Datenschutz

1. Who we are

Brava Labs LLC (30 N Gould St, Sheridan, Wyoming 82801, USA) operates Wattprint and is responsible for the personal data described here. Data-protection contact: privacy@wattprint.com.

2. Data we process

• Account data: name, work email, hashed password, organization, role.
• Organization data you import: your workforce directory (names, emails, departments, managers, countries, job titles), AI license assignments and last-activity / usage metadata. This is personal data of your employees, for which you are the controller and we are the processor.
• LLM usage metadata: for calls routed through the gateway — model, token counts, latency, tags and the computed footprint. Not the content of requests.
• Payment data: handled by Stripe. We store only customer/subscription identifiers and status — never card numbers.
• Essential cookies: a signed session cookie and a language preference cookie. No advertising or third-party tracking.

3. What we do NOT process

We do not store your prompts, the models' responses, your documents or files, or the content of your AI interactions. The gateway forwards them and records only metadata.

4. Purposes and legal bases (GDPR)

We process data to provide the Service (performance of a contract), to secure and improve it (legitimate interest), to bill (contract / legal obligation), and to comply with the law. For imported employee data we act on your documented instructions as processor.

5. Subprocessors

We use a hosting provider (EU region), Stripe (payments) and an email provider, each bound by data-protection terms. A current list is available on request. We never sell personal data.

6. International transfers

Brava Labs LLC is a US entity. Where EU/EEA personal data is transferred, we rely on the EU Standard Contractual Clauses, offer EU-region hosting, and minimize the data we hold to metadata.

7. Retention

Metadata is retained for the life of your account and deleted or returned on request, or within a reasonable period after termination.

8. Security

Provider credentials and OAuth tokens are encrypted at rest; traffic is encrypted in transit; access is role-based and sensitive actions are logged. See our Security page.

9. Your rights

Subject to applicable law (GDPR/CCPA), you may request access, rectification, erasure, restriction, portability or object to processing. For employee data, rights are exercised through the customer (controller). For account data, contact privacy@wattprint.com.

10. Cookies

We use strictly-necessary cookies only (session and language). No tracking, analytics-for-ads, or third-party profiling.

11. Children

Wattprint is a business service and is not directed to individuals under 16.

12. Changes and contact

We will post updates with a new "last updated" date. Privacy: privacy@wattprint.com · Security: security@wattprint.com.