Legal
Privacy Policy
This Privacy Policy explains how Wisad collects, uses, stores, shares, and deletes personal and business data when you use wisad.co, our apps, storefront integrations, and social publishing features.
1. Introduction
Wisad ("Wisad", "we", "us", or "our") operates the website wisad.co and related applications and services that help merchants create marketing videos, publish them to social platforms, and embed video experiences on storefronts.
This Privacy Policy applies to merchants, account users, visitors to our marketing site, and—where relevant—limited storefront shopper signals processed through our widgets and approved platform integrations. By using Wisad, you acknowledge this Policy. If you do not agree, do not use the Service.
2. Who we are and how to contact us
Wisad is the data controller for personal data collected through wisad.co and our hosted Service, unless a specific integration agreement states otherwise.
Primary privacy contact: privacy@wisad.co. General support: hello@wisad.co. Postal/business location: Riyadh, Kingdom of Saudi Arabia. You may also use our contact page at /contact.
3. Scope of this Policy
This Policy covers data processed when you create an account, connect a storefront (including Shopify or Salla), connect social accounts (including TikTok, YouTube, or Snapchat), paste business or product URLs, upload brand assets, generate or publish videos, embed Wisad widgets, subscribe to paid plans, or communicate with support.
Third-party platforms you connect (for example Shopify, Salla, TikTok, Google/YouTube, Snapchat, or payment providers) have their own privacy policies. Their processing of your data is governed by those policies in addition to this one.
4. Information we collect
We collect the categories of information described below. Exact fields depend on the features you use and the permissions you grant.
- Account and identity data: name, email address, authentication credentials or OAuth identifiers (including Google sign-in), preferred language, organization/workspace membership, and support correspondence.
- Business and brand data: business name, category, city, contact numbers (including WhatsApp), logos, colors, fonts, CTAs, and other brand-kit details you provide.
- Source and creative inputs: URLs you submit (store, product, menu, Ma'roof, Instagram, website, or similar), public page content we fetch to build a video brief, uploaded images/clips, captions, and generation settings.
- Generated content and operational logs: rendered videos, captions, hashtags, thumbnails, render status, job identifiers, and related technical logs needed to operate and debug the Service.
- Storefront integration data: shop domain/store identifiers, installation status, product catalog fields required for video creation (such as product titles, images, descriptions, and prices), widget configuration, and consented commerce or engagement events used for attribution where you enable those features.
- Social connection data: account identifiers, display names, profile images, granted OAuth scopes, access/refresh tokens, and content metadata needed to list, upload, or publish videos on platforms you connect.
- Payment and billing data: plan selection, billing name, transaction identifiers, card brand and last four digits, and subscription status from our payment processor. We do not store full card numbers on Wisad servers.
- Usage, device, and analytics data: pages viewed, feature usage, approximate device/browser information, IP address, cookies or similar technologies, and performance metrics (including Firebase Analytics events where enabled).
- Shopper interaction signals (storefront widgets): limited, purpose-bound events such as widget load, video play progress, CTA clicks, and—where platform permissions and merchant consent settings allow—attribution-related events. We design widgets to minimize personal data and respect platform consent mechanisms where available.
5. How we use information
We use collected information to:
- Provide, operate, secure, and improve the Service, including video generation, hosting, publishing, and storefront embeds.
- Authenticate users, manage workspaces, and prevent fraud, abuse, or security incidents.
- Connect and maintain storefront and social integrations you authorize, and process only the permissions needed for the features you enable.
- Process subscriptions, invoices, renewals, failed-payment recovery, and customer support.
- Send transactional messages (account, billing, security, render status). Marketing messages are sent only where permitted and can be opted out of where applicable.
- Measure product performance, diagnose failures, and develop new features using aggregated or de-identified insights where practical.
- Comply with law, respond to lawful requests, and enforce our Terms of Service.
6. Legal bases and Saudi Personal Data Protection Law
Where the Saudi Personal Data Protection Law (PDPL) or other applicable privacy laws apply, we process personal data based on one or more of the following: performance of a contract with you; your consent (including OAuth and cookie/consent choices); our legitimate interests in operating a secure commercial Service in a way that does not override your rights; and compliance with legal obligations.
You may withdraw consent for optional processing (such as disconnecting a social account or adjusting cookie preferences) without affecting processing that is necessary to provide the core Service you requested, except where the feature itself depends on that consent.
7. Storefront integrations (Shopify, Salla, and similar)
When you install or connect a Wisad storefront app or embed, we process merchant store data needed to create videos, configure widgets, and—if enabled—measure how embedded video influences shopper engagement.
For Shopify specifically, Wisad may request scoped access such as reading product information, writing pixels, and reading customer events required for consented attribution. We do not request broader order or customer PII scopes than needed for the features we provide. We honor Shopify’s mandatory compliance webhooks (including customers/data_request, customers/redact, and shop/redact) to respond to data-subject and shop deletion requests.
For Salla and other storefront platforms, we process store connection tokens and catalog/commerce signals similarly, limited to the purposes of installation, video creation, widget delivery, and attribution features you enable.
Merchant customer personal data obtained through a platform is used only to provide the merchant’s requested Wisad features, to comply with platform requirements, and to fulfill legal obligations. We do not sell merchant customer personal data.
9. Source URLs, public content, and AI processing
When you submit a business or product URL, Wisad may fetch publicly available content to extract titles, images, prices, descriptions, and related marketing context. You represent that you have the right to use that content for your marketing.
