Privacy

Your data, plainly explained

What we collect, why we need it, who sees it and how to get it changed or deleted. Written for clients in the US, the UK and Europe.

Last updated 3 November 2026

01Who we are

This policy explains how Wassim and Abdallah, trading as Wedeployed ("Wedeployed", "we", "us") handles personal information on www.wedeployed.com, in the free AI audit, in Launchpad (our client panel) and when you email us.

For this information we are the controller. You can reach us about anything in this policy at [email protected].

We work with companies in the United States, the United Kingdom, the European Union and elsewhere, so this policy is written to meet the GDPR, the UK GDPR and US state privacy laws such as the CCPA.

02What we collect

We only collect what you give us or what we need to run the site:

Contact form: your name, work email, company, phone number if you add one, the services you are interested in and your message.
AI audit: your name, email, company, phone number if you add one, your answers and the scores and estimates we calculate from them.
Launchpad account: your name, email, company, a securely hashed password, and the project updates and messages shared with you.
Email: the messages you send to our addresses, including the sender, subject, body and any attachments.
Usage data: anonymous, aggregated page views, referrer, country and device type from Vercel Web Analytics. It does not use cookies and does not identify you.
Technical logs: IP address, browser and request details kept briefly by our hosting provider for security and debugging.

We do not knowingly collect sensitive information such as health data, and we ask you not to send it to us.

03How we use it and why

Under the GDPR we need a legal basis for each use. Here is what we do and the basis we rely on:

To reply to your message, run your audit and talk to you about working together: to take steps at your request before a contract, and our legitimate interest in answering business enquiries.
To deliver a project and run your Launchpad account: to perform our contract with you or your company.
To keep the site secure and working, and to understand which pages are useful: our legitimate interest in running a reliable website.
To keep business and tax records: to meet our legal obligations.

We do not use your information for advertising, we do not sell it, and we do not share it for cross-context behavioural advertising. We do not use it to train AI models. We do not make decisions with legal or similarly significant effects about you by automated means alone; the audit scores are estimates to start a conversation, not decisions.

04Data we handle for clients

When we build systems for a client we may work with personal information that belongs to that client, such as their customers' emails or CRM records. For that information the client is the controller and we act as their processor, only following their instructions.

Those engagements are covered by a data processing agreement, which lists the providers involved, including any AI model providers, and where the data is processed. If you are a client and need one, ask us at [email protected].

06International transfers

Our providers store data in the United States. When we transfer personal information from the UK or the European Economic Area, we rely on the EU-US Data Privacy Framework and its UK extension where the provider is certified, or on the European Commission's Standard Contractual Clauses and the UK addendum.

07How long we keep it

Enquiries, audits and emails that do not lead to work: up to 24 months after our last contact, then deleted.
Launchpad accounts: while the account is open. When it is closed we delete it within 30 days, apart from records we must keep.
Project and billing records: for the length of the engagement and as long as tax and accounting law requires afterwards, usually up to 7 years.
Hosting logs: a few days to a few weeks, set by our providers.

08Cookies

We use only cookies the site needs to work, so we do not show a cookie banner:

A sign-in session cookie, set when you sign in to Launchpad, so you stay signed in.
wd_audit, set when you finish the audit, so you can come back to your results. It expires after 30 days.

We do not use advertising or tracking cookies. Our analytics work without cookies.

09Your rights

Wherever you are, you can ask us to:

Tell you what personal information we hold about you and give you a copy.
Correct anything that is wrong.
Delete your information.
Send your information to you or another company in a portable format.
Stop or limit how we use it, including objecting to uses based on our legitimate interests.

Email [email protected] and we will reply within 30 days. We may need to confirm who you are first. Making a request is free, and we will not treat you differently for using your rights.

If you are in the EEA or the UK and think we have handled your information badly, you can complain to your local data protection authority, for example the ICO in the UK. We would appreciate the chance to sort it out with you first.

10Notice for US residents

If you live in California or another US state with a consumer privacy law, you have the rights listed above to know, access, correct and delete your personal information, and to opt out of its sale or sharing.

In the last 12 months we collected identifiers (such as name and email), professional information (such as your company), the content of your messages and audit answers, and internet activity limited to anonymous analytics. We collected them from you, for the purposes described above, and disclosed them only to the providers listed under "Who we share it with". We have not sold or shared personal information, and we do not knowingly collect information from anyone under 16.

You or someone you authorise can make a request at [email protected].

11Security

All traffic to the site is encrypted, passwords are stored as one-way hashes, and access to our database and inbox is limited to the founders. No system is perfectly secure, but if a breach affects you we will tell you and the relevant authorities as the law requires.

12Children

Wedeployed is a service for businesses. The site is not meant for anyone under 16 and we do not knowingly collect their information.

13Changes to this policy

We will update this page when our practices change and change the date at the top. If a change matters to how we use information you have already given us, we will tell you by email.