Privacy Policy

This policy explains what personal data wetheapex ("we", "us") collects through https://wetheapex.com and when you contact us, why we collect it, who we share it with, how long we keep it and the rights you have. wetheapex is based in the United Arab Emirates and is responsible (the "controller") for this data.

The short version

We collect only what you give us when you contact us, book a call or use the chat, plus basic technical data needed to run the site securely.
We use it to reply to you and to prepare for and hold a call. Nothing else.
We do not sell your data, share it for advertising, or use it to train AI models.
Analytics run only if you accept them.
You can ask to see, correct or delete your data at any time by emailing support@wetheapex.com.

Which laws this policy follows

We are based in the UAE and work with businesses in the UAE, the United States, Canada, the United Kingdom, India, Saudi Arabia, Australia and Singapore. This policy is written to meet the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL"), and to give you the information and rights required by:

the EU General Data Protection Regulation and the UK GDPR;
US state privacy laws, including California's CCPA as amended by the CPRA;
Canada's PIPEDA and Quebec's Law 25;
India's Digital Personal Data Protection Act, 2023;
Saudi Arabia's Personal Data Protection Law;
Australia's Privacy Act 1988 and the Australian Privacy Principles;
Singapore's Personal Data Protection Act 2012.

Some of these laws apply only to businesses above a certain size. We offer the rights described below to everyone, wherever they live.

What we collect

Data	When	Why	Legal basis
Name, work email, company, company size, current tools, what you would like to fix, budget range, area of interest	You submit the contact form	To reply to your enquiry and prepare for a call	Steps you ask us to take before a contract; consent
Name, email, chosen time and anything you add to the booking	You book a call	To schedule and hold the call	Steps you ask us to take before a contract
Emails and messages you send us, and notes from our call	You contact us or talk to us	To answer you and, if you wish, prepare a proposal	Steps you ask us to take before a contract; legitimate interests
Messages you type into the chat assistant	You use the chat	To answer your question	Consent; legitimate interests
IP address, browser type and time of request	Every visit, automatically	To deliver the site, keep it secure and stop spam and abuse	Legitimate interests
Your cookie choice and the currency you pick in the savings estimate	You use those controls	To remember your choice on this device	Strictly necessary

We do not ask for sensitive personal data, such as health, financial account, biometric, religious or government ID information. Please do not include it in forms, emails or the chat.

We collect personal data directly from you, and from our booking provider when you book a call. We do not buy personal data or collect it from data brokers.

How we use AI

The chat assistant on this site is an automated tool, not a person. It introduces itself as an AI assistant and can hand you over to us.
We do not make decisions about you by automated means that have legal or similarly significant effects. A person reads every enquiry.
Your data is not used to train AI models, by us or by our providers.

We do not sell personal data or share it for targeted advertising. We share it only with service providers that help us run the site and the business, under contracts that require them to protect it and use it only on our instructions:

Website hosting and security: Vercel (United States, with servers worldwide)
Email delivery for the contact form: Resend (United States)
Call booking: Cal.com (United States and European Union)
Business email: our email provider
Analytics: none at present. If we add an analytics tool it will load only after you accept it, and it will be listed here first.
Chat assistant: none. The assistant answers from prepared responses on our own server.

We may also disclose personal data:

to professional advisers, such as lawyers and accountants, under a duty of confidentiality;
if the law, a court or a regulator requires it, or to protect our rights or someone's safety;
to a buyer or successor if our business is sold or merged, in which case this policy continues to apply to your data.

International transfers

Some of our providers process data outside the country where you live, including in the United States and the European Union. When we transfer personal data across borders, we do so only where the law allows it and with the safeguards it requires, such as standard contractual clauses for transfers from the EU, the UK International Data Transfer Addendum, and the conditions for cross-border transfers under the UAE PDPL, Saudi PDPL and other applicable laws. You can ask us for more detail at support@wetheapex.com.

