Privacy notice

What we collect

When you use the enquiry form we collect the details you enter: who you are enquiring as, your name, email address, company if given, and your message. We do not collect payment details or run advertising trackers on this site.

How we use it

We use enquiry details only to reply to you and, if you ask to join the pilot, to arrange it. We do not sell or share your details with third parties for their own purposes.

Where it goes

Enquiries are stored as private records in WICOVA's storage on Vercel, the company that hosts this site, and are read only by the WICOVA team. Vercel processes data in the United States under its data processing agreement. We delete enquiry records once they are no longer needed to reply to you or to run the pilot.

Product passports and Vision

A product passport records its activation and burn sessions. Anyone with its tag or passport link can open those product records, so keep the link private if you do not want to share them.

Vision is optional. Your selected photo stays on your device until you agree to the cloud check and press Analyse. The browser resizes the photo and removes embedded metadata, including camera location metadata. Only the photo and your selected concern are sent through WICOVA to OpenAI for analysis; do not include people, documents or other private details in it.

WICOVA does not save the photo or free-form AI analysis text on its server. We keep request identifiers, the passport reference, consent version, timestamps and usage counts to enforce the test allowance and prevent repeat charges. OpenAI processes the photo under its API data policy: API inputs are not used for model training by default, and abuse monitoring records may be retained for up to 30 days, with exceptions described in that policy. Processing may occur outside the UK. See OpenAI's API data policy.

If you choose Save result in this browser, the result is stored only here, without the photo. It is not synced to your account or other devices. You can clear saved checks from Vision or by clearing this site's browser data. Cancelling before Analyse prevents upload; cancelling after submission cannot recall a photo already sent for processing.

Optional customer accounts

Where account sign-in is enabled, you can use an email verification code or Sign in with Apple. We store your account identifier, verified email when provided, sign-in provider, protected session records and the passports you choose to save. Email codes are delivered through Resend. Apple receives sign-in requests when you choose Apple; WICOVA does not receive your Apple password. We retain an encrypted Apple authorization grant to validate access and revoke it when you delete your account.

Accounts use essential secure cookies to keep you signed in and protect verification. Your private collection is separate from the public passport. Another person saving the same passport does not get access to your account or private Vision checks.

When you explicitly choose Save to my account, WICOVA stores the check time, bounded findings, selected concern, model version and passport reference in its database. No photo is saved. The results are available on devices where you sign in. A short-lived proof allows a new check to be saved for one hour; expiring anti-replay hashes are kept until routine cleanup to prevent a deleted check from being submitted again. If you continue through Apple while a result is pending, the proof is kept temporarily in this browser tab so you can choose whether to save it after returning.

You can delete individual private checks, remove a passport and its private checks from your collection, or delete your account from account settings. Account deletion removes your collection, private checks and WICOVA sessions; it does not delete the product’s public passport or shared burn records. Browser-only copies are separate and can be cleared in Vision. Limited hashed security receipts may remain after deletion to prevent reuse of revoked Apple authorizations and deleted check proofs. Account records are held in WICOVA’s hosted database; hosting and authentication providers process the information needed to operate these features.

Your choices

You can ask us to correct or delete anything you have sent us by emailing hello@wicova.com.