Compliance

We aim to comply with the Digital Personal Data Protection Act, 2023 (India) and, for members in those regions, the EU GDPR and UK GDPR. We collect only the data we need, use it for the purposes described in our Privacy Policy, and honour data-subject requests such as access, correction, and erasure. We have designated a point of contact for privacy grievances (see below).

Our security practices include:

• Encryption of data in transit using HTTPS/TLS.
• Passwords stored only as salted bcrypt hashes — never in plaintext.
• Role-based access controls and least-privilege principles for administrative access.
• Hosting on reputable infrastructure providers that maintain recognized security and compliance programs.
• Ongoing monitoring, and a process to investigate and respond to security incidents.

No online service can guarantee absolute security, but we work continuously to protect member data and to improve our controls.

Payments are handled by a third-party payment provider acting as our merchant of record. Card and billing data are processed within their PCI-DSS-compliant environment; Wention does not receive or store full card details. This limits the sensitive payment data our systems ever handle.

Wention uses large language models (via third-party AI providers) to power features like website classification, competitor discovery, and content suggestions. We send these providers the website URLs and public page content needed for the task — not member passwords or unnecessary personal data. AI outputs are assistive and may contain errors; humans remain responsible for the content they publish.

The Platform depends on authentic, lawful, and non-deceptive content. Our Terms & Conditions set out acceptable-use rules, and we operate approval, automated verification, and dispute processes to uphold quality and address violations. We may review, reject, or remove content and suspend accounts that breach these standards.

We rely on a small set of vetted service providers (hosting, database, analytics, payments, email, and AI) to deliver the Platform. The current list, and the data each receives, is published in our Privacy Policy. We update it as our stack changes.

We use strictly necessary cookies to run the Platform and load non-essential analytics cookies only after you consent. Details and controls are in our Cookie Policy.

To exercise your data-protection rights, report a concern, or raise a grievance, email hello@wention.ai. We acknowledge and address valid requests within the timelines required by applicable law. Where a personal-data breach is likely to result in risk to members, we will notify affected members and the relevant authority as required.