Privacy policy

What this policy covers

This policy covers wecomply.io and the Wecomply tools listed on it. It explains what we collect, why, and what we do not do.

Individual tools may have their own, stricter statement. Wecomply Argus is one: it makes no network requests at all, so nothing it sees ever reaches us. Where a tool’s own document is stricter than this policy, the tool’s document is the one that applies to that tool.

What we collect

This website. No analytics, no cookies, no tracking pixels, no advertising scripts, no third-party fonts. Nothing on wecomply.io calls out to another company, so no other company learns that you visited.

Our hosting provider keeps ordinary web-server access logs as part of running the server: IP address, timestamp, the page requested, referrer and browser user-agent string. We do not use these to build a profile of you, and we do not combine them with anything else.

Forms. If you join the launch list, we receive the email address you type. If you use the contact form, we receive your name, email address, the subject you picked and your message.

Wecomply Argus. Nothing. The extension has no account, no server and no telemetry. It reads page content on your own device to tell a fake warning from an ordinary page, in memory, and discards it when the check finishes.

How it is used

Your email address on the launch list is used once, to tell you Argus has been listed. It is not added to a marketing list, and there is no newsletter.

A contact message is used to answer you and, where you are reporting a false positive, to improve detection. A report might change a detection rule; it never becomes a record about you.

We do not sell anything to anyone, we do not profile visitors, and we do not use anything collected here to train machine-learning models.

Who it is shared with

Two kinds of supplier see data because they have to in order for it to work: our hosting provider, which runs the server and its logs, and our email provider, which carries the messages.

Nothing is sold, rented or passed to advertisers, data brokers or analytics companies. We would disclose information only where a law or a valid legal order requires it.

How long it is kept

Launch-list addresses are deleted once the launch has been announced, or immediately if you ask.

Correspondence is kept while it is useful for support and then deleted.

Server access logs are kept on our hosting provider’s standard retention schedule and are not archived by us.

Your rights and how to contact us

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. There is not much of it, and we will not ask you to justify the request.

Use the contact form and pick Privacy request. If you think we have handled your information badly, you may also complain to the data protection authority where you live.