Privacy Policy

Privacy Policy

Last Updated: 16 May 2026

This Privacy Policy explains how WUDTR LTD (Company Registration Number 16987248), with its registered office at International House, 109-111 Fulham Palace Road, London, W6 8JA, United Kingdom, together with its Brazilian affiliate BES SISTEMA DA INFORMACAO LTDA ME (CNPJ 14.139.107/0001-20), located in Brazil (collectively, "WUDTR," "Wudtr," "we," "us," "our"), collects, uses, shares, and protects Personal Data when you use Wudtr.com and related services ("Services"). It also describes your rights under the UK GDPR, GDPR, and, where applicable, under other data-protection regimes (e.g., Brazil's LGPD).

Your use of Wudtr is at all times subject to our Terms of Use, which incorporate this Privacy Policy.

1) Who We Are & Contacts

Data Controllers: WUDTR LTD (Company Registration Number 16987248)
Registered Office: International House, 109-111 Fulham Palace Road, London, W6 8JA, United Kingdom
BES SISTEMA DA INFORMACAO LTDA ME (CNPJ 14.139.107/0001-20), located in Brazil
Privacy contact: privacy@wudtr.com

2) Data We Collect

We collect Personal Data you provide directly and data we collect automatically when you use the Services. This may include:

• Account & Identity: name, email, mobile, username, password.
• Preferences/Consents: share_email, share_mobile, allow_internal_message, marketing_wudtr, timestamps, consent versions, and withdrawal records.
• Usage & Interaction: follows, campaign participation, internal relay messages, support interactions.
• Technical: IP address, device/browser details, app version, diagnostics, approximate location (IP-based), cookies/SDK data.
• Commercial/Payments (if applicable): transaction records and billing identifiers handled by PCI-compliant providers.
• User Content & Communications: content you post or send via the Services (and related metadata).
• Marketplace & Transaction Data: purchase history, Digital Products acquired, Seller earnings and payout data, Stripe Connect account identifiers, and transaction metadata (amounts, dates, status).
• Integrations (optional): information you authorize from connected services; we process only what is necessary to provide the integration.

We do not intentionally collect sensitive personal data. Please avoid uploading such information.

Third-Party Platform Data (Google, YouTube, Instagram, Meta)

Wudtr uses YouTube API Services. When you connect third-party platforms to Wudtr via OAuth, we access specific data from those platforms to provide our Services. This section describes our practices in compliance with the YouTube API Services Terms of Service, the Google API Services User Data Policy, the Google Privacy Policy (also available at http://www.google.com/policies/privacy), and the Meta Platform Terms.

Data Accessed

• YouTube: Channel information, video metadata (titles, descriptions, thumbnails), playlists, video analytics (views, engagement, watch time), and captions. Accessed via youtube.readonly, youtube.upload, youtube.force-ssl, and yt-analytics.readonly scopes.
• Instagram: Business account profile information, media (posts, reels, stories), engagement metrics, and audience insights. Accessed via instagram_business_basic, instagram_business_content_publish, and instagram_business_manage_insights permissions.
• Meta Ads: Ad account information, campaign performance data, ad creative metadata, and audience targeting insights. Accessed via ads_read and ads_management permissions.

How We Use This Data

• Display your social media content and analytics in a unified dashboard
• Schedule and publish content to your connected platforms
• Generate performance reports and growth insights
• Power AI-assisted content creation and posting recommendations

We do NOT use Google user data for advertising purposes, to train AI/ML models unrelated to providing our Services, or for any purpose not explicitly disclosed in this policy.

Data Sharing

Google, YouTube, Instagram, and Meta user data is NOT shared with any third parties. This data remains within your Wudtr account and is used solely to provide the Services described above. We do not sell, rent, or license any third-party platform data.

Data Storage & Protection

Third-party platform data is stored in encrypted AWS RDS PostgreSQL databases with encryption at rest (AES-256). All data is transmitted over TLS 1.2+. Access is restricted via IAM roles, VPC isolation, and security groups. OAuth tokens are encrypted using AES-256 before storage.

Data Retention & Deletion

Third-party platform data is retained while your account is active and your platforms remain connected. You may disconnect any platform at any time from your account settings, which immediately revokes our access and schedules deletion of that platform's data within 30 days. Upon account deletion, all third-party platform data is permanently removed within 30 days. You may also request data deletion by emailing privacy@wudtr.com.

Revoke access via Google. Independently of disconnecting inside Wudtr, you can revoke Wudtr's access to your Google or YouTube account at any time from Google's security settings page at https://myaccount.google.com/connections?filters=3,4&hl=en. Revoking access there will stop Wudtr from accessing your Google data going forward; data already stored will be deleted within 30 days as described above.

Google API Services Compliance

Wudtr's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3) Purposes & Legal Bases (LGPD; and where applicable, GDPR)

We process Personal Data to:

• Provide the Services (Contract/Legitimate Interest): account creation, authentication, security, support, and functionality.
• Contact Sharing (Consent): show your email and/or mobile to users you follow or campaign owners per your share_email / share_mobile settings.
• Internal Messaging Relay (Consent): forward messages to you without disclosing your email (allow_internal_message).
• Marketing (Consent/Legitimate Interest where allowed): send Wudtr promotional communications (marketing_wudtr), with opt-out at any time.
• Marketplace Transactions (Contract): processing purchases, facilitating payouts to Sellers, managing subscriptions, issuing receipts, and resolving payment disputes.
• Service Improvement & Safety (Legitimate Interest): performance monitoring, debugging, fraud/abuse prevention, safety of our community and platform.
• Legal/Regulatory (Legal Obligation): compliance with laws, court orders, and regulatory requests; defense of legal claims.

