Privacy Policy
Version 2.0 · effective 2026-10-12
Shenzhen Xin Wei Xin Technology Co., Ltd. (深圳心为心科技有限公司) (“we”, “us”, “our”) provides Wisaven (the “Service”). This Privacy Policy explains what personal information we collect when you use the Service, how we use, store and share it, and the rights you have. Please read it before using the Service. We will tell you about material changes as described under “Changes to this Policy”.
1. Data controller
The controller of personal information processed through the Service is:
- Company: Shenzhen Xin Wei Xin Technology Co., Ltd. (深圳心为心科技有限公司)
- Registered address: Rm 315, No. 2-46 Minsheng Avenue, Shangcun Community, Gongming Subdistrict, Guangming District, Shenzhen, Guangdong 518107, China
- Unified Social Credit Code 91440300MA5HUYFJ9R
- Privacy email: privacy@wisaven.com
- Data protection officer: not appointed
The Service is not offered in mainland China.
2. Information we collect
Information you give us:
- Account: email address, password (stored only as a salted hash), display name and how you sign in. If you sign in with Google, we receive your name, email address and profile picture as Google shares them.
- Content: prompts, text and documents you write or paste, files you upload (documents, images, audio and video), web pages you add as sources, settings, the outputs generated for you (text, documents, slide decks, images, videos, audio and songs), and collaboration data.
- Voice data: recordings you upload to clone a voice, and the voices created from them or from a description. They are used only to create the voice and to speak the text you ask for, are sent to our speech-model provider for that purpose, are never used to train models, and are never offered to anyone else. Deleting a voice removes it from your account.
- Payments: plan, amount, currency, status, order ID and billing country. Card details are entered on Waffo Pancake’s checkout and never reach us.
- Communications: emails, support requests, reports and appeals you send us.
Information collected automatically: device and network data (IP address, device type, operating system, browser, language, time zone); usage data (pages visited, features used, generation history and credit use); and logs (request times, errors, performance). Error reports from your browser are sent only if you allow analytics cookies.
Public works: when you publish a song, image, video or voice clip to our gallery, it can be seen by anyone, together with its title and description, credited to your display name unless you choose to publish anonymously. The display name is read from your profile each time the page is shown, so renaming or deleting your account updates or removes it everywhere.
3. How we use it, and our legal bases
- Providing and maintaining the Service, including generating what you ask for and enabling collaboration — performance of our contract with you.
- Billing, payments and credits — performance of contract.
- Customer support — performance of contract and our legitimate interests.
- Service notices (billing, renewal reminders, security, policy changes) — legitimate interests.
- Content moderation, security and fraud prevention — legitimate interests and legal obligations.
- Understanding and improving the Service from aggregated data — legitimate interests.
- Complying with the law — legal obligation.
- Marketing emails, such as the app-launch notice you can sign up for — your consent.
We may aggregate or anonymise data for statistics; such data cannot identify you. We never use your content to train AI models, we never sell your personal information, and we do not share your private content with other users unless you choose to collaborate or publish.
6. Data security
- Encryption in transit (TLS/HTTPS) for all traffic.
- Passwords stored only as salted hashes.
- Least-privilege access controls; staff with access are bound by confidentiality.
- Vulnerabilities reported to security@wisaven.com are investigated and fixed.
If a security incident affects your personal information, we will notify you and the relevant authorities within 72 hours of becoming aware of it, where the law requires. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Data retention
- Account information: while your account is active; deleted or anonymised within 90 days after you delete your account.
- Your content, including voices and voice recordings: until you delete it or your account; then deleted within 90 days.
- Transaction records: for the period required by applicable tax and accounting law.
- Support, report and appeal records: 3 years after the matter is closed.
- Moderation records: up to 3 years.
- Security and access logs: up to 12 months.
8. Your rights
Depending on where you live, you have the right to:
- be informed about what we collect and how we use it;
- access a copy of your personal information;
- correct inaccurate or incomplete data;
- have your data erased;
- restrict processing in certain cases;
- receive your data in a machine-readable format (portability);
- object to processing based on legitimate interests, or to marketing;
- withdraw consent where processing is based on consent.
Residents of the EEA and UK have these rights under the GDPR and UK GDPR; California residents have rights under the CCPA/CPRA, including to know, delete and correct, and to opt out of “sale” or “sharing” (we do neither).
You can do most of this in your account settings — edit your profile, export a copy of your data, or delete your account — or by emailing privacy@wisaven.com. We respond within 30 days. You may also complain to your local data protection authority.
9. Marketing and opting out
We send marketing messages only with your consent — for example, the one email announcing our mobile apps if you ask for it. Every marketing email has an unsubscribe link, or you can email privacy@wisaven.com. Service notices (billing, security, policy changes) are not marketing and continue while you have an account.
10. International transfers
Our servers are in the United States, our providers operate in several countries, and our team works from China. Your information may therefore be processed in, and accessed from, countries other than your own. Where the law requires, we protect such transfers with appropriate safeguards — such as the European Commission’s Standard Contractual Clauses and the UK Addendum — and transfer data only to recipients who protect it to an equivalent standard.
11. Children
The Service is for people aged 14 and over. Users under 18 need the consent of a parent or guardian, and purchases require being 18 or over. We do not knowingly collect personal information from children under 14. If you believe a child has given us information, contact privacy@wisaven.com and we will delete it promptly.
12. Third-party links and services
The Service may link to or integrate with third-party services. This Policy covers only the information we collect; please read the privacy policies of third-party services before using them.
13. Changes to this Policy
For material changes we give at least 15 days’ notice by email or an announcement in the product, and update the date at the top. Continuing to use the Service after a change takes effect means you accept the updated Policy.
14. Contact
- Privacy: privacy@wisaven.com
- Support: support@wisaven.com
- Company: Shenzhen Xin Wei Xin Technology Co., Ltd. (深圳心为心科技有限公司)
- Mail: Rm 315, No. 2-46 Minsheng Avenue, Shangcun Community, Gongming Subdistrict, Guangming District, Shenzhen, Guangdong 518107, China
- Hours: Monday to Friday, 09:00–18:00 China Standard Time (UTC+8)