality assurance, training, compliance, recordkeeping, and support purposes.

We process Contact Information based on our legitimate interest when you register for events, webinars, etc., in order to provide a seamless webinar experience, including by sending confirmations and reminders.

If you register to receive our newsletter, provide feedback or respond to a survey, we process your Contact Information based on your consent. You may withdraw your consent at any time using the “unsubscribe” option within the body of the message.

We process Communication Data based on our legitimate interest in improving our customer service and training our staff.

CUSTOMERS AND AUTHORIZED USERS

We process your information for our legitimate business purposes, including to provide and administer the Services, operate and secure the platform, validate and authenticate users, provide customer support, conduct customer surveys, perform data analytics and audits, collect and evaluate feedback, identify usage trends, measure the effectiveness of our marketing campaigns, and evaluate and improve our products, services, marketing, and customer relationships.

Customer and Authorized Users’ Account Details:

In order to use our Services, you will be required to enter into an agreement with us. You will be requested to provide us with your Contact Information (as defined above) and, where applicable, additional details such as information about the company you represent, billing and payment information, and other account-related details (collectively “Registration Information”).

We use the Registration Information for the following purposes:

To create and administer your account;

To manage your account, including billing, payments, and invoices;

To provide, maintain, and support the Services; and

To send you Direct Marketing (as defined above), service-related communications, and other operational emails.

We process Registration Information to fulfill our contractual obligations to you, all as agreed in the terms of use or other agreement governing your use of the Service.

Processing your Registration Information for Direct Marketing purposes is subject to our legitimate interest. You can opt-out at any time using the “unsubscribe” option within the email. Please note that if you choose to unsubscribe from our direct marketing, we will still retain your contact details and send you service-related emails, such as invoices.

Usage Data:

When you use our platform and Services, access your account, dashboard, we automatically generated and collect Online Identifiers, access logs, duration of use, click stream, session recording, Services use, errors or bugs, crash data and analytics, login data, how you interact with the Services and platform (“Usage Data”).

We use Usage Data for the following purposes:

To understand how you use our Services and to operate, maintain, improve, and develop our Services, including by evaluating our operations and designing new products, features, and technologies;

To troubleshoot and resolve technical issues you may encounter;

To respond to your requests for assistance and support;

To analyze errors and crash reports; and

To repair and restore the Services.

We process Service Usage Data subject to our legitimate interest.

Customer Support Communications:

We collect and retain customer support communications, support tickets, and related correspondence, including Contact Information and records of our interactions with you. These records may include email communications and chat transcripts call. Support may be provided by our personnel or through automated tools, including bots and AI-enabled technologies and, where required and in accordance with applicable law, we will bring this to your attention.

We use Customer Support Communications for the following purposes:

To provide the customer support you request and to maintain appropriate records of the support provided;

To improve the quality of our Services, train our staff (including in connection with recorded or monitored calls), and maintain information security;

To review, analyze, and store our correspondence with you, its contents, and any call recordings for quality assurance, training, and compliance purposes, including in connection with potential claims or to provide further assistance (as applicable); and

To maintain internal records where necessary to evidence the support provided or to address any potential, actual, or threatened claim, dispute, or complaint.

Customer support communications are processed as necessary to fulfil our contract with you.

Processing information exchanged with our customer support for internal recordkeeping and service improvement is based on our legitimate interest.

Where required by applicable law, call recordings are processed based on your consent. You have the right to withdraw consent at any time.

Please note that the actual processing operation for each purpose of use and lawful basis detailed in the table above may differ. Such processing operation usually includes a set of operations made by automated means, such as collection, storage, use, disclosure by transmission, erasure, or destruction. The transfer of Personal Data to third-party countries, as further detailed in Section 10 below “Data Transfer”, is based on the same lawful basis as stipulated in the table above.

In addition, we may use certain Personal Data to prevent potentially prohibited or illegal activities, fraud, misappropriation, infringements, identity thefts, and any other misuse of the Services and to enforce the Terms or other agreement, as well as to protect the security or integrity of our databases and the Services, and to take precautions against legal liability. Such processing is based on our legitimate interests.

