Privacy Policy

1. Information We Collect

We collect only what is necessary to operate our services.

a. Information you provide

• Name, email address, organization details (when contacting us)
• Account and configuration information (for customers)
• Consent metadata provided through integrations

b. Information processed on behalf of customers

WeConsentNow may process data as a data processor, strictly on instructions from our customers. This may include:

• Consent identifiers
• Timestamps and state changes
• Audit metadata

We do not determine how customer data is used.

2. How We Use Information

We use information to:

• Operate and maintain our services
• Enforce consent at time of use
• Maintain audit and compliance records
• Respond to inquiries and support requests
• Meet legal and regulatory obligations

We do not sell personal data.

3. Consent and Revocation

WeConsentNow enforces consent at the moment of use, based on the state provided by upstream systems and internal policies. Revocation prevents future usage of data in accordance with applicable laws and ecosystem rules.

4. Data Storage and Retention

• Data is retained only as long as required for operational, legal, or audit purposes
• Retention periods are configurable per customer
• Data is logically isolated per tenant

5. Security

We implement technical and organizational measures including:

• Access controls
• Encryption in transit and at rest
• Audit logging
• Environment isolation

See our Security page for more details.

6. Data Location

Data may be stored in India or other jurisdictions as required by customers and applicable law.

7. Your Rights

Depending on your role and jurisdiction, you may have rights to access, correction, or deletion. Requests should be directed to the relevant data controller (our customer).

8. Contact

For privacy-related questions: legal@weconsentnow.com