Privacy Policy

We use information as reasonably necessary to:

• Create, maintain, secure, and administer customer accounts
• Process and edit Customer Content using AI-assisted and human-assisted workflows
• Provide quality control, revisions, technical support, and customer service
• Process payments and maintain transaction records
• Operate, secure, troubleshoot, and improve the Service without using customer-uploaded photos, videos, or project files to train Wymaro's AI models
• Prevent fraud, abuse, and security incidents
• Comply with applicable legal obligations and enforce our Terms & Conditions

We do not use Customer Content to train our AI models.

Wymaro does not use customer-uploaded photographs, videos, or project files to train Wymaro's artificial intelligence models. Customer Content is processed only as reasonably necessary to provide the services requested by the customer, including AI-assisted editing, human quality control, corrections, revisions, support, security, and related service operations.

Wymaro may use non-content operational information, such as aggregate service-performance statistics that do not identify a customer or reveal Customer Content, to understand and improve the operation of the Service.

Wymaro uses human production personnel and contractors to review and edit Customer Content when necessary, including to correct AI mistakes, perform quality control, complete requested edits, or provide support. Authorized production personnel and contractors may be located in Pakistan.

Access to Customer Content is limited to authorized persons who require access for Wymaro-related work. Customer Content may not be used by Wymaro personnel or contractors for their own purposes or to train AI models.

Wymaro uses third-party service providers to operate the Service. Current providers include:

• Amazon Web Services (AWS) for cloud infrastructure, storage, and related processing
• Stripe for payment processing

Wymaro may add or change service providers as the Service develops. We may also disclose information when required by law, to protect the rights or security of Wymaro or others, or in connection with a merger, financing, sale, reorganization, or transfer of the business.

We do not sell Customer Content.

We do not authorize third parties to use Customer Content for their own AI training purposes.

Wymaro is based in Canada, but Customer Content and personal information may be accessed, stored, or processed outside Canada. In particular, authorized production personnel and contractors in Pakistan may access Customer Content to provide editing and quality-control services. Cloud and other service providers may also process information in jurisdictions where they operate.

When information is processed outside your jurisdiction, it may be subject to the laws of that jurisdiction. Wymaro uses contractual, organizational, and technical safeguards appropriate to the nature of the information and the services being provided.

For active accounts, completed and edited images are retained in the customer's Wymaro gallery for as long as the customer's account remains open and Wymaro continues to operate the Service, unless the customer requests deletion or deletion is otherwise required by law.

If a customer closes an account, Wymaro intends to delete Customer Content associated with the closed account within 90 days, subject to reasonable backup cycles, legal requirements, dispute resolution, fraud prevention, and other legitimate retention obligations.

Other records, including billing, transaction, security, and support records, may be retained for different periods where reasonably necessary for legal, accounting, security, or operational purposes.

Wymaro uses reasonable administrative, technical, and organizational safeguards designed to protect personal information and Customer Content against unauthorized access, use, alteration, loss, or disclosure. No online service can guarantee absolute security.

If Wymaro becomes aware of a security breach, we will investigate and provide notifications or reports where required by applicable law.

Depending on where you live, you may have rights concerning your personal information, including rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent where applicable. Some rights are subject to legal exceptions.

To make a privacy request, contact the Privacy Officer at support@wymaro.com. We may take reasonable steps to verify your identity before completing a request.

Wymaro is accountable for personal information under applicable Canadian privacy requirements. Questions, access or correction requests, deletion requests, and privacy complaints may be directed to the Privacy Officer. Wymaro will review and respond to privacy requests in accordance with applicable law.

Where European or UK data-protection law applies, Wymaro processes personal data on one or more lawful bases, including performance of a contract, compliance with legal obligations, consent where required, and legitimate interests where permitted. Where personal data is transferred internationally, Wymaro will use a legally recognized transfer mechanism where required.

Where California privacy law applies to Wymaro, eligible California residents may exercise the rights provided by applicable law. Wymaro does not sell Customer Content. If Wymaro's practices or legal obligations change, this Privacy Policy will be updated as necessary.

The Service is intended only for users who are at least 18 years old. Wymaro does not knowingly permit children under 18 to create accounts.

We may update this Privacy Policy as Wymaro, our technology, or applicable legal requirements change. We will post the updated version and revise the "Last updated" date. Where required, we will provide additional notice of material changes.

For questions or concerns, contact the Privacy Officer at: