Privacy Policy
Last updated: August 20, 2026
This Privacy Policy explains how W THREE TECHNOLOGIES LTDA (trade name SOLD OUT PROJECTS), enrolled under Brazilian Taxpayer ID (CNPJ) No. 46.774.605/0001-30, headquartered at Alameda Rio Negro, 503, Alphaville Centro Industrial e Empresarial, Barueri β SP, CEP 06.454-000, Brasil (βWiserβ, βweβ), collects, uses, shares and protects personal data within the Wiser CRM platform, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 β βLGPDβ).
1. Data Controller
W THREE TECHNOLOGIES LTDA (SOLD OUT PROJECTS), CNPJ 46.774.605/0001-30, is the controller of platform users' data. Contact for privacy matters and to exercise your rights: privacidade@wiser.pro.
2. Roles: controller and processor
For data of the users who subscribe to and use Wiser (account data), we act as controller.
For personal data of leads and contacts that the customer enters or captures through Wiser (e.g., people who interact with the customer via WhatsApp or forms), the customer is the controller of that data and we act as processor, handling it solely to provide the service and according to the customer's instructions.
3. Data we collect
From the platform user:
- Name and email (authentication is handled by Clerk, which also manages your password β we do not store your password).
- Phone, company, job title, language and time zone, when provided.
- Usage and technical data: access logs, IP address and browser identifiers.
Processed on behalf of the customer (third-party data):
- Lead and contact data: name, phone, email, city/state, tags and notes.
- WhatsApp conversation content (message text and received/sent media) and deal data.
- Advertising campaign parameters (fbclid, gclid, gbraid, wbraid and UTMs) for source attribution.
4. WhatsApp content and media
To operate the WhatsApp inbox, we store the content of received and sent messages.
Received media (images, audio, video and documents) is downloaded from Meta and re-hosted on our storage provider (Vercel Blob) for display within the platform.
5. Cookies and tracking
We use strictly necessary authentication and session cookies (Clerk) and a functional visual personalization cookie (branding).
Source tracking: a script captures campaign URL parameters (fbclid, gclid and UTMs) and stores them locally in your browser (localStorage) for up to 7 days, for lead source attribution.
We do not use Meta Pixel or Google Analytics on our website.
6. Sharing and sub-processors
We share data with providers acting as processors/sub-processors, to the extent necessary to provide the service:
- Clerk β authentication and identity management (name, email, sessions; password handled by Clerk).
- Supabase β PostgreSQL database, hosted in Brazil (sa-east-1 region).
- Vercel β application hosting and media storage (Vercel Blob).
- Meta Platforms β WhatsApp Cloud API, Conversions API (CAPI) and Meta Ads.
- Gupshup β official WhatsApp Business Solution Provider (BSP) for sending and receiving messages.
- Resend β transactional and marketing email delivery.
- Upstash (QStash) β asynchronous task processing queue.
- Google β Google Ads and Google Calendar, when connected by the customer.
Meta Conversions API (CAPI): we send Meta hashed (SHA-256) versions of email, phone and name, together with the fbc/fbp identifiers, the IP address and the browser user-agent, for conversion measurement and ad optimization.
We do not sell personal data.
7. International data transfers
Some sub-processors (e.g., Meta, Vercel, Clerk, Resend, Upstash and Google) process data outside Brazil. Such transfers rely on the legal bases under the LGPD and on the contractual safeguards offered by those providers.
8. Retention
We retain personal data while the account is active and for up to 12 months after its termination, except for legal retention obligations for a longer period or an earlier deletion request.
Internal notifications are deleted automatically: read ones after 30 days and unread ones after 90 days.
Tracking parameters stored in your browser expire after 7 days.
9. Your rights
Under the LGPD (art. 18), you may request: confirmation of processing; access; correction; anonymization, blocking or deletion; portability; information about sharing; and withdrawal of consent.
How to exercise: send your request to privacidade@wiser.pro. There is currently no self-service flow β requests are handled manually by our team.
For lead and contact data where the customer is the controller, direct your request to the controlling customer; we will support them as processor.
10. Security
We adopt technical and organizational measures, including per-organization data isolation (RLS), encryption of sensitive tokens at rest and encrypted traffic (HTTPS). No system is completely secure, and we cannot guarantee absolute security.
11. Minors
The platform is intended for professionals and is not directed to individuals under 18.
12. Changes to this Policy
We may update this Policy from time to time. The current version will always be available on this page, with the update date.
13. Governing law and venue
This Policy is governed by Brazilian law, in particular the LGPD. The courts of the Comarca de Barueri, Estado de SΓ£o Paulo (Barueri, State of SΓ£o Paulo, Brazil) are elected as the competent venue.
14. Contact
W THREE TECHNOLOGIES LTDA (SOLD OUT PROJECTS) β CNPJ 46.774.605/0001-30. Alameda Rio Negro, 503, Alphaville Centro Industrial e Empresarial, Barueri β SP, CEP 06.454-000, Brasil. Email: privacidade@wiser.pro.