Privacy Policy

1. Who we are

Wrendex, Inc. (“Wrendex”, “we”, “us”) provides a technical SEO auditing platform at wrendex.com and app.wrendex.com. This policy explains what personal data we collect, how we use and store it, and the rights you have over it.

Wrendex is a winricklabs.com project. We pride ourselves in building fast, reliable software with great support.

2. What we collect

• Account data: your name, email, workspace name, and billing details (billing is handled by Stripe; we do not store full card numbers).
• Crawl data: the URLs you ask us to audit, plus the HTML, headers, and resource list our crawler retrieves from those URLs.
• Audit metadata: audit schedules, alert rules, share-link grants, and member roles within your workspace.
• Sign-in & access logs: sign-in events, permission changes, and export events, logged per workspace for security and audit purposes.
• Telemetry: high-level usage events from the marketing site and dashboard (page views, CTA clicks, hero URL submissions), sampled and aggregated to improve the product.

3. How we collect your data

We collect data when you:

1. Create a Wrendex account or sign in.
2. Submit a URL for us to audit, whether via the dashboard, API, or the free-audit form on the marketing site.
3. Configure audit schedules, alerts, or integrations within your workspace.
4. Use or view our website, via cookies and similar technologies described in Section 10.

4. How we use your data

We use account and crawl data to operate the Service: running audits, delivering alerts and scheduled reports, managing your subscription, and responding to support requests. We use telemetry to understand product usage and improve the Service. We do not sell personal information, and we do not use your crawl data or account data to train third-party models. We do not share your data with third parties except the sub-processors described in Section 7, which are strictly necessary to operate the Service.

5. How long we keep it

Crawl results are retained according to your plan: 30 days on Starter, one year on Pro, and unlimited on Agency, with backups rotated on a 30-day window. Account data is retained for the lifetime of your account, plus thirty days after termination to allow for export, and up to sixty days after termination before remaining data is deleted or returned, consistent with our Data Processing Addendum.

6. How & where we store your data

Production data is stored on infrastructure operated by Hetzner, with object storage (crawl archives and exports) on Wasabi. We host exclusively in the EU (Hetzner’s Helsinki, Finland region). Every server uses full disk encryption, and all data is encrypted in transit with TLS 1.3; internal service-to-service traffic uses mTLS.

7. Sub-processors

The current list of third parties that touch customer data, including the purpose, data accessed, and region for each, lives at /legal/sub-processors. It currently includes Stripe (billing), Hetzner (hosting), Wasabi (object storage), and Mailgun (transactional email), plus any integration you choose to enable, such as Slack, Microsoft Teams, PagerDuty, or a customer-configured webhook. We provide at least thirty days’ notice before adding a new sub-processor.

8. Marketing

We do not currently use the information you provide for third-party advertising or marketing purposes, and we do not use third-party advertising trackers on the marketing site.

9. What are your data protection rights?

Wrendex wants to make sure you are fully aware of your data protection rights. Depending on your jurisdiction, every user is entitled to the following:

• The right to access – you can request copies of the personal data we hold about you.
• The right to rectification – you can request that we correct inaccurate information, or complete information you believe is incomplete.
• The right to erasure – you can request that we erase your personal data.
• The right to restrict processing – you can request that we restrict the processing of your personal data.
• The right to object to processing – you can object to our processing of your personal data, under certain conditions.
• The right to data portability – you can request that we transfer the data we hold to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond. California residents have equivalent rights under the CCPA, and we do not sell personal information. To exercise any of these rights, email click to reveal or reach us via /contact.

10. Cookies & trackers

What are cookies?

Cookies are small text files placed on your device to remember information across visits. We use cookies and similar client-side storage to identify and authenticate you and to understand how the Service is used.

How we use them

• The dashboard uses session cookies to keep you signed in.
• The marketing site assigns an anonymous session identifier (stored in your browser’s local storage, not a cookie) to attribute telemetry events like page views and CTA clicks.
• Billing administrators may see cookies related to meeting-scheduling widgets embedded on billing pages, where used.

We do not use third-party advertising trackers on the marketing site or the dashboard.

Managing cookies

You can configure your browser to refuse cookies. Refer to allaboutcookies.org for browser-specific instructions. Blocking cookies used for authentication will prevent you from staying signed in to the dashboard.

11. Children’s privacy

The Service is not directed at individuals under the age of thirteen, and we do not knowingly collect personal information from them.

12. Links to other websites

The Wrendex website may contain links to other websites, including sites you ask us to audit. This policy applies only to Wrendex; if you follow a link elsewhere, review that site’s own privacy policy.

13. Changes to this policy

We keep this policy under regular review and post updates on this page. Material changes will be communicated by email and reflected in the “Last updated” date above.

14. How to contact us

If you have questions about this policy, the data we hold about you, or you would like to exercise a data protection right, email click to reveal or use /contact.

15. How to contact the appropriate authority

If you feel we have not addressed your concern satisfactorily, you have the right to lodge a complaint with your local data protection authority — for example, the Information Commissioner’s Office in the UK (ico.org.uk) or your relevant EU supervisory authority.