Privacy Policy

When you contact us or engage our design services, we may collect:

• Contact details you provide — your name, email, and any phone or messaging handle you use to reach us
• Project information — the brief, materials, and files you share with us
• Career applications — your details, portfolio link, and any files you submit
• Deck analysis (wetr.io/analyzer) — the presentation file you upload, the text and design properties we extract from it, what you tell us the deck has to do, and the analysis we produce from all of that
• Communication history and preferences
• Billing information needed to invoice you for services
• How you reached us — the campaign, link, or search that brought you to the site on your first visit, kept in your browser and attached to an enquiry only if you send one
• Website usage data collected through analytics — from your first visit this is counted without cookies and without anything that identifies you; cookies and identifiers are added only if you accept them (see Cookies & Analytics)

We use your information to:

• Respond to enquiries and deliver design projects
• Communicate with you about your project
• Issue invoices and process payments
• Improve our website and services
• Understand which of our campaigns and channels actually bring enquiries
• Analyse a presentation you upload and send you the result
• Follow up about a deck you had analysed, if you asked us to email it to you

We process your data to perform our contract with you, to comply with legal obligations, and, where relevant, on the basis of your consent or our legitimate interest in running our studio.

Two of those are worth separating. Emailing you the analysis you asked for is us doing the thing you requested. Following up afterwards about your deck is marketing, and it happens only because you left your address for that purpose — no more than four emails over three weeks, and one click stops them permanently.

We take security seriously and apply measures including:

• Encrypted connections for all data in transit (HTTPS)
• Encryption at rest for enquiry and application details — including your name, email, and message — using AES-256-GCM
• Private file storage reachable only through short-lived, access-controlled links
• Access restricted to authorised team members
• Regular security reviews

No system is completely secure, so we can't guarantee absolute security, but we work hard to protect your data.

We do not sell your personal data. We share it only when you authorise it, when the law requires it, or with the trusted providers that help us operate:

• Supabase — database and secure file storage
• Cloudflare Turnstile — spam and bot protection on our forms
• Google (Gemini API) — analysing presentations uploaded to our deck analysis tool; the file's contents are sent to Google to produce the critique
• Resend — sending transactional emails, such as confirmations and deck analyses
• Telegram — internal notifications to our team when you submit an enquiry
• Google Analytics and Google Tag Manager — website analytics. The tag container loads on every visit, but until you accept it is not allowed to store anything: no cookies are set and no identifiers are sent.
• Microsoft Clarity — session recording and heatmaps, loaded only after you consent
• PostHog — website and funnel analytics, hosted in the EU (eu.posthog.com). It runs on every visit in a cookieless mode that sets nothing on your device and stores neither your IP address nor your browser's user agent, so a visit cannot be tied to you; only after you accept do we enable its cookies, session recording, and heatmaps. IP addresses are anonymised at the project level either way.
• Meta (Facebook) — advertising and conversion measurement via the Meta Pixel, loaded only after you consent

These providers process data on our behalf under appropriate agreements. Some may process data outside your country; where that happens, we rely on appropriate safeguards.

Our website uses cookies and similar technologies to:

• Remember your cookie preferences
• Understand how the site is used so we can improve it
• Play embedded video

Cookies that are not strictly necessary — analytics, advertising, and session recording — are set only after you accept them in our cookie banner. Analytics itself begins on your first visit in a cookieless mode: page views are counted, nothing is stored on your device, and no identifier is created, so a visit cannot be tied to you or to your next one. If you decline, it stays that way. You can change or withdraw your choice at any time: Cookie settings — also in the footer of every page — reopens this banner. Choosing essential-only there also deletes the analytics and advertising cookies already stored on your device, and reloads the page so that anything still running in the tab stops with it.

Separately from analytics, we keep one small record in your browser's local storage: the campaign, link, or search that brought you to the site, and the page you landed on. It sets no cookie, is sent to no advertiser, and is never used to build a profile of you — it exists so that when an enquiry arrives we can tell which of our own ads or links brought it, which is the only way a studio our size can know what its advertising is actually doing. We keep it for 90 days, and it reaches us only if you send us an enquiry. Clearing your browser's site data removes it. We rely on our legitimate interest in measuring our own marketing; if you would rather we did not, write to start@wetr.io. When you send us an enquiry, this record travels with it, together with the identifiers our analytics is already using for that visit, so we can see which page and which campaign led to it rather than only that something did. If you write to us on Telegram or WhatsApp from a link on this site, that link adds a short random code for the visit to the message it opens: it identifies the visit, not you, and you are free to delete it before sending.

We keep your data only as long as needed to:

• Fulfil our contractual obligations
• Meet legal, accounting, and tax requirements
• Resolve potential disputes

Project files and communications are typically kept for up to 3 years after a project ends. You can ask us to delete your data sooner.

For the deck analysis tool specifically: the presentation you upload is deleted within 30 days, the link to your analysis stops working after 30 days, and the analysis itself is kept with your enquiry. If you unsubscribe we keep a one-way, unreadable fingerprint of your address indefinitely — that record exists solely so we can honour "don't email me again" even after everything else about you is deleted.

Under the GDPR and applicable law, you have the right to:

• Access the personal data we hold about you
• Ask us to correct or update it
• Ask us to delete it
• Object to or restrict certain processing
• Withdraw your consent at any time
• Receive a copy of your data (portability)
• Unsubscribe from our emails — every email we send carries a one-click unsubscribe link, and you can also write to start@wetr.io

Automated analysis: the score and findings our deck analysis tool produces are generated automatically. They have no legal or similarly significant effect on you, and if you disagree with them you can reply to the email and a person from the studio will look at your deck.

To exercise any of these rights, email us at start@wetr.io. You also have the right to lodge a complaint with your local data protection authority.

WeTrio Agency is a brand of Fundacja Rozwoju Przedsiębiorczości „TwojStartUp”, a Polish foundation registered in the National Court Register (KRS). The foundation is the controller of the personal data described in this policy.

• Fundacja Rozwoju Przedsiębiorczości „TwojStartUp”
• ul. Żurawia 6/12 lok. 766, 00-503 Warszawa, Poland
• KRS 0000442857 · NIP 5213641211 · REGON 146433467
• EU VAT PL5213641211

For any privacy question, reach us using the details below.

If you have questions about this Privacy Policy or how we handle your data:

Email: start@wetr.io

Telegram: @wetr_io

WhatsApp: +48 506 782 768