How long we keep it

Data	How long
Enquiries, bookings and related emails	Up to 24 months after our last contact, unless you become a client
Client records	For the length of our engagement, then as long as the law requires for business and tax records
Chat messages	Not stored. They are answered on our server and discarded.
Technical logs (IP address, browser)	A short period set by our host, normally a few days, for security and troubleshooting
Spam-protection data (IP address)	Held only in server memory for a few minutes
Your cookie and currency choice	On your device until you clear it

When we no longer need data, we delete it or make it anonymous.

How we protect it

Connections to this site are encrypted (HTTPS).
Access to enquiries is limited to the people who need it, using accounts with two-factor authentication.
API keys and passwords are stored on the server, never in the browser or in code.
We use reputable providers that maintain recognised security programmes.

No system is completely secure. If a breach is likely to put your rights at risk, we will tell you and the relevant regulator within the time the law requires. See our Security & data handling page for how we protect client data on projects.

Your rights

Wherever you live, you can ask us to:

Tell you what personal data we hold about you and how we use it, and give you a copy (access);
Correct or complete data that is wrong or out of date;
Delete your data;
Restrict how we use it, or object to us using it, including for direct marketing;
Send your data to you or another organisation in a portable format (portability);
Withdraw consent at any time, without affecting what we did before.

Some rights have legal limits. For example, we may need to keep records the law requires. If we cannot do what you ask, we will tell you why.

How to ask: email support@wetheapex.com. We will confirm receipt, may ask you to confirm your identity, and will reply within 30 days, or sooner where the law requires. You may use an authorised agent; we may ask them for proof that you have authorised them. We will never treat you differently for using your rights.

Additional information by country

United Arab Emirates: you also have the right to object to decisions based solely on automated processing. Complaints can be made to the UAE Data Office.
European Union and United Kingdom: you can complain to your local data protection authority, or in the UK to the Information Commissioner's Office (ico.org.uk). Where we rely on legitimate interests, we have balanced them against your rights; you can ask us for details.
United States: in the past 12 months we have collected identifiers (such as name, email and IP address), professional information (such as company and role) and, if you accept analytics, internet activity. We collected them for the purposes listed above. We do not sell or "share" personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information. Because analytics stay off unless you opt in, we honour browser privacy signals such as Global Privacy Control by default. If we decline a request, you can appeal by replying to our decision; if your appeal is refused, you can contact your state Attorney General.
Canada: you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information. The person responsible for protecting personal information is named below.
India: you have the right to grievance redressal and to nominate another person to exercise your rights if you die or become unable to. Please contact our grievance contact below first; if you are not satisfied with our response, you can complain to the Data Protection Board of India.
Saudi Arabia: you can complain to the Saudi Data and AI Authority (SDAIA).
Australia: if you are not satisfied with how we handle a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au). You can deal with us anonymously or under a pseudonym where that is practical, for example when asking a general question in the chat.
Singapore: you can contact our data protection officer below, and the Personal Data Protection Commission.

Marketing

We do not add you to a mailing list because you contacted us. If we ever send newsletters, we will ask first, and every message will have a one-click unsubscribe link.

Children

This site is for businesses. It is not directed at children and we do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, email support@wetheapex.com and we will delete it.

Data we handle for clients

This policy covers data collected through this site and our own business contacts. When we build or run systems for a client, the client decides how its customers' data is used and is the controller; we act as a processor on its written instructions, under a data processing agreement that covers confidentiality, security, sub-processors, breach notice and deletion at the end of the project. If you are a customer of one of our clients, please contact that client first.

Contact, data protection officer and grievance contact

Muthuraman, wetheapex Email: support@wetheapex.com

Muthuraman is responsible for this policy and acts as our data protection officer, the person in charge of personal information under Quebec law, and our grievance contact under Indian law.

Changes to this policy

We will update this page when our practices or the law change, and revise the date at the top. If a change materially affects how we use data we already hold about you, we will tell you before it takes effect.