Where we rely on legitimate interest, we balance it against your rights and freedoms. You can request details of this assessment.

4) Your Privacy Options (How the Flags Work)

Important: When you create an account or join through a campaign invitation, your email address is initially shared with your account owner. You can change this at any time in your privacy settings (Account → Privacy).

• share_email (default shown: Yes): if enabled, your email may be visible to users you follow, users who follow you (where applicable), campaign owners, and your account owner. If you disable this setting, your email will no longer be visible to these parties.
• share_mobile (default shown: No): if enabled, your mobile number may be visible to the same audiences as your email.
• allow_internal_message (default shown: Yes): enables Wudtr to deliver messages to you via relays without exposing your email; you can disable at any time.
• marketing_wudtr (default shown: Yes): receive promotional messages; you can unsubscribe at any time via the link in our emails or in Account → Privacy.

Compliance note: We obtain express consent for contact sharing and marketing where required by LGPD/GDPR. UI "defaults" are only effective upon your affirmative action (e.g., checking the box/continuing with the explicit choice).

5) How We Share Personal Data

We may share Personal Data with:

• Other Users/Campaign Owners: strictly according to your privacy settings (share_email, share_mobile) or via internal relays (allow_internal_message).
• Sellers/Buyers (Contract): when you purchase a Digital Product, we share limited information (such as your display name and email, subject to your privacy settings) with the Seller to fulfill the transaction. Sellers receive aggregated sales data through their dashboard.
• Service Providers (Processors): cloud hosting, security, analytics, communications, customer support, and payments (including Stripe, Inc. for payment processing and Stripe Connect for Seller payouts)—under contracts requiring confidentiality and data protection.
• Legal/Compliance: regulators, law enforcement, courts, or others as required by law or to protect rights, safety, and security.
• Corporate Transactions: mergers, acquisitions, or asset transfers, subject to appropriate safeguards.

We do not sell Personal Data.

6) International Transfers

We may process and store data outside Brazil (including in the EEA, UK, and United States). Where international transfers occur, we apply appropriate safeguards consistent with LGPD (e.g., contractual clauses, adequacy findings where applicable) and, for EEA/UK users, SCCs/IDTA or other approved mechanisms. Transfer impact assessments are performed when required.

7) Retention

We retain Personal Data only as long as necessary for the purposes described, including while your account is active and for a reasonable period afterwards for backup, audit, fraud prevention, tax, or legal compliance. We then delete or irreversibly anonymize the data.

8) Your Rights (LGPD; and where applicable, GDPR/UK GDPR)

Subject to law, you can request:

• Confirmation of processing and access to your data;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion of unnecessary or excessive data or data processed in non-compliance;
• Portability to another service or product provider;
• Deletion of processed data based on consent;
• Information about public and private entities with which we shared data;
• Information on the possibility of denying consent and the consequences of such denial;
• Withdrawal of consent at any time;
• Review of automated decisions affecting your interests.

You can exercise many rights in Account → Privacy or by contacting privacy@wudtr.com. We may need to verify your identity. You also have the right to petition the ANPD (Autoridade Nacional de Proteção de Dados) and, if applicable, your local data protection authority (e.g., EEA supervisory authorities or the UK ICO).

9) Cookies, Device Storage & Similar Technologies

We use cookies/SDKs to operate the Services, remember preferences, keep you signed in, measure performance, and improve features. Where required, we present a consent banner/manager for non-essential cookies. You may control cookies via the banner and your browser settings; some features may not function without essential cookies. A standalone Cookie Notice can be provided.

Third-party cookies and device storage. The Services embed content and components from third parties — including embedded YouTube players, payment widgets (Stripe), and authentication providers (Google, Meta, Cognito). When that third-party content loads in your browser or app, those third parties may place, access, or recognize cookies, local storage, or similar identifiers on your device, and may collect information about your interaction with the embedded content (for example, watch history or device/browser metadata). Their handling of that information is governed by their own policies, including the Google Privacy Policy for YouTube embeds.

9a) Third-Party Content & Advertising

Parts of the Services display content served by third parties. In particular, embedded YouTube players are delivered by YouTube/Google, which may serve advertising, recommendations, branding, and other content alongside or within the embedded video. Wudtr does not control what advertising or recommended content YouTube displays inside its embedded player, and your interactions with that third-party content are subject to the third party's terms and privacy policy. We do not sell your Personal Data to advertisers.

10) Security

We implement administrative, technical, and physical measures designed to protect Personal Data (e.g., encryption in transit/at rest where appropriate, access controls, monitoring, and incident response). No system is perfectly secure; keep your credentials secret and log out of shared devices.

11) Children

Wudtr is not intended for individuals under 16. We do not knowingly collect data from children under 16. If you believe a child provided Personal Data, contact privacy@wudtr.com so we can take appropriate steps.

12) Automated Decisions & Profiling

We may use limited profiling to personalize content or recommend accounts/campaigns and to help detect abuse. We do not take decisions producing legal or similarly significant effects without human review.

13) Changes to This Policy

We may update this Policy from time to time. If changes are material, we'll notify you (e.g., by email or an in-product notice). Your continued use after the effective date constitutes acceptance of the updated Policy.

Controller & Privacy Contact

WUDTR LTD (Company Registration Number 16987248)
International House, 109-111 Fulham Palace Road, London, W6 8JA, United Kingdom
BES SISTEMA DA INFORMACAO LTDA ME (CNPJ 14.139.107/0001-20), located in Brazil
privacy@wudtr.com