GDPR Statement

Wuomy typically acts as a processor for customer account data handled through the platform, while customers remain the controller for their own portfolio, lead, and tenant records.

For limited operational information such as billing, support, or direct demo requests, Wuomy may act as a controller.

We support requests for access, rectification, erasure, portability, restriction, and objection in line with GDPR requirements.

Customers can manage, export, or delete much of their operational data directly in the product, and our support team handles processor-assisted requests when necessary.

Where data is transferred outside the EEA or UK, Wuomy relies on appropriate transfer mechanisms such as Standard Contractual Clauses and equivalent safeguards.

• Infrastructure providers are reviewed for security and contractual posture.
• Access is restricted to personnel with a legitimate business need.
• Transfers are limited to the minimum necessary for service delivery.

Operational customer data is retained for the contract term and deleted or returned after termination according to customer instructions and applicable law.

Backups are retained for a limited period consistent with disaster-recovery requirements before secure deletion.