Effective Date: September 5, 2026
This GDPR & UK GDPR Privacy Notice (“GDPR Notice”) supplements the WhizWiser Privacy Policy and provides additional information for individuals located in the European Economic Area (“EEA”), the European Union (“EU”), and the United Kingdom (“UK”).
WhizWiser is operated by:
Consultwhiz Consultancy & E-Commerce Services
A sole proprietorship registered in India
Sirohi, Rajasthan, India
GSTIN: 08CIJPM4787M1ZC
Legal & Privacy Contact:
legal@whizwiser.com
This GDPR Notice should be read together with our Privacy Policy and Terms of Service.
If there is a conflict between this GDPR Notice and our general Privacy Policy regarding the rights of individuals protected by applicable European or UK data protection law, this GDPR Notice will apply to the extent required by applicable law.
1. Our Role Under Data Protection Law
Depending on the nature of the information and how you use WhizWiser, we may act as a data controller or data processor.
When WhizWiser Acts as Controller
WhizWiser generally acts as a controller when we determine the purposes and means of processing personal information for our own business purposes.
This may include information relating to:
- WhizWiser account registration;
- Customer relationships;
- Subscription management;
- Billing;
- Customer support;
- Website visitors;
- Marketing;
- Security;
- Analytics;
- Product improvement; and
- Other activities where WhizWiser determines the purpose of processing.
When WhizWiser Acts as Processor
Where a business customer uses WhizWiser to process personal data on that customer’s behalf, WhizWiser may act as a data processor under applicable GDPR/UK GDPR requirements.
For example, an agency or business may provide information relating to its own customers, employees, clients, or other individuals for processing through WhizWiser.
In such circumstances:
- The customer generally determines the purposes of processing;
- The customer is responsible for establishing an appropriate legal basis;
- The customer is responsible for providing required privacy notices to affected individuals; and
- WhizWiser processes applicable personal data according to the customer’s documented instructions and the applicable Data Processing Addendum.
2. Our Privacy Contact
For privacy and data protection matters, please contact:
We use this address as the central contact point for privacy requests, GDPR requests, data protection questions, complaints, and related legal communications.
3. Data Protection Officer
WhizWiser is an India-based sole proprietorship and does not currently maintain a separately appointed Data Protection Officer in the EU or UK.
The person responsible for handling WhizWiser’s privacy and data protection matters may be contacted through:
Where applicable law requires WhizWiser to appoint a formal Data Protection Officer or other representative, we will take appropriate steps to comply with that requirement.
4. Personal Data We Process
Depending on your relationship with WhizWiser and the features you use, we may process:
Identity and Account Information
- Name;
- Email address;
- Phone number;
- Company name;
- Job title;
- Country;
- Address;
- Authentication information; and
- Account information.
Technical Information
- IP address;
- Browser information;
- Device information;
- Operating system;
- Device identifiers where applicable;
- Approximate location derived from IP address;
- Login information;
- Session information;
- Usage information; and
- Security and diagnostic information.
Product Information
Depending on the WhizWiser product you use:
- Domains;
- Keywords;
- Search locations;
- Search engine information;
- Device preferences;
- Competitor information;
- Ranking data;
- Ranking history;
- Website information;
- AI prompts;
- AI-generated outputs;
- Uploaded documents;
- Images;
- Brand information;
- AI visibility information;
- Reports;
- Google Ads account information;
- Campaign information;
- Advertising performance information;
- Conversion-related information; and
- Other information necessary to provide requested functionality.
Transaction Information
We may process:
- Subscription information;
- Purchase history;
- Transaction identifiers;
- Billing information;
- Invoice information;
- Tax information;
- Payment status; and
- Refund information.
Actual payment credentials may be processed directly by our payment providers rather than stored by WhizWiser.
5. Special Categories of Personal Data
WhizWiser does not intentionally request or require users to provide special categories of personal data as part of normal use of the Services.
You should not submit sensitive information that is unnecessary for the feature you are using.
This may include, for example:
- Health information;
- Biometric information;
- Government identification information;
- Financial credentials;
- Religious information;
- Political information;
- Information concerning racial or ethnic origin;
- Sexual-orientation information; or
- Other sensitive information protected by applicable law.
