Privacy Policy

When we handle data about our own account holders and website visitors, we are the controller. When a business customer uses the Service to manage its drivers and staff, that business is the controller of its drivers'/staff personal data and we act as a processor on its behalf and instructions, governed by our agreement with that business including any Data Processing Agreement.

Account and contact data (name, email, phone, business name, role, login credentials stored hashed via our authentication provider); billing data (card/payment details processed directly by Stripe, not stored by us); Customer Data entered by Account Owners about drivers and staff (names, contact details, role, vehicle assignments, performance and safety information, scorecard data, documents, communications) processed by us as a processor; usage and technical data (IP address, device/browser info, log data, analytics); communications you send us; cookies and similar technologies.

Content you create when using Link: your chats, files you attach, facts Link learns from you, and text we extract from your documents so Link can read them.

Provide and manage the account and Service (contract); process subscriptions and payments (contract); support and enquiries (legitimate interests/contract); operate, secure and improve the Service (legitimate interests); service messages (contract/legitimate interests); marketing where permitted (consent or legitimate interests with opt-out); legal compliance (legal obligation); fraud and security (legitimate interests/legal obligation); legal claims (legitimate interests/legal obligation).

Wehand includes Link, an assistant that answers questions about your operations. To answer, Link reads what you type and attach, and the information you have added to the operation the chat belongs to: its instructions, the names and categories of its documents, the text of documents relevant to your question, the titles of earlier chats and short passages from them, and facts it has learned from what you have told it.

This information is sent to our AI provider, Anthropic PBC, in the United States, only to produce the answer. Anthropic does not use it to train its models and deletes it within 30 days under its commercial terms. Transfers are covered by the safeguards described under International transfers.

Facts Link learns from you are saved to your operation and shown under "What Link knows" on the operation page, where you can edit or delete them at any time. Link does not save facts from the contents of documents or files.

You can stop Link reading an operation's documents in that operation's settings. Link's answers can be wrong and are not legal, medical or financial advice. Link does not make decisions about anyone; you do.

If you add information about your drivers or staff, you are the controller of that information and we process it for you, including through Anthropic as our sub-processor. You are responsible for telling your staff how their information is used.

Service providers/processors (hosting, authentication, Stripe for payments, email, AI providers, analytics/support) under appropriate contracts; Account Owners (where you are an Authorised User); professional advisers; authorities or third parties where required by law; a buyer or successor in a merger/acquisition/reorganisation. We do not sell personal data.

Our current sub-processors are: Anthropic PBC (AI features, United States); Clerk (sign-in); Stripe (payments); Resend (email); and Replit and Google Cloud (hosting, database and file storage).

We also use: Sentry (error monitoring); LeadConnector (sales enquiries on our marketing website); Apple and Google (push notifications, and Apple MapKit for maps); OpenStreetMap Nominatim and postcodes.io (address lookup); and ipwho.is (approximate location from your IP address, to show local pricing). When you connect a Plugin, data is exchanged with that third-party service on your instructions, under its own terms.

Where we transfer personal data outside the UK or EEA, we use appropriate safeguards required by law (UK/EU adequacy regulations, the International Data Transfer Agreement, the UK Addendum, or EU Standard Contractual Clauses).

We keep personal data only as long as needed for the purposes described, and to meet legal, tax and accounting obligations, resolve disputes and enforce agreements. As processor, we retain and delete Customer Data per our agreement with the Account Owner.

Chats are kept until you delete them, or until your account is deleted. When you delete a chat, its messages and the files attached to it are deleted. Deleted documents stay in the bin for 30 days, then are permanently deleted with any text extracted from them. Facts are kept until you delete them or the operation is deleted. When you delete your account, all of its data and files are deleted within 30 days, except where we must keep billing records by law.

Appropriate technical and organisational measures including encryption in transit, access controls and reputable infrastructure providers. No system is completely secure; you must keep login credentials confidential.

Under UK and EU GDPR, subject to conditions: to be informed, access, rectification, erasure, restriction, portability, objection (including to direct marketing), and not to be subject to solely automated decisions with legal or similarly significant effects. Where we rely on consent you may withdraw it. Drivers/staff whose data was entered by a business should usually direct requests to that business as controller; we assist as processor. Contact support@wehand.co.uk; we respond within the legally required time (usually one month).

Contact us first at support@wehand.co.uk. UK users may complain to the ICO (ico.org.uk, 0303 123 1113). EU users may complain to their local supervisory authority.

We use essential cookies to operate the Service and, with consent where required, analytics cookies. Control non-essential cookies via our cookie banner/settings and your browser.

Not intended for under-18s; we do not knowingly collect their data as controller.

We may update this Policy and will post a new "last updated" date, notifying you of material changes.

Wehand Ltd, 124-128, City Road, London, England, EC1V 2NX, support@wehand.co.uk, company number 17304528.