WiseSupa

Privacy Policy

Effective date: February 28, 2026

1. Introduction

Wise Cloud SAS ("we", "us", "our") is the data controller for personal data processed through WiseSupa. We are committed to protecting your privacy and processing your data in compliance with the General Data Protection Regulation (GDPR) and applicable French data protection laws.

2. Data We Collect

We collect the following categories of data:

  • Account data — email address and password hash, collected during registration
  • Instance connection details — Supabase project URLs, API keys, and database credentials, encrypted at rest via Supabase Vault
  • Usage data — actions performed within the Service such as backups created, migrations run, and team activity
  • Analytics data — anonymized usage patterns collected via Google Analytics, including pages visited, session duration, and general geographic region

3. How We Use Your Data

We use the data we collect to:

  • Provide, maintain, and improve the Service
  • Process payments and manage subscriptions via Polar.sh
  • Analyse usage patterns to improve user experience
  • Respond to support requests and communicate important updates
  • Comply with legal obligations

4. Legal Basis (GDPR Art. 6)

We process your personal data on the following legal bases:

  • Contract performance — processing necessary to provide you with the Service (Art. 6(1)(b))
  • Legitimate interest — improving the Service, ensuring security, and preventing abuse (Art. 6(1)(f))
  • Consent — analytics cookies and optional communications, which you may withdraw at any time (Art. 6(1)(a))

5. Data Sharing

We share data only with the following third-party service providers as necessary to operate the Service:

  • Supabase — cloud infrastructure and database hosting
  • Polar.sh — payment processing and subscription management (Merchant of Record)
  • Google Analytics — anonymized website usage analytics

We do not sell your personal data to any third party.

6. Data Storage & Security

Your data is stored on servers managed by Wise Cloud and on Supabase infrastructure. Sensitive credentials such as database connection strings and API keys are encrypted using Supabase Vault and are never stored in plaintext.

We implement appropriate technical and organisational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Upon account deletion, your personal data is removed from our active systems. Backups containing your data are purged within 30 days of account deletion.

8. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Access — request a copy of your personal data
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your personal data
  • Portability — receive your data in a structured, machine-readable format
  • Restriction — request restriction of processing in certain circumstances
  • Objection — object to processing based on legitimate interest

You may exercise these rights through your in-app account settings or by contacting us at support@wisesupa.com. We will respond to your request within 30 days.

9. Cookies

WiseSupa uses the following types of cookies:

  • Essential cookies — Supabase authentication cookies required for the Service to function
  • Analytics cookies — Google Analytics cookies used to understand how visitors interact with the Service

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

10. International Transfers

Your data may be processed outside the European Union by our third-party service providers. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms approved by the European Commission.

11. Children

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us so we can promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through an in-app notification. The updated policy will be posted on this page with a new effective date.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: