Privacidad

1. Who we are

Brava Labs LLC (30 N Gould St, Sheridan, Wyoming 82801, USA) operates Wattprint and is responsible for the personal data described here. Data-protection contact: privacy@wattprint.com.

2. Data we process

• Account data: name, work email, hashed password, organization, role.
• Organization data you import: your workforce directory (names, emails, departments, managers, countries, job titles), AI license assignments and last-activity / usage metadata. This is personal data of your employees, for which you are the controller and we are the processor.
• API usage metadata: read from each provider's own usage API — model, token counts, dates and the computed footprint. Never the content of requests.
• Payment data: handled by Stripe. We store only customer/subscription identifiers and status — never card numbers.
• Essential cookies: a signed session cookie and a language preference cookie. No advertising or third-party tracking.

3. What we do NOT process

We do not store your prompts, the models' responses, your documents or files, or the content of your AI interactions. None of that ever reaches us: we read counts and costs from your providers.

4. Purposes and legal bases (GDPR)

We process data to provide the Service (performance of a contract), to secure and improve it (legitimate interest), to bill (contract / legal obligation), and to comply with the law. For imported employee data we act on your documented instructions as processor.

5. Subprocessors

These are all of them. We never sell personal data, and we will update this list before adding a new subprocessor.

We do not currently use a transactional email provider: team invitations are shared as links by you, not emailed by us.

6. International transfers

Brava Labs LLC is a US entity, our hosting provider is based in Iceland, and our administrators access the service remotely for support and maintenance — so personal data may be transferred outside your country. For transfers of EU/EEA personal data we rely on the EU Standard Contractual Clauses (Module 2, controller-to-processor, and Module 3 where we act as sub-processor); you can request a copy at privacy@wattprint.com. We reduce the exposure by holding metadata only — never your prompts, responses or files. If you need a specific hosting location contractually guaranteed, ask us before signing and we will tell you plainly what we can commit to.

7. Retention

• While your account is active: directory and license metadata is kept so we can show trends over time. LLM usage metadata is kept for 13 months, then deleted.
• After you cancel: your data is deleted within 30 days. Ask us and we delete it immediately, or export it for you first.
• Encrypted backups: retained up to 35 days, then overwritten — so deleted data disappears from backups within that window too.
• Audit and invoicing records: kept as long as required by accounting and tax law.

8. Security

Provider credentials and OAuth tokens are encrypted at rest; traffic is encrypted in transit; access is role-based and sensitive actions are logged. See our Security page.

9. Your rights

Subject to applicable law (GDPR/CCPA), you may request access, rectification, erasure, restriction, portability or object to processing. For employee data, rights are exercised through the customer (controller). For account data, contact privacy@wattprint.com; we answer within one month.

Right to complain: if you are in the EU/EEA you may lodge a complaint with your national data protection authority at any time, without contacting us first. In Spain that is the AEPD; you can also complain to the authority where you live or work.

10. Cookies

We use strictly-necessary cookies only (session and language). No tracking, analytics-for-ads, or third-party profiling.

11. Children

Wattprint is a business service and is not directed to individuals under 16.

12. Changes and contact

We will post updates with a new "last updated" date. Privacy: privacy@wattprint.com · Security: security@wattprint.com.