Privacy
We collect personal data only for purposes disclosed in our privacy notice. Data subject requests (access, portability, deletion, rectification) are honored within 30 days under GDPR, CCPA, and state-equivalent regimes.
Lawful bases
| Surface | Lawful basis |
|---|---|
| Account email + GitHub identity | GDPR Art 6(1)(b) — contract performance |
| Marketing waitlist email | GDPR Art 6(1)(a) — consent (with double opt-in) |
| Audit-chain entries (actor + timestamp) | GDPR Art 6(1)(c) — legal obligation + Art 6(1)(f) — legitimate interest |
| Visitor IP + UA (this trust center) | GDPR Art 6(1)(f) — abuse prevention; truncated to /24 |
Controls
| Control | Area | Status | Evidence |
|---|---|---|---|
| WCB-CC-26 | Privacy notice & consent | Aligned | /privacy + per-product privacy URL |
| WCB-CC-27 | Data subject rights — access/portability/deletion | Partial | /dsr (audit-chain logged; automated packages/data-export pipeline not yet wired — fulfilment is manual, within 30 days) |
| WCB-CC-33 | Privacy by design — data minimization | Aligned | Schema labels enforce class-aware handling |
Data subject rights
File a request via the DSR portal. Cascading deletion across the LLC portfolio propagates within 30 days; pseudonymization fires immediately on Art 17 erasure requests.
AI training
No personal data is used to train AI models. Customer prompts and completions are sent to Anthropic only through the authenticated Wentzel Cloudflare AI Gateway and are governed by Anthropic's DPA; we do not contribute customer data to model training pipelines. Direct-provider and AWS Bedrock transports are not enabled.
Cookies & consent
This trust center sets only strictly-necessary cookies required for the site to function. It loads no third-party analytics, advertising, or social trackers. We surface a consent control on every page anyway, so that if any optional cookie is ever introduced it stays behind your choice.
Your consent experience depends on where you are, determined from the country your network connection resolves to at our edge:
- EU/EEA, the UK, and Switzerland (opt-in): a banner blocks any non-essential cookie or script until you accept. Nothing optional loads beforehand.
- Everywhere else (opt-out): you receive notice and can opt out of any optional cookie at any time using the “Cookie settings” link in the footer.
We honor the Global Privacy Control (GPC) signal: if your browser sends it, optional cookies are treated as opted-out without any further action from you.
You can review or change your choice at any time via the Cookie settings link in the footer of every page.