We may collect different categories of Personal Data and Non-Personal Data from you, depending on the nature of your interaction with the Services provided through the website and Services, as detailed above.

Note however, we will not use your Personal Data for any purpose that is materially different from the purposes for which the information was originally collected as detailed in the table above or subsequently authorized by you or required by applicable law.

5. HOW WE COLLECT PERSONAL DATA

Depending on the nature of your interaction with the website and Services, we may collect information as follows:

Information provide by you directly- for example, when you correspond with us.
Information we receive automatically- we will collect your Online Identifiers, Usage Data and Telemetry Data, including analytics data (or use third-party measurement and marketing tools). For more information on the cookies, we use and how to opt out of third-party collection of this information, please see Section 6 below “Cookies & Tracking Technologies”.

6. COOKIES & TRACKING TECHNOLOGIES

We use “cookies” (or similar tracking technologies) when you access or interact with the Services or the website. The use of cookies is standard industry-wide practice. A “cookie” is a small piece of information that a website assigns and stores on your computer while you are viewing a website. Cookies can be used for various purposes, including allowing you to navigate between pages efficiently, for statistical purposes, as well as for advertising purposes. You can find more information about our use of cookies, as well as change your settings and preferences, as detailed under cookie declaration.

Most browsers will allow you to erase cookies from your device, block acceptance of cookies, or receive a warning before a cookie is stored. You may set your browser to block all cookies, including cookies associated with our website, or to indicate when a cookie is being used by us, by adjusting the privacy and security settings of your web browser.

7. SHARING PERSONAL DATA

We share your Personal Data with third parties, including our service providers that help us provide our Services. You can find in the table below information about the categories of such third-party recipients.

CATEGORY OF RECIPIENT	DATA SETS	PURPOSE OF SHARING
Service providers	All types of Personal Data	We employ other companies and individuals to perform functions on our behalf. Examples include sending communications, processing payments, analyzing data, providing marketing and sales assistance (including advertising and event management), identifying errors and crashes, conducting customer relationship management, and providing training. These third-party service providers have access to Personal Data needed to perform their functions, but they are prohibited from using your Personal Data for any purpose other than providing us with requested services.
Marketing partners	Online Identifiers, Usage Data, etc.	We engage with marketing partners and share Personal Data to market and promote our Services, including for targeted ads. These may include social media partners or other marketing services operators, including by way of placing their cookies or other tracking technologies on our website. These marketing partners may combine your Personal Data with other data they collect independently from you through other websites you visit online.
Any acquirer of our business	All types of Personal Data	We may share Personal Data, in the event of a corporate transaction (e.g., sale of a substantial part of our business, merger, consolidation or asset sale). In the event of the above, our affiliated companies or acquiring company will assume the rights and obligations as described in this Privacy Policy.
Affiliated company	All types of Personal Data	We may share certain information with our affiliated company, for sales and marketing purposes.
Law enforcement, governmental agencies or authorized third parties	Subject to law enforcement authority request	For law enforcement, enforcement of our policies and agreements other customer rights and security detections, etc. We may share certain data when we believe it is appropriate to with governmental agencies or authorized third parties, or protect the rights, property, or security of Wonderful, our customers, or others.

For more information about the third-party recipients, please see the Wonderful Trust Center.

When we share information with service providers and partners, we ensure they only have access to information that is strictly necessary for them to provide services to us. These parties are required to secure the data they receive and perform their services while ensuring compliance with all applicable data protection regulations. Note, that we will not share your Personal Data with additional third parties or for purposes not detailed in the table above or subsequently authorized by you or required by applicable law. You may contact us directly at: dpo@wonderful.ai regarding our use or disclosure of your Personal Data.

8. DATA RETENTION

We retain Personal Data we collect as long as it remains necessary for the purposes set forth above, all in accordance with applicable laws, or until an individual expresses a preference to opt-out.

