Legal

Privacy Policy

How WM Tech Solutions collects, uses, stores, and protects your data.

Last updated: June 1, 2026 · Effective date: January 15, 2026

1. Who We Are

WM Tech Solutions Inc. ("WM Tech", "we", "our", "us") is a technology company a Delaware C-Corporation headquartered in San Francisco, USA, operating the platform available at wmtechsolutions.online and app.wmtechsolutions.online. We provide AI-powered customer support automation services for ecommerce businesses. Our principal address is 2261 Market Street, Suite 4512, San Francisco, CA 94114, USA. Contact: privacy@wmtechsolutions.online

2. Data We Collect

We collect data in two categories: data you provide directly when using our platform, and data processed on your behalf as part of our services.

Account and billing data: Name, business email, company name, payment method details (processed by Stripe — we do not store card numbers), and billing address.

Store operational data: Order records, customer support tickets, return requests, customer messages (WhatsApp, email), product photos submitted for return analysis, and transaction records — all processed as a data processor on behalf of our merchant customers.

Usage data: Platform login events, feature usage patterns, API call logs, and dashboard interaction data used to improve the platform.

3. How We Use Your Data

  • To provide and operate the WM Tech platform services you've subscribed to
  • To train and improve AI models — using anonymized, aggregated data only; never individual store data without explicit consent
  • To send product updates, security alerts, and billing notifications
  • To comply with legal obligations and respond to lawful data requests
  • To detect, prevent, and investigate security incidents or platform abuse

We do not sell your data to third parties. We do not use your store's customer data for advertising or marketing purposes outside of the services you've subscribed to.

4. Data Storage and Retention

By default, all data is stored in Google Cloud data centers in the United States (us-central1 region). Enterprise customers may select EU (europe-west4) or Asia-Pacific (asia-southeast1) regions for data residency compliance. Your store data is retained for the duration of your subscription plus 90 days following termination. You may request immediate deletion at any time by contacting privacy@wmtechsolutions.online.

5. GDPR Rights (EEA and UK Users)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under GDPR and UK GDPR:

  • Right to access — request a copy of the personal data we hold about you
  • Right to rectification — correct inaccurate personal data
  • Right to erasure — request deletion of your personal data ("right to be forgotten")
  • Right to data portability — receive your data in a machine-readable format
  • Right to object — object to processing based on legitimate interests
  • Right to restrict processing — request that we limit how we use your data

To exercise any of these rights, contact privacy@wmtechsolutions.online. We will respond within 30 days. WM Tech acts as a Data Processor for merchant customer data and a Data Controller for account-holder data. Our Data Processing Agreement (DPA) is available on request for enterprise customers.

6. Security

We are SOC 2 Type II certified and ISO 27001 compliant. All data in transit is encrypted using TLS 1.3. All data at rest is encrypted using AES-256. We conduct annual third-party penetration tests and maintain a responsible disclosure program. Enterprise customers may opt for Customer-Managed Encryption Keys (CMEK).

7. Subprocessors

We use the following third-party subprocessors to operate our platform. All subprocessors are bound by data processing agreements consistent with GDPR requirements:

  • Google Cloud — Infrastructure, compute, storage, and AI model inference
  • Stripe — Payment processing for platform billing
  • WhatsApp (Meta) — Message delivery via WhatsApp Business API
  • Sendgrid — Transactional email delivery
  • Datadog — Infrastructure monitoring and logging

8. Cookies

Our marketing website (wmtechsolutions.online) uses strictly necessary cookies for session management and optional analytics cookies (Google Analytics) to understand traffic patterns. The platform (app.wmtechsolutions.online) uses only strictly necessary session cookies. You may opt out of analytics cookies at any time via our cookie consent banner.

9. Changes to This Policy

We will notify all account holders by email at least 14 days before any material change to this Privacy Policy takes effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

10. Contact

For any privacy-related queries, contact our Data Protection Officer at privacy@wmtechsolutions.online or by post to: WM Tech Solutions Inc., Data Protection Officer, 2261 Market Street, Suite 4512, San Francisco, CA 94114, USA.