If you intentionally submit such information, you remain responsible for ensuring that you have an appropriate legal basis and authority to provide it.
If WhizWiser becomes aware that sensitive information has been submitted unnecessarily, we may take reasonable steps to delete or restrict its processing where appropriate.
6. Purposes of Processing
We process personal data for purposes including:
- Providing WhizWiser Services;
- Managing user accounts;
- Authenticating users;
- Processing subscriptions;
- Processing payments;
- Providing customer support;
- Generating reports;
- Providing SEO and ranking analysis;
- Generating AI-assisted content;
- Providing AI visibility analysis;
- Providing Google Ads analysis and management;
- Maintaining historical product information;
- Securing our systems;
- Detecting fraud and abuse;
- Measuring product performance;
- Improving our Services;
- Developing new products;
- Marketing WhizWiser;
- Managing third-party integrations;
- Complying with legal obligations;
- Establishing, exercising, or defending legal claims; and
- Other purposes described in our Privacy Policy.
7. Lawful Bases for Processing
Depending on the specific processing activity, WhizWiser may rely on the following lawful bases under the GDPR and UK GDPR.
7.1 Performance of a Contract
We may process personal data when necessary to perform our contract with you.
Examples include:
- Creating your account;
- Providing purchased Services;
- Processing your subscription;
- Providing customer support;
- Generating requested reports;
- Processing your submitted content;
- Providing authorized integrations; and
- Managing your account.
7.2 Legitimate Interests
We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
Our legitimate interests may include:
- Securing our platform;
- Preventing fraud and abuse;
- Improving our products;
- Understanding service usage;
- Developing new features;
- Maintaining business operations;
- Protecting our legal rights;
- Maintaining records;
- Communicating with existing customers;
- Measuring marketing effectiveness; and
- Maintaining and improving platform reliability.
Where we rely on legitimate interests, we consider the nature of the processing and its impact on individuals.
7.3 Consent
We may rely on consent where applicable law requires consent.
Examples may include certain:
- Non-essential cookies;
- Analytics technologies;
- Advertising technologies;
- Marketing communications; and
- Other optional processing activities.
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.
7.4 Legal Obligations
We may process personal data where necessary to comply with legal obligations, including:
- Tax requirements;
- Accounting requirements;
- Regulatory obligations;
- Court orders;
- Law-enforcement requests;
- Security obligations; and
- Other legal requirements.
8. Automated Decision-Making and Profiling
WhizWiser uses AI and automated systems to provide recommendations, analysis, content, and other functionality.
These systems may analyze information to generate:
- SEO recommendations;
- Content suggestions;
- AI visibility analysis;
- Advertising recommendations;
- Campaign optimization suggestions;
- Ranking analysis; and
- Other marketing insights.
WhizWiser does not intend these systems to make decisions that produce legal or similarly significant effects on individuals.
Adspilot may automatically make changes to an authorized Google Ads account when the account owner has explicitly enabled the relevant automation settings.
Such actions concern the customer’s advertising account and campaign configuration rather than decisions about an individual’s legal rights, employment, creditworthiness, access to essential services, or similar matters.
Where applicable law provides rights concerning automated decision-making or profiling, you may contact us at:
9. AI Processing
WhizWiser uses AI technologies from multiple providers.
Depending on the feature, your information may be processed by third-party AI providers to generate requested outputs.
This may include:
- Prompts;
- Instructions;
- Website information;
- Keywords;
- Content;
- Brand information;
- Reports; and
- Other information necessary to provide AI functionality.
We seek to use AI service providers under contractual arrangements appropriate to the nature of the information processed.
WhizWiser does not intend to permit third-party AI providers to use customer API data for training their general-purpose models where our applicable agreements prohibit such use.
WhizWiser may use information, subject to applicable law and appropriate controls, to improve its own AI-powered systems, including future retrieval-augmented generation (“RAG”) systems and related internal technologies.
10. Data Recipients
Personal data may be disclosed to categories of recipients including:
- Hosting providers;
- Cloud infrastructure providers;
- Database providers;
- AI providers;
- Payment processors;
- Email service providers;
- Analytics providers;
- Advertising and measurement providers;
- Authentication providers;
- SEO and ranking data providers;
- Google services;
- Professional advisors;
- Legal advisors;
- Auditors;
- Regulators;
- Law-enforcement authorities; and
- Other service providers necessary to operate the Services.
