Privacy Policy

Wumble is operated by Wumble s.r.o., registered office Skolska 660/3, Nove Mesto, 110 00 Prague 1, Czech Republic, company number 23309822, VAT identifier CZ23309822. Wumble s.r.o. is the controller for core account, marketplace, trust, security, messaging, campaign and privacy-rights processing.

Privacy requests can be sent to privacy@wumble.io. Data protection officer requests can be sent to dpo@wumble.io. General business contact channels are available on https://www.wumble.io/contact-us.

If you are in the EU or EEA, you may also contact the Czech supervisory authority, the Office for Personal Data Protection, at https://uoou.gov.cz/.

Wumble is an 18+ platform for Creators, Brands and Agencies. The service helps users create accounts, manage profiles, run and apply for campaigns, exchange messages, handle business verification, manage media, request data export and request account deletion.

This notice covers the Wumble app, Wumble backend services and website privacy pages. It does not replace Wumble's Terms of Use or any separate business agreement that may apply to a specific service.

We process account and authentication data, profile data, role and membership data, Creator profile details, Brand and Agency profile details, business verification and representative information, campaign and application records, messages and safe conversation context, attachments and uploaded media, portfolio items, insights and export records, notifications and preferences, privacy-rights records, account deletion records, legal hold records, security events, audit logs and website/ePrivacy data.

Wumble does not use personal data for advertising tracking or data-broker purposes. App Store privacy information is maintained separately and should be kept consistent with this Privacy Policy.

We process personal data to create and manage accounts, provide the Creator, Brand and Agency workflows, operate campaigns and messaging, protect users and the platform, verify business trust where required, provide data export and account deletion rights, respond to support and legal requests, prevent abuse, maintain security, and comply with law.

The main legal bases are contract performance, legitimate interests, legal obligation and, where required for a specific optional activity, consent. We do not treat general Privacy Policy acknowledgement as cookie consent or marketing consent.

We share data only where needed to operate Wumble, support users, comply with law, protect the service or enable user-directed collaboration. Creators, Brands and Agencies may see data that is intentionally shared through campaign, profile, application or messaging workflows.

Wumble uses service providers for backend hosting, authentication, storage, email delivery, app platform services and website operations when those services are active. Where data is transferred outside the EU or EEA, Wumble will use appropriate transfer safeguards and provide additional information where required by law.

Wumble keeps personal data only as long as needed for the purposes described in this notice, unless law, security, audit needs, counterparty continuity or legal hold requires a longer or different retention treatment.

Account deletion has a 30-day grace period. During that period a user can cancel the request. After the grace period, Wumble's backend deletion executor redacts, anonymizes, detaches or deletes data according to the approved data surface policy. Shared campaign and messaging records may remain available to counterparties with the deleted actor anonymized or detached. Legal hold can pause deletion execution.

Backend data export packages are available within a 90-day export window. A download link is short-lived, currently 10 minutes, and must be requested by the account owner after identity verification. To protect the service from repetitive automated load, self-service export package generation can reuse a recent available package or apply a short cooldown. This does not remove your right to make a privacy request; urgent or legal requests can still be sent to privacy@wumble.io.

Depending on your location and the applicable law, you may have rights to access your data, request a copy, rectify inaccurate data, request deletion, restrict processing, object to processing, request portability, withdraw consent where processing is based on consent, and lodge a complaint with a supervisory authority.

You can request data export and account deletion in the Wumble app where those features are available. You can also contact privacy@wumble.io. We may need to verify your identity before fulfilling a request.

Depending on where you live, you may have additional privacy choices under local law. If California privacy laws apply to your relationship with Wumble, you may have rights to know, access, correct, delete and limit certain uses of personal information, and to opt out of certain sale, sharing or targeted advertising uses where those activities occur.

Wumble does not currently sell personal data or use it for third-party advertising tracking. If Wumble introduces processing that requires an opt-out or preference mechanism, Wumble will provide a clear way to exercise that choice. You can contact privacy@wumble.io to ask about privacy choices that apply to you.

If you are in the UK, Wumble will handle privacy requests under applicable UK data protection and ePrivacy rules where they apply.

Wumble uses technical and organizational controls designed to protect personal data, including encrypted transport, access controls, tenant isolation, service-only backend commands for privacy rights, audit evidence and security monitoring.

We may update this notice when Wumble changes, law changes or our privacy practices change. The current public version is available at https://www.wumble.io/privacy.