Other circumstances in which we will retain your Personal Data for longer periods of time include: (i) where we are required to do so in accordance with legal, regulatory, tax, or accounting requirements; (ii) for us to have an accurate record of your dealings with us in the event of any complaints or challenges; or (iii) if we reasonably believe there is a prospect of litigation relating to your Personal Data. Please note that, except as required by applicable law, we may at our sole discretion delete or amend information from our systems, without notice to you, once we deem it is no longer necessary for such purposes.

9. SECURITY

At Wonderful.ai, security is our highest priority. We design our systems with your security and privacy in mind. We have implemented physical, technical, and administrative security measures for the Services that comply with applicable laws and industry standards. The methods that we use to protect your Personal Data include maintaining compliance programs that validate our security controls; protecting the security of your information during transmission to or from our website, applications, products, or Services by using encryption protocols and software.

Please review our Trust Center to learn more.

Note that we cannot be held responsible for unauthorized or unintended access beyond our control, and we make no warranty, express, implied, or otherwise, that we will always be able to prevent such access.

Please contact us at: dpo@wonderful.ai if you feel that your privacy was not dealt with properly, in a way that was in breach of our Privacy Policy, or if you become aware of a third party’s attempt to gain unauthorized access to any of your Personal Data. We will make a reasonable effort to notify you and the appropriate authorities (if required by applicable law) in the event that we discover a security incident related to your Personal Data.

10. DATA TRANSFER

Due to our global business operation, your Personal Data may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. However, in all cases, we will take appropriate measures to ensure that your Personal Data receives an adequate level of data protection upon its transfer.

Specifically, if and where Personal Data collected within the EEA is transferred outside the EEA to countries or frameworks that have not been granted with an adequacy decision by the European Union, and therefore do not provide an adequate level of protection to your Personal Data when it is transferred to such third country or under such framework, such transfer is subject to, and made pursuant to the standard contractual clauses.

Additionally, if and where Personal Data collected within the United Kingdom is transferred outside the United Kingdom to countries or frameworks that have not been granted an adequacy decision by the UK Information Commissioner Office (“ICO”), and therefore do not provide an adequate level of protection to your Personal Data when it is transferred to such third country or under such framework, such transfer is subject to, and made pursuant to, the UK standard contractual clauses.

11. PRIVACY RIGHTS

We understand that privacy preferences vary among individuals, and we are committed to transparency regarding the Personal Data we collect and how it is used. Depending on your relationship with us, your location, and applicable data protection laws, you may have certain rights and choices with respect to your Personal Data.

Under the GDPR, you have the following rights over your personal data:

Right to be informed: You can obtain information about the processing of your personal data.
Right of access: You can obtain access to the personal data held about you.
Right to rectification: You can ask for incorrect, inaccurate or incomplete personal data to be corrected.
Right to erasure: You can request that personal data be erased when it’s no longer needed or if processing it is unlawful.
Right to restriction of processing: You can request the restriction of the processing of your personal data in specific cases.
Right to data portability: You can receive your personal data in a machine-readable format and send it to another controller.
Right to object: You can object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation.
Rights in relation to automated decision-making and profiling: You can request that decisions based on your personal data and that significantly affect you are made by natural people, not only by computers.
Right to complain to the applicable authorities.

For more information about rights for EU residents, please see: https://commission.europa.eu/law/law-topic/data-protection/information-individuals_en

For more information about rights for US residents, please see: https://oag.ca.gov/privacy/ccpa or Section 13 below.

We respect individuals’ rights in any applicable jurisdiction, even if they differ from the rights listed above. Where the IPPL applies, you have the right to opt out of email marketing, request deletion of your personal data maintained in our email marketing database, and request to inspect, correct, or delete certain personal data, in each case as described in, and subject to, the requirements of our Data Subject Request (DSR) process (including the DSR Form).

At any time, you may lodge a complaint with the applicable regulatory authority or contact our DPO, whose details are provided above. You also have the right to appeal. If we decline to take action on your request, we will inform you without undue delay, as required under applicable law. For additional information or to exercise your rights, please contact us at: dpo@wonderful.ai or submit a request via our DSR Form, or manage your cookie preference via the Website or your browser.

