Privacy
Wentzel Investments LLC, a Florida limited liability company, is the controller for this portal. We collect personal data only for purposes disclosed in our privacy notice. Data subject requests (access, portability, deletion, rectification) are honored within 30 days under GDPR, CCPA, and state-equivalent regimes.
Lawful bases
| Surface | Lawful basis |
|---|---|
| Account email + GitHub identity | GDPR Art 6(1)(b) — contract performance |
| Marketing waitlist email | GDPR Art 6(1)(a) — consent (with double opt-in) |
| Audit-chain entries (actor + timestamp) | GDPR Art 6(1)(c) — legal obligation + Art 6(1)(f) — legitimate interest |
| Visitor IP + UA (this trust center) | GDPR Art 6(1)(f) — abuse prevention; truncated to /24 |
Controls
| Control | Area | Status | Evidence |
|---|---|---|---|
| WCB-CC-26 | Privacy notice & consent | Aligned | /privacy + per-product privacy URL |
| WCB-CC-27 | Data subject rights — access/portability/deletion | Partial | /dsr (audit-chain logged; automated packages/data-export pipeline not yet wired — fulfilment is manual, within 30 days) |
| WCB-CC-33 | Privacy by design — data minimization | Aligned | Schema labels enforce class-aware handling |
Data subject rights
File a request via the DSR portal. The form stores the request in our data-subject-request queue (kept for 24 months after the request is closed), records a pseudonymised entry (keyed email hash plus request metadata) on the audit chain, and returns a reference ID; identity verification and fulfilment are a privacy-team process within 30 days.
Automated cascading deletion and immediate pseudonymization via packages/data-export are on the roadmap and are not wired to this intake.
AI training
No personal data is used to train AI models. Customer prompts and completions are sent to Anthropic only through the authenticated Wentzel Cloudflare AI Gateway and are governed by Anthropic's DPA; we do not contribute customer data to model training pipelines. Direct-provider and AWS Bedrock transports are not enabled.
Cookies & consent
Owner-approved 2026-10-04; no counsel review.
This trust center sets only strictly-necessary cookies required for the site to function. It loads no third-party analytics, advertising, or social trackers. We surface a consent control on every page anyway, so that if any optional cookie is ever introduced it stays behind your choice.
Your consent experience depends on where you are, determined from the country your network connection resolves to at our edge:
- EU/EEA, the UK, and Switzerland (opt-in): a banner blocks any non-essential cookie or script until you accept. Nothing optional loads beforehand.
- Everywhere else (opt-out): you receive notice and can opt out of any optional cookie at any time using the “Cookie settings” link in the footer.
- Region unknown: if we cannot determine your country, you get the opt-in experience.
We honor the Global Privacy Control (GPC) signal: if your browser sends it and you have not yet made a choice here, optional cookies are treated as opted-out without any further action from you. A choice you make explicitly through the consent controls takes precedence.
You can review or change your choice at any time via the Cookie settings link in the footer of every page.