Privacy Policy

Who is responsible for your data

Wefta is operated under the name Wefta. For questions about this policy or your data, use our support page.

Information we collect

We collect the information you give us directly, such as your name, email, and the content you organize inside your Space, Groups, and Topics. We also collect basic technical information needed to operate the service, such as login timestamps and device or browser type.

• Account information: name, email, password (stored encrypted)
• Content you create: Spaces, Groups, Topics, and anything you capture into them
• Usage information: access logs, timestamps, device and browser type
• Billing information, handled by our payment processor, never stored directly by us

Data categories, purposes, and retention

We retain each category only for as long as needed for its stated purpose, then delete or anonymize it unless a legal, tax, security, or dispute-related obligation requires continued retention.

• Identity and contact details: account creation, sales and support responses; retained while relevant to the relationship and afterward as required by law.
• Workspace content: providing the Wefta service; retained until the customer deletes it or the account is closed, subject to backup and legal retention cycles.
• Usage, security and consent records: service security, measurement and proof of choices; retained for the period needed for those purposes.
• Billing and transaction records: subscription administration, fraud prevention, tax and accounting; retained for the applicable legal and accounting period.

Why we use it

We use this information to provide and improve the service, to keep your account secure, to communicate with you about your account or changes to the product, and to comply with legal obligations.

Legal basis for processing

Depending on where you are, we rely on your consent, the performance of the contract between you and Wefta, our legitimate interest in operating and improving the service, or a legal obligation, as the basis for processing your information.

Who we share it with

We do not sell your information. We share it only with providers that help us run Wefta, under agreements and settings designed to protect it, or when required by law. Our current providers include Cloudflare for hosting, edge delivery and Worker execution, Attio for CRM and sales records, Stripe for payment processing and billing, Google Tag Manager and Google Analytics for consent-controlled site measurement, Microsoft Clarity for consent-controlled product analytics, and Google Fonts for typography requests.

International data transfers

Wefta's website and API are hosted and delivered through Cloudflare's global network. Cloudflare Workers normally process requests at a nearby data center, and their code and secrets are distributed globally. Data sent to Attio, Stripe, Google, Microsoft and other providers is handled in their own cloud infrastructure. The precise storage and processing location can vary by provider, service, account configuration and applicable subprocessors, so we do not represent that all data remains in Brazil or in one country. When international transfers occur, we use safeguards appropriate to the transfer and applicable law.

How long we keep it

We keep your information for as long as your account is active, and for a limited period afterward as needed to comply with legal, tax, or security obligations. You can request earlier deletion, as described below.

Security

We use technical and organizational measures designed to protect your information, including encryption in transit and access controls. No system is completely immune to risk, and we will notify you if an incident affects your data, as required by law.

Cookies

This site uses strictly necessary technical requests, including Google Fonts. Google Analytics through Google Tag Manager and Microsoft Clarity are optional and activate only after consent through our cookie banner. We use Cloudflare to host and deliver the site and Attio to receive sales inquiries submitted through the site. Stripe processes paid subscription transactions; Wefta does not store complete payment card details. You can change your choice anytime via the "Cookie settings" link in the footer.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your information, to withdraw consent, and to object to certain uses of your data. To exercise any of these rights, use our support page. We aim to respond within the timeframe required by applicable law.

Data protection officer

Felipe Venturini is Wefta's data protection officer. Requests can be submitted through the support page.

Children

Wefta is not directed at children, and we do not knowingly collect information from anyone under the age required by applicable law to consent on their own behalf.

Changes to this policy

We may update this policy as the product or applicable law changes. We will update the date at the top of this page, and for material changes, we will make a reasonable effort to notify you directly.