12. CHILDREN

Our Services are not intended for use by children, and we do not knowingly collect or maintain information about anyone under the age of 16. Please contact us at: dpo@wonderful.ai if you have reason to believe that a child has shared any information with us.

13. JURISDICTION-SPECIFIC NOTICES

Additional notice for United States residents: notice at collection, supplemental U.S. privacy policy, and your privacy rights.

This Section 13 contains additional information for residents in the United States, including a summary of our personal information handling practices and your rights under U.S. state privacy laws. “Personal Information” (also referred to as “Personal Data” in this Privacy Policy) means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) with you or your household. We do not offer financial incentives or bond-fide loyalty programs in exchange for the collection, use, or disclosure of Personal Information. For more details regarding our personal information handling practices, please review this Privacy Policy.

Categories of Personal Information Collected

We may collect, and have collected in the prior 12 months, the following categories of personal information:

Identifiers and personal information described in the California Customer Records Act (Cal. Civ. Code § 1798.80(e)), such as name, alias, Internet Protocol (IP) address, unique personal identifier, online identifier, and email address.
Internet or other electronic network activity information, including (but not limited to) browsing data and information regarding a consumer’s interaction with an internet website, application, or advertisement.
Geolocation data, such as IP addresses used to infer your approximate location (e.g., country).
Professional or employment-related information, such as business email address, organization name, job title, or position.

Please note that we do not collect, and have not collected in the prior 12 months, personal information that is considered sensitive personal information or data under data privacy laws in the United States.

Sources of Personal Information

We collect the categories of personal information described from the following sources:

Directly from you, for example when you contact us for support or other inquiries. Indirectly from your activity on our website when we use cookies and similar technologies as detailed in Section 6 of the Privacy Policy.From other parties, such as vendors who assist us in performing the Services.

Business or Commercial Purpose for Personal Information Collected

We collect the categories of personal information for the following business or commercial purposes:

To operate, provide, enable, and enhance our Services.
To research and develop new features.
To secure our Services and website, including to audit and detect spam and fraud, debugging and to resolve technical issues and errors.
For internal analytics and statistics used to improve our Services and the way we offer them.
For verification and authentication purposes.
To create and designate the Customer account and to secure accounts.
For account management and administration, including saving your choices and preferences;
To market our Services, communicate with Customers, Authorized Users or Prospects and send transactional and operational messages.
To infer your general location (e.g., country) based on IP address.
To respond to your inquiries or requests, send you the information you have requested to receive, or take actions requested by you.
To respond to law enforcement and address legal requirements.
To have records of our communications and for customer support efforts.

Retention of Personal Information

Except as required by applicable law, we are not obliged to retain Personal Information for any particular period, and we may delete it at any time in accordance with our retention practices. For more information, please see Section 8 of this Privacy Policy.

Disclosure of Personal Information

We disclose, and may have disclosed in the prior 12 months, the categories of personal information described in this Privacy Policy in the circumstances described below and for the purposes described herein.

To our service providers, contractors, and processors who perform functions and services on our behalf, including cloud computing, storage, operations, analytics, account management, management or security tools, communications, fraud prevention, enrichment, development, and identifying and resolving errors and crashes.
If we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements. We may also disclose personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of our Platform, the public, or others.
To our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
In connection with, or during negotiations concerning, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
Between current and future parents, affiliates and subsidiaries and other companies under common control and ownership.
With your consent or at your direction.

“Sale” and “Sharing” of Personal Information

We do not “sell” information in the conventional sense of the term (i.e., we do not exchange Personal Information directly for money). However, for retargeting and analytics purposes when promoting our Services, we may use third-party providers, tracking tools, advertising networks, and social media platforms. These services may function by placing cookies, pixels, or other tracking technologies on our website and disclosing online identifiers and browsing or engagement information to these vendors.

