Privacy policy

Last updated: 19 October 2026

1. Data Controller

The data controller responsible for the processing of personal data on this website is:

WhatsConvert Platform
Email: contact@whatsconvert.xyz · Telephone: +1 (800) 555-0198 · Website: whatsconvert.xyz

2. Information we collect

We process personal data only when strictly necessary to provide our lead tracking software, operate a secure platform, and respond to commercial demo requests:

• Demo booking & inquiry data: Full name, business email address, company or agency name, telephone number, website URL, monthly client volume, and booking time slot submitted voluntarily.
• Technical browsing data: IP address (anonymized prior to storage where analytics consent is not granted), browser type, operating system, referrer URL, pages visited, and timestamp.
• Consent records: Cryptographic timestamps and category selections stored locally in your browser (whatsconvert_consent_v1) to prove compliance with Art. 7 GDPR.

3. Call tracking & telephony data handling

As part of our dynamic call tracking and marketing attribution platform:

• Caller Identification: When a user calls a trackable DNI phone number, metadata (caller number, timestamp, duration, and call status) is logged to attribute the call to the marketing source.
• Call Recording & Consent: If call recording is enabled by an agency or client for quality assurance, callers hear an automated pre-call whisper notice ensuring compliance with GDPR Art. 6(1)(a) and telecom wiretapping laws.
• Data Minimization: Call audio and logs are stored in encrypted cloud storage and are anonymized or deleted upon request.

4. Purposes and legal bases for processing

Processing purpose	Personal data	Legal basis (GDPR Art. 6)
Demo bookings and commercial walkthroughs	Name, email, phone, company, slot time	Art. 6(1)(b) — steps prior to contract
Website security and server integrity	IP address, server logs, user-agent	Art. 6(1)(f) — legitimate interest in security
Lead attribution and platform analytics	Anonymous click identifiers, aggregated traffic	Art. 6(1)(a) — explicit consent
Google Ads & Meta offline conversion tracking	Hashed conversion events, consent signals	Art. 6(1)(a) — explicit consent (Consent Mode v2)

5. Cookies & Google Consent Mode v2

We operate an opt-in model compliant with the ePrivacy Directive and Google EU user consent policy. Strictly necessary technical cookies load automatically. Analytics and advertising technologies load only after you grant explicit consent.

We implement Google Consent Mode v2, transmitting standardized consent signals (ad_storage, ad_user_data, ad_personalization, analytics_storage) to Google. Review our full Cookie policy.

6. Third-party recipients & international transfers

We do not sell, rent, or trade your personal data. We disclose information only to vetted service providers operating under Data Processing Agreements consistent with Art. 28 GDPR:

• Hosting & Infrastructure: Cloudflare / Netlify / Vercel (content delivery, DNS, security).
• Analytics: Google Ireland Ltd. Standard Contractual Clauses (SCCs) apply for any transfers outside the EEA.
• Telephony Carriers: Licensed telecom providers for virtual number routing and dynamic call attribution.

7. Retention periods

• Demo & inquiry data: Stored for up to 3 years from the date of last active communication.
• Call tracking metadata: Retained for 12 months for multi-touch attribution analysis, then purged or anonymized.
• Cookie consent records: Maintained in local storage for 180 days before re-prompting.
• Server access logs: Deleted automatically after 30 days.

8. Your rights under GDPR

Under Chapter III of the GDPR, you have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, or withdraw consent at any time.

9. Contact & supervisory authority

To exercise any data protection rights, email our privacy team at contact@whatsconvert.xyz.