We may send necessary inputs (such as product imagery, brief text, or style instructions) to subprocessors that perform model inference or media rendering. Those providers process data on our instructions to generate outputs for your account and are not authorized to use your content to build unrelated public datasets for their own advertising.
For optional AI video generation, product text and an optional image are sent to fal for Seedance video generation; music direction is sent to ElevenLabs; and temporary signed media links plus optional call-to-action text are sent to Shotstack for the final mix. Completed media is stored with Cloudflare and may be imported to Cloudflare Stream.
10. Generated videos and licenses needed to operate
As between you and Wisad, you retain ownership of videos generated from your business inputs, subject to third-party rights in source materials and platform terms. Wisad receives a limited license to host, process, transcode, cache, and display your content as needed to operate the Service, including private outreach preview pages you authorize.
11. Payments
Paid subscriptions are processed by Moyasar and, where applicable, by storefront billing providers (for example Shopify Billing when you subscribe through a Shopify-installed experience). Payment providers process card and transaction data under their own privacy policies. Wisad stores billing status and limited card metadata (such as brand and last four digits) to manage your subscription.
14. International transfers
Wisad is operated from Saudi Arabia and may process data on infrastructure or subprocessors located in other countries. Where we transfer personal data internationally, we take steps designed to provide an appropriate level of protection consistent with applicable law and our contractual obligations with providers.
15. Retention and deletion
We retain account, business, and generated content data while your account is active and for a reasonable period afterward for billing reconciliation, security, dispute handling, and legal compliance.
You may request deletion of your account and associated personal data by contacting privacy@wisad.co or hello@wisad.co. We will action verifiable requests within timelines required by applicable law (and typically within 30 days where no longer retention period is legally required). Some records (for example invoices or security logs) may be retained longer where the law requires.
For Shopify and similar platforms, we also delete or anonymize in-scope data when we receive valid platform redaction webhooks or uninstall/shop deletion events.
16. Security
We use administrative, technical, and organizational measures designed to protect personal data, including encrypted transport (HTTPS), access controls, secret management for OAuth tokens, and least-privilege integration scopes. No method of transmission or storage is perfectly secure; you are responsible for safeguarding account credentials and connected-platform access.
17. Children’s privacy
Wisad is a business service intended for merchants and professionals. It is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact privacy@wisad.co and we will take appropriate steps to delete it.
18. Your rights
Depending on applicable law (including the PDPL where it applies), you may have rights to request access, correction, deletion, restriction, or a copy of your personal data, and to withdraw consent for optional processing. Merchants remain responsible for handling privacy requests from their own end customers except where Wisad must respond directly under platform compliance rules.
To exercise rights, email privacy@wisad.co with enough detail for us to verify and fulfill the request. You may also contact the competent Saudi authority if you have an unresolved complaint under applicable law.
19. Changes to this Policy
We may update this Privacy Policy to reflect product, legal, or operational changes. The "Last updated" date at the top of this page will change when we do. Material changes may also be communicated by email or in-product notice where appropriate. Continued use of the Service after an update constitutes acceptance of the revised Policy to the extent permitted by law.
20. Contact
Privacy questions and data requests: privacy@wisad.co. Legal inquiries: legal@wisad.co. Support: hello@wisad.co or https://wisad.co/contact.
Get started
Questions about your data?
Privacy and data requests are handled by our team within one business day where possible.
8. Social platform connections (TikTok, YouTube, Snapchat)
If you connect a social account, Wisad receives tokens and profile information from that platform so you can publish or manage videos from Wisad. Typical purposes include authenticating your account, reading profile details needed to confirm the correct destination account, listing recent videos where permitted, and uploading or scheduling content you choose to publish.
YouTube / Google data we access and store includes OAuth access and refresh tokens, granted scopes, your YouTube channel ID, title, handle, profile image, view count, subscriber count, video count, and the IDs, URLs, titles, descriptions, visibility, upload status, and processing status of videos you choose to upload through Wisad. We use this data only to show the connected destination channel, display channel performance, upload the video you approve with the visibility you select, show upload progress and results, maintain the connection, secure the service, and troubleshoot failures.
We do not sell Google user data or use it for advertising, credit decisions, or training general-purpose AI models. We share only the data needed to provide these features with Google/YouTube and infrastructure providers acting on our instructions for hosting, database, security, logging, and media delivery. We do not allow those providers to use Google user data for their own advertising or unrelated purposes. Google user data is protected using HTTPS in transit, restricted service-role access, database access controls, secret management, and operational logging designed to avoid exposing OAuth tokens.
You can disconnect YouTube from Wisad at any time. Disconnecting programmatically revokes Wisad’s Google authorization and deletes the stored tokens, channel data, and YouTube publishing history associated with that connection from Wisad as soon as possible. Videos already uploaded remain in your YouTube account and must be managed in YouTube. You may also revoke access from Google’s permissions page at https://security.google.com/settings/security/permissions. If Google authorization can no longer be refreshed, we delete the associated YouTube API data as soon as possible and no later than 30 calendar days after we detect the revocation. You may request deletion at privacy@wisad.co; verified requests for stored YouTube API data are completed as soon as possible and within 7 calendar days.
Wisad uses YouTube API Services. By using Wisad’s YouTube features, you also agree to the YouTube Terms of Service at https://www.youtube.com/t/terms. Google’s Privacy Policy is available at https://policies.google.com/privacy.
Wisad’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve user-facing features that are prominent in the Wisad interface, and not for independent advertising or selling personal data.
TikTok and Snapchat: we use granted scopes only for the connected publishing and account features you enable. Platform content policies continue to apply to anything you publish through Wisad.