Privacy
What we hold, and for how long.
Two different sets of people show up in this policy: visitors to this website, and the people who message a business that uses WeSet. They're treated differently, so they're written up separately. Last updated 6 August 2026.
Visitors to this website
No cookies are set on this site, by us or by anyone else. There are no advertising pixels, no remarketing tags, and nothing that follows you to another website. That is also why you have not been asked to dismiss a consent banner: there is nothing here to consent to.
We do count page views, using Vercel Analytics. It records which page was requested, roughly where in the world the request came from, and what kind of device it was, and it does that without storing any identifier in your browser. We use it to see which industry pages people actually read. It cannot tell us who you are, and we cannot follow an individual visitor from one page to the next.
The site is hosted on Vercel, which also keeps standard server logs including IP address, user agent and requested URL. Those are operational records, kept for a short period so outages and abuse can be investigated. We don't combine them with anything else.
The "Book a demo" buttons hand you off to Calendly. Once you're there you're on Calendly's site under Calendly's privacy policy, and whatever you enter on the booking form comes back to us as a calendar invitation. The lead-loss calculator runs entirely in your browser. The numbers you type are never sent anywhere, which is why it works with the network off.
People who message a business using WeSet
If you have messaged a law firm, clinic or contractor and WeSet answered, then that business is the data controller and we are its processor. In plain terms: the business decides what happens to your information, and we handle it on their instructions and nobody else's. Requests to see, correct or delete what's held about you go to that business first. Write to us at hello@wesetai.com and we will route it to them and help them action it.
What gets processed is the conversation itself and what you chose to put in it: your name, your contact details, what you were asking about, and the appointment if one was booked. We ask for what the business needs to help you and nothing more, and the assistant is configured to stop and fetch a human rather than press for sensitive details it has no business collecting.
Your conversations are never used to train models. Not ours, not a vendor's. Content is sent to a model provider to generate the reply you receive and is covered by contractual terms that exclude it from training. This is a commitment, not a setting we might quietly change.
Retention
Conversation records are kept for as long as the business we work for asks us to keep them, and that period is agreed in writing before anything goes live. When an account closes, records are deleted or returned within 30 days. Backups roll off on their own schedule and are overwritten within 90 days.
Who else touches it
The full list, because "industry-standard providers" isn't an answer anyone should accept:
- Anthropic / OpenAI: generating replies to enquiries
- Twilio: SMS and WhatsApp Business delivery
- Vercel: website hosting and cookieless page-view analytics
- Google Workspace: email and calendar integration
- Calendly: booking the intro call on this site
We do not sell data, we do not share it with advertisers, and we do not move it between customers. Adding a sub-processor means updating this list and telling every affected customer before the change takes effect.
Security
Data is encrypted in transit and at rest. Access is limited to the people who need it to run the service, and every conversation is logged so a customer can audit exactly what was said on their behalf. If a breach affects your information we will tell the affected businesses without undue delay and support their own notification duties.
Your rights
Depending on where you live you may have the right to access, correct, delete or export your personal information, to object to certain processing, and to complain to a supervisory authority. We honour those requests as processor whenever the controlling business instructs us to, and we'll help them respond rather than hide behind the distinction.
Children
WeSet is sold to businesses and is not directed at children. We don't knowingly collect information from anyone under 16. If you believe we have, write to us and it will be deleted.
Getting in touch
Privacy questions, requests and complaints all go to hello@wesetai.com and are answered by a person.
If this policy changes we'll move the date at the top, and anything that materially changes how information is handled gets an email to affected customers rather than a silent edit.