Privacy Policy

1Introduction

Welcome to Wedey ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how Wedey OÜ collects, uses, and shares information about you when you use our website, our AI-powered recruitment platform, and our services (collectively, the "Services").

Wedey OÜ is the Data Controller for the data collected through our website (e.g., account creation, demo requests). For candidate data processed on behalf of our clients using our platform, Wedey acts as a Data Processor (see our Data Processing Agreement).

2Information We Collect

We collect information to provide our services, improve our AI algorithms, and communicate with you.

• Account Data: When you sign up (Free Trial or Paid Plan), we collect your name, email address, company name, and billing details.
• Usage Data: We collect information on how you interact with our Services, including access times, pages viewed, and the "Wedey Discovery Engine" usage.
• Technical Data: IP address, browser type, device information, and operating system.

3How We Use Your Information

We use your data for the following purposes:

• To provide and maintain the Wedey Service (including AI Job Optimization and Sourcing).
• To process payments and manage subscriptions.
• To communicate with you (onboarding, support, updates).
• To monitor usage and improve our AI models (in an anonymized format).
• To comply with legal obligations (Estonian and EU laws).

4Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using the personal information described above depends on the personal information concerned and the specific context in which we collect it:

• Performance of a Contract: To provide the Wedey services you subscribed to.
• Legitimate Interests: For security, analytics, and improving our product.
• Consent: For marketing communications and cookies (which you can withdraw at any time).

5Data Sharing and Sub-Processors

We do not sell your personal data. We share your information only with third-party service providers ("Sub-processors") who help us operate our business. All service providers are vetted for GDPR compliance.

6Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Account Data: Retained for the duration of your subscription plus 24 months after termination, to allow for reactivation or audit.
• Candidate Data (in your dashboard): Retained for 24 months by default, unless you (the Client) configure a different retention period in your settings or a candidate requests erasure.

7International Data Transfers

Wedey is based in Estonia (EU). Some of our sub-processors (like Stripe or SendGrid) are based in the USA. We ensure that such transfers are protected by appropriate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs).

8Your Data Protection Rights

Under the GDPR, you have the following rights:

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You can request that we correct any information you believe is inaccurate.
• Right to Erasure: You can request that we erase your personal data ("Right to be forgotten").
• Right to Restrict Processing: You can request that we restrict the processing of your personal data.
• Right to Object: You can object to our processing of your personal data.

To exercise these rights, please contact us at legal@wedey.ai.

9Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date."

10Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By email: legal@wedey.ai
• By mail: Wedey OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia.