Privacy notice
This is a draft and not legal advice. It describes what the platform actually stores, which is the part worth getting right first. A lawyer should complete it for your jurisdiction before you rely on it.
What we hold about you
Your name, email address and organisation name, because an account needs them. A hash of your password — never the password. The addresses you invite, so invitations can be sent.
What we record about what you do
An append-only audit log of actions taken in your organisation: who did what, when, and to which resource. It exists so that you can answer that question too, and it cannot be edited after the fact.
What is in your sites
Whatever you put there. We are a processor for it, not a controller: we do not mine it, profile it, or use it to train anything.
Cookies
The panel sets one session cookie, host-only, required to keep you signed in. This marketing site sets none and carries no third-party analytics or advertising scripts.
Where it is stored
In the region your organisation's substrate is in. Enterprise plans can constrain that by jurisdiction so data does not leave a country.
How long
Account and audit records for as long as your organisation exists, and for a period afterwards to be set with counsel. Site data is removed when you delete a site.
Your rights
Access, correction, export and deletion. Write to it@wpit.net and we will act on it.
Last updated: 2026.