Privacy Policy

WiggyHQ (“we”, “us”, or “our”) is a product of SparrowHQ Ltd. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our service at wiggyhq.com(the “Service”) and any widget embedded on third-party websites.

Please read this policy carefully. If you disagree with its terms, please stop using the Service.

1. Information We Collect

1.1 Dashboard users (business owners)

When you create a WiggyHQ account we collect:

• Account information — your name and email address, provided via Google OAuth.
• Business profile — your business name, description, and website URL that you enter during onboarding.
• Widget configuration — colours, AI name, greeting message, and logo that you configure in your dashboard.
• Usage data — pages visited within the dashboard, actions taken, and timestamps, collected via Vercel Analytics.

1.2 Widget visitors (your customers)

When a visitor interacts with a WiggyHQ widget embedded on your website, the following data is processed:

• Conversation messages — the text of messages sent to and received from the AI assistant.
• Anonymous session ID — a randomly generated token that identifies a browser session. It is not linked to any personal identity unless the visitor voluntarily provides their details.
• Page URL — the URL of the page where the conversation began.
• Lead details — if a visitor voluntarily provides their name, email address, or phone number, this is stored as a lead and forwarded to the business owner’s Gmail inbox.

AI processing is local.All AI inference is performed by Ollama running on the business owner’s own server. Visitor messages are never sent to OpenAI, Anthropic, Google, or any other third-party AI service.

2. How We Use Your Information

• To create and maintain your account.
• To train your AI widget from your website content.
• To display conversation history and lead data in your dashboard.
• To forward captured leads to your registered Gmail address.
• To send transactional emails (e.g. account verification, billing receipts).
• To improve and debug the Service using anonymised usage analytics.
• To comply with legal obligations.

We do not sell your data or your visitors’ data to any third party.

3. Data Storage and Security

Dashboard user data and conversation logs are stored in a managed PostgreSQL database hosted on infrastructure within the European Economic Area (EEA) unless you have been notified otherwise. We apply industry-standard encryption at rest and in transit (TLS 1.2+).

No security system is impenetrable. While we work hard to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

4. Cookies and Tracking

WiggyHQ uses the following cookies and tracking technologies:

• Session cookie — a single HTTP-only, SameSite=Lax cookie to maintain your authenticated session. This cookie is essential for the Service to function and does not track you across other websites.
• Vercel Analytics — anonymous, cookieless page-view analytics. No personal data is stored; Vercel processes only aggregated traffic data.

The widget embedded on third-party websites does not set any cookies on the host website. It uses a transient, in-memory session identifier that is cleared when the browser tab is closed.

5. Sharing of Information

We share information only in the following limited circumstances:

• Service providers — we use Vercel (hosting), Neon (database), Upstash (job queue), and Resend (transactional email). Each provider is bound by a data processing agreement and processes data only as instructed by us.
• Google (lead delivery)— captured leads are forwarded to your Gmail address via the SparrowHQ EmailHQ service. Google’s own privacy policy governs data in your inbox.
• Legal requirements — we may disclose information if required by law, court order, or government authority.

6. Data Retention

• Account data is retained for as long as your account is active.
• Conversation logs and leads are retained for 12 months and then automatically deleted.
• Crawled website content (knowledge chunks) is retained until you delete it or close your account.
• On account deletion, all personal data is purged within 30 days.

7. Your Rights (GDPR / UK GDPR)

If you are located in the EEA or the United Kingdom, you have the following rights:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your personal data (“right to be forgotten”).
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Restriction — ask us to restrict processing while a dispute is resolved.

To exercise any of these rights, email us at privacy@wiggyhq.com. We will respond within 30 days.

8. Children’s Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

9. International Transfers

We are incorporated in the United Kingdom. If you access the Service from outside the UK or EEA, your data may be transferred to and processed in a country with different data protection laws. We rely on Standard Contractual Clauses approved by the European Commission for such transfers.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, where changes are material, notify you by email. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

SparrowHQ Ltd
Email: privacy@wiggyhq.com