Privacy Policy

Two kinds of data, and who controls each

The distinction runs through everything below, so it comes first.

Account data is about the brokerage and its staff — names, work email addresses, roles, and how the workspace is used. We decide how this is handled, so we are the controller of it.

Customer data is what a brokerage puts into its workspace about its own contacts, deals, properties and messages. The brokerage decides what to collect and why; we only process it on their instructions. If you are a buyer, seller or tenant asking about your own record, the brokerage you dealt with is the right place to ask, and we will help them answer.

What we collect

Directly from you, or generated as you use the product:

• Account and profile details: name, work email, phone, job title, organization, and the role assigned to you.
• Authentication data: password hashes (never the password itself), session tokens, and sign-in timestamps.
• Content you enter: contacts, deals, tasks, notes, activity logs, message templates and uploaded media.
• Integration data you connect: advertising and messaging accounts you authorize, and the campaign, lead and message records they return.
• Usage and diagnostic data: pages visited, actions taken, IP address, device and browser, and error reports.
• Billing details: plan, invoices and payment status. Card numbers are handled by our payment processor and never reach our servers.

Why we use it

To run the service you asked for, and for nothing incompatible with that:

• Providing the platform: authentication, permissions, storing and displaying your records.
• Sending the notifications you configure — in-app and email — and the messages you send to your own contacts.
• Security and abuse prevention: rate limiting, audit trails, and investigating suspicious activity.
• Support: reproducing a problem you reported.
• Improving the product in aggregate, and billing.

What we do not do

We do not sell personal data. We do not share it with advertisers. We do not use the content of your workspace to train models for other customers, and we do not read it except when you ask us to help with a specific problem or the law requires it.

Who we share it with

Only the processors the service actually runs on, each bound to handle the data only as we instruct:

• Cloud hosting and managed databases.
• Email and messaging delivery providers, for notifications and for messages you send from the product.
• Advertising and messaging platforms you yourself connect, and only the data that integration requires.
• Payment processing.
• Error monitoring and analytics.
• A public authority, when we are legally required — and, where we are lawfully able to, we will tell you first.

Where it is stored, and for how long

Data is stored on infrastructure that may sit outside your country, protected by contractual safeguards for any transfer.

We keep workspace content for as long as the account is active. After an account closes, content is deleted or anonymized within 90 days, except where we must keep records longer to meet a legal or accounting obligation. Some records — audit logs and invoices among them — are retained for their own statutory period.

Your rights

Subject to local law, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to a use, or export it in a portable format. Where we rely on consent — marketing email is the usual case — you can withdraw it at any time without affecting what happened before.

Write to privacy@wzgate.com and we will respond within the period your law sets, and within 30 days where none is set. If you are asking about a record a brokerage holds about you, we will route you to that brokerage, who is the controller of it.

Security

Access is scoped by role and by organization, credentials for connected integrations are encrypted at rest, traffic is encrypted in transit, and administrative actions are recorded in an audit trail. No system is perfectly secure; if a breach affects your data we will notify you and the relevant regulator as the law requires.

Cookies

The application uses cookies and similar storage that are strictly necessary to keep you signed in and to remember interface preferences such as language and theme. This website additionally uses limited analytics to understand which pages are read. It sets no advertising cookies.

Children and the service

The service is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

When we change this policy materially, we will update the effective date above and notify account administrators in the product before the change takes effect.