Our infrastructure may currently involve providers such as Vercel, Railway, Hostinger, Cloudflare, Google, OpenAI, Razorpay, ZeptoMail, and analytics/advertising providers.
The specific providers used may change as WhizWiser develops.
11. International Data Transfers
WhizWiser is based in India.
Our infrastructure is currently hosted, in whole or in part, in Singapore.
Some third-party service providers used by WhizWiser may process personal data in countries outside the EEA, UK, or your country of residence.
Where personal data protected by GDPR or UK GDPR is transferred internationally, WhizWiser will seek to use a legally recognized transfer mechanism where required.
Depending on the circumstances, this may include:
- An adequacy decision;
- Standard Contractual Clauses (“SCCs”);
- The UK International Data Transfer Agreement (“IDTA”);
- The UK International Data Transfer Addendum;
- Appropriate contractual safeguards;
- Technical and organizational safeguards; or
- Another legally recognized transfer mechanism.
The applicable mechanism depends on the specific transfer, recipient, and applicable law.
12. Standard Contractual Clauses
Where required by applicable GDPR law, WhizWiser may use the European Commission’s Standard Contractual Clauses or another approved transfer mechanism for transfers of personal data to jurisdictions without an applicable adequacy decision.
For UK-restricted transfers, WhizWiser may use the applicable UK transfer mechanism, including the UK International Data Transfer Agreement or UK Addendum where appropriate.
The exact transfer mechanism may vary by service provider and processing arrangement.
Business customers may request additional information about applicable transfer safeguards by contacting:
13. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in our Privacy Policy, unless applicable law requires or permits longer retention.
Examples include:
Account Information
Generally retained while your account remains active and for a reasonable period afterward where necessary for legal, security, accounting, or legitimate business purposes.
User Content
Generally retained until you delete the content or your account, subject to applicable exceptions.
Keyword Ranking History
May be retained for as long as you choose to maintain the historical ranking data.
You may delete eligible ranking history through available account functionality.
AI Visibility Reports
May be retained until you delete the applicable reports or account.
Billing Records
May be retained as necessary to satisfy tax, accounting, financial, and legal obligations.
Security and Technical Logs
May be retained for a reasonable period necessary to maintain security, investigate incidents, prevent fraud, troubleshoot problems, and operate the Services.
Backups
Deleted information may remain temporarily within backups until the applicable backup cycle expires or the information is securely overwritten.
14. Your GDPR and UK GDPR Rights
Subject to applicable law and relevant exceptions, you may have the following rights.
Right of Access
You may request confirmation of whether we process your personal data and request access to that information.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of personal data in circumstances where the law provides this right.
Right to Restriction
You may request restriction of processing in circumstances provided by applicable law.
Right to Object
You may object to certain processing, including processing based on legitimate interests.
You may also have an unconditional right to object to direct marketing.
Right to Data Portability
Where applicable, you may request personal data in a structured, commonly used, and machine-readable format and request its transmission to another controller where legally required.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time.
Rights Relating to Automated Decision-Making
Where applicable, you may have rights concerning solely automated decisions that produce legal or similarly significant effects.
15. Exercising Your Rights
You may exercise applicable rights by contacting:
To protect your account and personal information, we may request reasonable information necessary to verify your identity.
We will not normally charge a fee for responding to a valid privacy request unless permitted by applicable law, including where requests are manifestly unfounded or excessive.
We aim to respond within the timeframe required by applicable law.
16. Right to Complain
If you believe WhizWiser has processed your personal data unlawfully, you may contact us first at:
You also have the right to lodge a complaint with the data protection authority applicable to your location.
European Union / EEA
You may contact the supervisory authority in the EU/EEA country where you live, work, or believe an infringement occurred.
United Kingdom
You may contact the Information Commissioner’s Office (ICO) if you are located in the UK.
We encourage you to contact us first so that we have an opportunity to address your concern, but you are not required to do so before contacting a supervisory authority.