Opt-Out Preference Signals and Do Not Track

Opt-Out “do not sell or share my personal information”: You can use the cookie manager available on the website to opt out of the sale or sharing at any time.

We Honor Opt-Out Preference Signals: We honor opt-out preference signals. An opt-out preference signal is a signal that is sent by a platform, technology or mechanism on your behalf that communicates your choice to opt-out of the sharing for targeted advertisements or sale of your personal information. You can learn more about implementing opt-out preference signals here or by exploring other developing technologies and services that offer this tool.

We treat opt-out preference signals as valid requests to opt-out of the sale or sharing of your personal information under privacy laws. Ordinarily, an opt-out preference signal is sufficient for us to honor your request, but in some instances, we may request additional information to help facilitate your request for offline sales or sharing. We will not use, disclose or retain this additional information for any purpose other than to facilitate the request. Please note that you may also opt out of the sale or sharing of your personal information through the other methods described in the Instructions on How to Exercise Your Privacy Rights section below.

Children

The Website and Services are not intended for or directed at children under the age of 18, and we do not knowingly collect personal information from children under the age of 18. We also do not knowingly sell or share the personal information of children under the age of 18.

Your Privacy Rights

U.S. state privacy laws may provide consumers certain rights with respect to their personal information, subject to exceptions. Subject to applicable limitations, you may have the following rights:

Right to Delete. You have the right to request us to delete the personal information we have collected about you.
Right to Correct. You have the right to request us to correct inaccurate personal information we maintain about you.
Right to Confirm Processing, Know and Access. You have the right to confirm whether we are processing your personal information and know and access the personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of personal information and service providers, contractors and third parties to whom we disclosed personal information, and the specific pieces of personal information we have collected about you. You have the right to receive this information in a format, to the extent technically feasible, that is portable, usable, and allows you to transmit personal information to a person without impediment or hindrance.
List of Specific Third Parties: You have the right, at our option, to receive a list of the specific third parties, other than natural persons, to which we have disclosed either: (i) your personal information or (ii) any personal information.
Rights Related to Profiling. You have the right to opt out of the processing of your personal information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. However, this right does not apply because we do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
Rights Related to Sharing for Targeted and Cross-Context Behavioral Advertising or Sale. You have the right to opt out of the sharing of your personal information for targeted or cross-context behavioral advertising or the sale of your personal information as set forth above.
Rights Related to Sensitive Personal Information or Data. Data privacy laws may provide additional protection for sensitive personal information or data. However, this right does not apply because we do not process sensitive personal information or data.
Right to No Discrimination. You have the right not to be discriminated against for exercising any of your privacy rights. This includes us not: (a) denying you goods or services; (b) charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; (c) providing you a different level or quality of goods or services; (d) suggesting to you that you will receive a different price or rate for goods or services or a different level or quality of goods or services; and (e) retaliating against you for exercising your privacy rights.
Right to Appeal. If we decline to take action in response to your exercise of privacy rights, we will inform you of the reason for denying your request and provide you with instructions on how to appeal the decision.

Instructions on How to Exercise Your Rights:

You may exercise your privacy rights by completing our DSR Form and contacting us at dpo@wonderful.ai. In some instances, we will need to verify your identity before honoring your privacy rights request. We will verify your identity by asking you to provide personal information related to your recent interactions with us. We will honor your privacy rights request within 45 calendar days of receipt, unless we request an extension as permitted by data privacy laws. However, we will honor your opt-out request within 15 business days.

Appealing:

You may appeal a denial of your privacy right requests by contacts us at dpo@wonderful.ai. Within 45 days of receipt of an appeal, we will inform you in writing of any action taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, you may submit a complaint to the Attorney General of your state.

Authorized Agents:

If permitted or required by applicable law, you may exercise your privacy rights through an authorized agent (which may include a guardian or conservator). If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please contact us at: dpo@wonderful.ai.

Shine the Light Law Disclosure for California Residents:

California law permits residents of California to request certain details about how their information is shared with third parties for direct marketing purposes.