Privacy Policy

1. Overview

WEDJAT is an agency operating system and social intelligence platform designed to help agencies and teams manage clients, team members, tasks, calendars, content workflows, connected social accounts and performance data in one workspace.

This Privacy Policy explains what information WEDJAT may process when you use the service, why we process it, how it may be shared with service providers, and the choices available to you.

2. Information we may collect

Account information

When you create or use a WEDJAT account, we may process information such as your email address, profile information, authentication identifiers, workspace membership, role and account activity.

Workspace and client information

We may process information that you or authorized workspace members add to WEDJAT, including client names, websites, industries, team assignments, task information, calendar events, briefs, strategy notes, approval records, comments, onboarding information and manually entered KPIs.

Files and assets

If you upload files or brand assets, we may store the files and related metadata so they can be accessed by authorized members of the relevant workspace.

Connected platform data

If you choose to connect a supported third-party platform, WEDJAT may process account identifiers, account names, authorization tokens, connection status, social content metadata, analytics, performance metrics and other information made available by that platform and permitted by the permissions you approve.

Examples of supported or planned integrations may include Meta products, TikTok, YouTube, Google Analytics and Google Search Console. The exact data available depends on the platform, the permissions granted and the platform's own APIs.

Technical and usage information

We may process technical information necessary to operate, secure and improve the service, such as timestamps, login activity, feature activity, connection errors and diagnostic information.

3. How we use information

• Provide and operate WEDJAT features.
• Authenticate users and manage workspace permissions.
• Connect authorized third-party accounts and synchronize permitted data.
• Display dashboards, analytics, content performance and operational information.
• Maintain activity history, workflow status and collaboration features.
• Detect, investigate and prevent security or technical issues.
• Improve product reliability, usability and performance.
• Respond to support, privacy and data-deletion requests.

4. Third-party platforms and service providers

WEDJAT relies on third-party infrastructure and platform APIs to provide parts of the service. Those providers may process information according to their own terms and privacy policies. Connecting an external platform to WEDJAT does not transfer ownership of your external account to WEDJAT.

We may use infrastructure, authentication, hosting, database, storage and analytics providers to operate the service. We disclose data to such providers only as reasonably necessary for them to provide services to WEDJAT.

5. OAuth and authorization tokens

When you authorize a third-party platform, WEDJAT may receive access or refresh tokens needed to maintain the connection. Tokens are used to perform actions and retrieve data within the permissions you approved. We do not ask you to provide your third-party account password to WEDJAT.

You may disconnect a platform where supported, and you may also revoke WEDJAT's authorization through the relevant third-party platform.

6. Brand ownership, agency workspaces and client authorization

When registering, users can choose a Brand Owner workspace for their own business or an Agency Owner workspace for managing multiple client profiles. A brand owner may manage their business connections, analytics and team within the access controls available to their account. An agency may create client profiles and invite a client's verified email to claim ownership of the client brand.

Creating a client profile does not authorize the agency to connect that client's Google, Meta, TikTok or other third-party accounts. Connecting a client's platform requires authorization by the account's brand owner or other properly authorized representative. An agency may view and manage client-related work within the permissions provided by WEDJAT and the applicable client relationship.

A brand owner can disconnect supported accounts in WEDJAT, which removes the stored authorization credentials for that connection and stops future authorized synchronization. Previously synchronized reporting data does not automatically disappear when a connection is disconnected. For historical data deletion, changing an agency relationship or account ownership assistance, use our Data Deletion Instructions or contact support@wedjatapp.com. Independent Brand Owner accounts may operate without an agency.

7. Google Analytics and Search Console API data

With your permission, WEDJAT uses the Google Analytics read-only permission (analytics.readonly) to identify accessible GA4 properties and retrieve users, sessions, page views, engagement and other website performance statistics. It uses the Google Search Console read-only permission (webmasters.readonly) to identify verified search properties and retrieve clicks, impressions, click-through rate and average search position. These scopes do not grant WEDJAT authority to modify your Google Analytics or Search Console settings.

Google-derived data is used to display client-requested analytics dashboards, historical comparisons and performance reports. It is not sold, used for advertising targeting or used to train generalized artificial intelligence models. Access to synchronized analytics is limited through workspace and brand authorization controls; infrastructure and database providers may process data only as needed to deliver WEDJAT services.

Google access and refresh tokens may be stored in restricted service infrastructure to maintain authorized connections. WEDJAT's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements. You may disconnect a supported integration in WEDJAT or revoke authorization through your Google Account; a separate deletion request may be needed to erase previously synchronized reports.

8. Other platform integrations

Meta, TikTok, YouTube and other platform integrations may be available, limited or planned depending on app review, API availability and permissions. WEDJAT will only seek access to platform data with the relevant user's authorization and according to the access scope shown during the connection flow.

9. Data sharing

WEDJAT does not sell personal information. We may disclose information when required to operate the service, comply with applicable law, protect the security and rights of WEDJAT or others, investigate abuse, or complete a business transaction such as a merger or acquisition subject to appropriate safeguards.

10. Data retention

While a workspace or platform connection remains active, WEDJAT retains account settings and the synchronized data needed for dashboards, comparisons and service operations. Disconnecting a platform stops future access with the stored credentials but does not automatically erase previously synchronized analytics. You may request deletion of historical connected-platform data, a client brand or your account using our published instructions. We may retain limited records where necessary for legitimate security, legal, fraud prevention, backup or dispute-handling requirements.

11. Data security

We use technical and organizational measures intended to protect WEDJAT data against unauthorized access, loss, misuse or alteration. No internet-based service can guarantee absolute security, so users should also protect their account credentials and limit workspace access to authorized people.

12. Your choices and rights

Depending on applicable law, you may have rights to request access, correction or deletion of certain personal information, or to object to or restrict certain processing. Workspace owners and administrators may also control member access and connected client assets within the product.

For deletion requests, see our Data Deletion Instructions.

13. Children's privacy

WEDJAT is intended for business and professional use and is not designed for children.

14. Changes to this policy

We may update this Privacy Policy as WEDJAT evolves. When we make material changes, we will update the effective or last-updated date on this page and may provide additional notice where appropriate.

15. Contact