17. Direct Marketing
WhizWiser may send promotional communications where permitted by applicable law.
You may unsubscribe from promotional email communications using the unsubscribe mechanism included in applicable communications.
You may continue to receive important non-promotional communications, including:
- Security notices;
- Billing communications;
- Account notifications;
- Service announcements; and
- Other essential communications.
18. Cookies and Consent
WhizWiser uses cookies and similar technologies for:
- Authentication;
- Security;
- Analytics;
- Product performance;
- Advertising;
- Attribution;
- Marketing measurement; and
- Other purposes.
For EEA and UK users, WhizWiser intends to obtain consent for non-essential cookies and similar technologies where required by applicable law.
This may include technologies provided by:
- Google Analytics;
- Google Tag Manager;
- Microsoft Clarity;
- PostHog;
- Google Ads;
- Meta;
- LinkedIn; and
- Other analytics or advertising providers.
You may manage applicable cookie preferences through the cookie controls provided on our website.
For additional information, see our Cookie Policy.
19. California and Other Non-European Rights
WhizWiser may have customers and users outside Europe.
Privacy rights applicable to users in other jurisdictions are described in our general Privacy Policy and applicable supplementary notices.
These may include rights under:
- California privacy laws;
- Indian data protection law;
- Australian privacy law;
- UAE data protection law; and
- Other applicable legislation.
20. Business Customers and Data Processing Agreements
If you use WhizWiser as a business or agency and provide personal data to us for processing on your behalf, we may enter into a separate Data Processing Addendum (“DPA”).
The DPA may address:
- Processing instructions;
- Confidentiality;
- Security;
- Subprocessors;
- International transfers;
- Data subject requests;
- Data breach obligations;
- Deletion/return of data; and
- Other processor obligations.
Where the DPA applies, it governs the relevant processing relationship between the customer and WhizWiser.
21. Data Security
WhizWiser uses reasonable technical and organizational safeguards intended to protect personal data.
These may include:
- HTTPS/TLS;
- Encryption;
- Access controls;
- Authentication controls;
- Infrastructure security;
- Backups;
- Logging and monitoring where implemented;
- Abuse prevention measures where implemented; and
- Other appropriate security measures.
Our security practices may evolve as the platform develops.
We do not claim that any specific security control is implemented unless it is actually deployed.
No online system can be guaranteed to be completely secure.
22. Personal Data Breaches
If WhizWiser becomes aware of a personal data breach, we will assess the incident and take appropriate steps required by applicable law.
Where legally required, we may notify:
- Relevant supervisory authorities;
- Affected customers;
- Affected individuals; and/or
- Other appropriate parties.
Notifications will be made within the timeframes and in the manner required by applicable law.
23. Data Protection for Agency and Business Customers
If you are an agency or business using WhizWiser to process personal data belonging to your customers or other individuals, you remain responsible for:
- Establishing a lawful basis for processing;
- Providing appropriate privacy notices;
- Obtaining required consents;
- Ensuring that information submitted to WhizWiser is lawfully obtained;
- Providing appropriate instructions to WhizWiser;
- Responding to requests from your customers where you are the controller; and
- Complying with applicable data protection laws.
WhizWiser will process such data according to the applicable agreement and DPA.
24. Data Minimization
You should only provide information reasonably necessary for the functionality you are using.
You should not use WhizWiser to store information that is unrelated to your marketing, SEO, advertising, content, analytics, or other legitimate business purposes.
In particular, users should not submit:
- Passwords;
- Payment credentials;
- Government identification documents;
- Unnecessary sensitive personal data;
- Confidential information they are not authorized to disclose; or
- Other information unrelated to the requested Service.
25. Changes to This GDPR Notice
We may update this GDPR Notice when:
- Our processing practices change;
- We introduce new products;
- We add or change service providers;
- Applicable laws change;
- Our international operations change; or
- We implement new privacy controls.
The latest version will be published on the WhizWiser website.
26. Contact
For all GDPR and UK GDPR matters:
Consultwhiz Consultancy & E-Commerce Services
Operating WhizWiser
Sirohi, Rajasthan, India
Legal & Privacy Contact:
legal@whizwiser.com
Website: whizwiser.com
