Legal

GDPR Compliance

How WaPro processes personal data under the EU General Data Protection Regulation, and the rights available to you.

Effective date: July 12, 2026

Lawful basis for processing

We process personal data only where a lawful basis applies: performance of a contract (providing the service), legitimate interests (security, product improvement), legal obligations, or your consent — for example for analytics and marketing cookies.

Your rights

Under the GDPR you can request access to your personal data, rectification of inaccurate data, erasure ("right to be forgotten"), restriction of processing, data portability, and you can object to processing based on legitimate interests. You may also withdraw consent at any time without affecting prior processing.

Data we process

Account details (name, email), workspace content (contacts, campaigns, messages), billing records, and technical data such as IP addresses and device information. Workspace owners act as data controllers for the contact data they upload; WaPro processes it on their behalf.

Cookies and consent

Non-essential cookies (analytics, marketing) are set only after you give consent through our cookie banner. You can change or withdraw your choice at any time by clearing cookies for this site, after which the banner will ask again.

International transfers

Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses and process data only with providers offering adequate protection.

Retention

We keep personal data only as long as needed for the purposes described here — for the life of your account, plus limited periods required for legal, billing, or security reasons — then delete or anonymize it.

Exercising your rights

To exercise any right, contact hello@wapro.com from the email linked to your account. We respond within one month. If you believe your rights were infringed, you may lodge a complaint with your local supervisory authority.