1. Scope
This policy applies to companywisp.com and the CompanyWisp services that provide shared sign-in, account linking, billing, and entitlements for PortWisp, ReplyWisp, ProcessWisp, and future participating products.
Each product may process additional information to provide its own features—for example, tunnels, email, or process telemetry. That product's privacy notice governs its product-specific information. CompanyWisp does not receive that content merely because it provides sign-in or billing.
2. Information we collect
Identity and profile information
When you create or use a CompanyWisp identity, we may receive your name, email address, email-verification status, profile image, and a stable identifier from the sign-in method you choose. If you use Google, we request only the OpenID, email, and profile scopes. We use Google's stable account subject—not your email address—to maintain the upstream identity link.
Account and product links
We keep your CompanyWisp user ID, the participating products you connect, local product-user references, billed accounts, memberships needed for billing, plan and entitlement state, and account-administration actions.
Billing information
We process plan selections, prices, billing cadence, subscription and payment status, credits, invoices, usage-charge requests, and transaction identifiers. Paddle processes payment-card details. CompanyWisp does not store complete card numbers or card security codes.
Security and technical information
We collect information needed to operate and protect the service, including IP address, browser and device characteristics, request timestamps, login and session events, security signals, error records, and audit history. We also receive support communications that you choose to send us.
3. How we use information
- authenticate you and maintain a secure CompanyWisp session;
- return an audience-restricted identity assertion to the product you chose;
- connect your global identity to product-local users without merging by email;
- administer billing, credits, subscriptions, usage charges, and entitlements;
- detect abuse, prevent fraud, investigate incidents, and enforce our terms;
- provide support, service notices, and requested account communications;
- maintain, troubleshoot, and improve reliability and accessibility; and
- comply with legal, tax, accounting, and regulatory obligations.
We do not use Google profile information for advertising, and we do not request access to Gmail, Google Drive, contacts, calendars, or other Google product data as part of sign-in.
4. When we disclose information
We may disclose information in these limited circumstances:
- Participating products. We provide the product you selected with a product-audience identity assertion and the billing or entitlement status it is authorized to receive.
- Service providers. Google may provide sign-in, Paddle provides payment processing, and Google Cloud provides hosting and database, security, and secret-management infrastructure.
- Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, protect people or services, or investigate fraud, abuse, or security incidents.
- Business changes. Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.
We do not sell personal information or share it for cross-context behavioral advertising.
5. Cookies and sessions
CompanyWisp uses essential cookies and similar storage to protect login flows, maintain sessions, remember security state, and operate the administrative area. Participating products create their own separate, host-only application sessions. CompanyWisp does not share a login cookie across unrelated product domains and does not use advertising cookies.
6. Retention
We retain identity and account-link records while your CompanyWisp account is active and as needed to keep connected products working. We retain billing, transaction, tax, credit, security, and audit records for legitimate business purposes and applicable legal obligations. Short-lived authorization codes and login-flow secrets expire quickly; credentials and reusable tokens are stored only in protected or hashed form where the protocol permits.
When information is no longer needed, we delete or de-identify it unless we must retain it for security, dispute resolution, financial recordkeeping, or law.
7. Your choices
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. You may also revoke CompanyWisp's Google access from your Google account. Revocation stops future Google sign-in but does not automatically erase financial or security records we must retain.
To make a privacy request, email privacy@companywisp.com. We may need to verify your identity before completing a request.
8. Security
We use technical and organizational safeguards designed to protect information, including encrypted transport, restricted service credentials, hashed session and authorization secrets, scoped product access, audit records, and managed cloud secret and key services. No system is perfectly secure, and we cannot guarantee absolute security.
9. Children
CompanyWisp services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information to us.
10. International use
CompanyWisp operates from the United States. If you use the services elsewhere, information may be processed in the United States and other places where our service providers operate, subject to applicable safeguards.
11. Changes and contact
We may update this policy as our services or legal obligations change. We will post the updated policy here and change the effective date. If a change is material, we will provide additional notice when reasonably appropriate.
Questions may be sent to privacy@companywisp.com.