Every guest message Sarah answers passes through our servers.

This policy says what we keep, how long we keep it, and how you get it back or have it erased.

You own the records we process.

Export every conversation and guest contact from the dashboard, on any day you decide to.

We have never sold a guest record.

No data broker, advertising network or research buyer has ever received one.

Your data lives in Frankfurt.

Our primary servers are in the EU, in Frankfurt.

You can take it out, or have it erased.

A full export from the dashboard; deletion clears account data within 30 days and voice recordings within 90.

Privacy PolicyLegal · 10 sectionsLast updated · October 2026
On this page
Data Collection

We collect information you provide directly: account information (name, email, company), payment information (processed securely by Stripe), and messaging content processed by our intelligent systems.

We automatically collect usage data and interaction logs, device and browser information, and voice recordings when using voice features.

How We Use Data

We use your data to provide, maintain, and improve our services. This includes sending technical notices and support messages, responding to your comments and questions, and detecting and preventing fraud and abuse.

We may use anonymized data to improve our systems. We generate analytics and usage reports for your dashboard to help you understand your operations better.

Data Sharing

We share data only with service providers necessary for our operations (hosting, payment processing), AI model providers (Google, OpenAI) for processing conversations, and professional advisors when required.

We share with law enforcement only when legally required, and with business partners only with your explicit consent. We never sell your personal information.

Security

We implement enterprise-grade security measures including TLS encryption for all data in transit, row-level security enforced by the database that separates every hotel account, encrypted backups, and regular security audits and monitoring.

All backups are encrypted with AES-256 and stored in geographically separated locations.

Cookies

On wizorks.com we set one cookie, wizorks_locale, and only when you pick a language with the language switch. That choice, and your theme if you pick Light or Dark, are also kept in your browser's own storage. We use no analytics or advertising cookies, so there is nothing to accept.

The chat in the corner sets no cookie. Until you open it, it starts no session and stores nothing about you: it only reads the chat's settings and keeps their colour and position in your browser (wz_chat_look). Opening it starts a chat: your browser then keeps a session key so the conversation survives a new page, and our server records the session with your IP address, your browser type and the page you opened it on — without campaign tags or other parameters — together with what you write. If you send no message, that record, including any name or email you entered, is deleted 30 days after its last use.

When the phone field appears, it guesses your dialling code from your device's time zone or language, in your browser and for that tab only (wizorks.user.country). Campaign tags in the page address are sent with a form only if you submit one, and kept for that tab only. The Wizorks dashboard and guest portal use only the cookies they need to work, such as keeping you signed in.

Your Rights

You have the right to access your personal data, correct inaccurate data, request deletion of your data, export your data in a portable format, opt-out of marketing communications, withdraw consent at any time, and lodge complaints with your data protection authority.

Data Retention

Account data is retained while your account is active plus 30 days after deletion. Conversation logs are retained for 12 months, then anonymized. Voice recordings are deleted after 90 days. Payment records are retained as required by law. Analytics data is anonymized indefinitely.

Messaging & WhatsApp

We only send messages to users who have explicitly opted in. Message content is processed only for the service you requested. We never send spam — only transactional or direct response messages.

We comply with Meta WhatsApp Business Policy and Telegram Terms of Service. You can opt out at any time by sending "STOP" or contacting [email protected].

International Data Transfers

Our primary servers are located in the EU (Frankfurt, Germany) via DigitalOcean. AI processing may involve servers operated by Google and OpenAI.

Contact Us

For privacy inquiries: [email protected]. For general questions: [email protected]. Address: Rabat, Morocco.