Privacy Policy
Last updated: 17 July 2026
This policy explains what personal data Waseit processes and your rights, in line with the GDPR.
Data controller
Jalal Ben Cheikh, sole trader — 45 St Donatt's Road, London SE14 6NU, United Kingdom — contact: contact@waseit.net.
Data we collect
Email address (when you request a report or start monitoring); the information you enter for the audit (brand, sector, market, website); the related audit results; and technical data (truncated IP, logs) needed to run and secure the service.
Purposes and legal bases
Provide the audit and monitoring (contract performance); handle billing (legal obligation); send you your report and service-related communications (legitimate interest / consent); secure the service and prevent abuse (legitimate interest).
Processors and recipients
We use providers that process data on our behalf: Supabase (database), Resend (email), Railway (hosting) and our payment provider (billing).
Important: to run the audit, the questions and your business name are sent to the AI providers (OpenAI, Google, Perplexity) to obtain their answers. No payment data is shared with them.
International transfers
Some processors are located in the United States (Railway, Resend) or process data there (the AI providers). These transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, providing appropriate safeguards under the GDPR / UK GDPR.
Retention
Account and monitoring data are kept while the subscription is active, then deleted or anonymised within a reasonable period. Billing data is kept as required by law.
Your rights
You have the right to access, rectify, erase, object to, restrict and port your data. To exercise these rights, email contact@waseit.net. You may also lodge a complaint with the competent data-protection authority: in the UK, the ICO (ico.org.uk); in the EU, your national authority (in France, the CNIL — cnil.fr).
Cookies
The site uses no advertising cookies and no third-party analytics. Any internal measurement is aggregated, cookieless and free of identifying personal data — so no consent banner is required.