Version 2026-10-13 · Draft
Privacy Policy
1. Who we are
WYRAGO is operated by Anageno Padel Specialists Ltd, Nicosia, Cyprus ("we", "us", "our"). We are the controller of the personal data described in this policy.
For anything about your personal data, write to info@wyrago.com.
WYRAGO is for businesses. It is not meant for children under 18.
2. Summary
- We keep what you give us to run WYRAGO for you and your club.
- Your conversation with Eva is sent to Anthropic, in the United States, to write Eva's replies. This happens only after you agree.
- We do not sell or share personal data, and never have.
- We use no tracking cookies, no analytics and no advertising.
- You can ask us to see, correct or delete your data at any time.
3. What we collect
Your account
- Your name and email address.
- Your club's name.
- If you signed up on our form: your club's website or social media handle, its country, your role at the club (owner, manager, coach or other) and whether it has padel. We also keep where you came from: the campaign words in the link you followed, the site that sent you (without its query part) and the first page you opened.
- When you accepted our Terms of Use and Privacy Policy, and which versions.
- Whether you asked for occasional WYRAGO updates.
- If you set a password: only a protected form of it (a salted hash). We cannot read your password.
Signing in
- Sign-in links: we store only a one-way code (a hash) of each link, never the link itself. We record when a link was used and for which sign-in.
- Your sign-in on a device: we store only a hash of it, your account, and when it ends (after 30 days). We keep it in a cookie called
wyrago_session. This cookie is needed to sign you in. - We do not store your IP address or your browser in our database. We use your IP address for a short time to limit too many attempts.
- Our sign-up form uses Cloudflare Turnstile to check that you are a person. Cloudflare receives your IP address for that check.
Your conversations with Eva
- Your messages, Eva's replies and the WYRAGO team's replies.
- Images you add to a message. Your browser re-draws each image before it is sent, which removes location and camera data. We do not keep the file name.
- For each reply: the steps Eva took, and any reply the checks refused.
- For each reply, a record without content: when, which model, the cost and the result of the checks.
- Your agreements and approvals (see "Consents and agreements" below).
What we send to AI providers, and when:
To write each reply, WYRAGO sends the following to Anthropic, which provides the Claude AI model Eva uses and processes it on our behalf: your first name, as it appears in your account; your club's name; what WYRAGO knows about your business from your sign-up and your Facility Profile, including what public sources say about it; and the whole conversation so far: your messages, Eva's and the WYRAGO team's. Whatever you write is sent as you wrote it, including any names or contact details in it. WYRAGO does not send your email address.
To prepare what Eva knows about your business, WYRAGO may look up public information about it on the web (for example its website and public listings) with AI models from OpenAI and Google. They receive your business's name, its location and the addresses of its public pages; they never receive your messages or anything you write to Eva. WYRAGO asks OpenAI and Google not to store these requests for later use. Under their own terms, OpenAI keeps them in its abuse-monitoring logs for up to 30 days, unless the law requires longer or it is reasonably necessary to protect its services or others from harm; Google keeps the requests and its answers for 30 days and may use them to test and fix its search service, also logs requests for a limited period to detect misuse, and may store them in any country where it or its agents have facilities. Where OpenAI processes them is governed by its own terms.
Anthropic processes the conversation in the United States, outside the European Union; there is no option to keep it in the EU. Under its commercial terms it does not use it to train its models, and it deletes it within 30 days, unless the law requires longer or its safety systems flag it as a possible breach of its usage policy (then up to 2 years). WYRAGO's deletions do not reach the providers' copies.
Your club's information and files
- Your Facility Profile: what you tell us about your club, and what public sources say about it.
- Files you add to your Facility Profile, such as a booking export or a player list. We keep the text read from them, the file name and your note. We do not keep the file itself.
- Files you add to a Project (PDF, images, Word, PowerPoint, CSV, Excel, text). We keep the file, its name and the text read from it.
- When you add a file, the WYRAGO team gets an email that a file was added.
Your public professional profile (only if you agree)
If you agree, WYRAGO looks up public professional information about you on the web, so that Eva can follow you better and ask you fewer questions: your role, the organisation you work for and what it does, your professional focus and your public work. Nothing about your private life is looked for or kept.
To look it up, WYRAGO uses an AI model from OpenAI. It receives your name, the domain of your email address, and the name and country of your club or company; never your email address or anything you write to Eva. WYRAGO asks OpenAI not to store these requests for later use; under its own terms it may keep them for up to 30 days.
Your decision profile (only if you agree)
It is processed like the conversation, by the same AI provider in the United States. The WYRAGO team can see it. It never holds personality types or emotional states, and it is never used to push you toward more than you need.
You can see it, correct it or remove any part of it at any time, in your account or by asking Eva, and you can stop it altogether. It is kept while your account is active and deleted when the account closes.
Consents and agreements
- Your consent to Eva's terms, and to each Project consent: who gave or withdrew it, when and how, and which version of the text.
- Your agreement to a proposal, your approval of an action plan, and your go-ahead for messages the genie prepares: the text you agreed to, your message and the time.
Visitors (the demo)
- Your name and email address, how many days your visit lasts, and its budget.
- When you accepted the demo notice and the Demo Terms: your Visitor record, your account, the demo club, the time, and the version and a fingerprint (hash) of each text. This record is kept with no set end date, as proof of acceptance.
- Your conversation with Eva on the demo club. It is sent to Anthropic in the same way as any other conversation.
Consultants
- Your name and email address, and the client clubs you work for.
The conversation is part of the club's record at WYRAGO, with no set end date. If the club's own manager joins WYRAGO later, they can see it.
Your details on documents. The name, company, contact details and logo you enter on your details page are your own data. WYRAGO keeps them with your consultant account, not with any client club, and uses them only to show them on the cover of the documents you download, for any client. They are not sent to Anthropic, OpenAI or Google. You can change or remove them on that page at any time; what you remove is deleted from our database and may remain in its backups for up to 30 days.
Messages to a club's players and staff (the genie)
If a club uses the genie, we keep, for that club: the names, first names, roles, phone numbers and email addresses of the players and staff the club gives us, the messages prepared for them, and whether a person asked to stop receiving them.
- Names and contact details of players and staff are not sent to any AI provider.
- WYRAGO does not send these messages. The club's manager sends each one themselves.
- We hold these details on the club's behalf.
- The 30-day deletion of these details is not built yet. The genie is not used for any real club until it is.
If you received a message prepared by Eva and want to stop them, use the link in the message. For anything else about your data, contact the club, or write to info@wyrago.com.
Emails you send us
Where this is switched on, we receive replies to our emails. For each email we keep: who sent it and to whom, the subject, the text, the attachments (up to 20, each up to 10 MB), the whole original message and its delivery checks. We remove any WYRAGO sign-in link from it. No AI reads it. A copy goes to the WYRAGO team's mailbox.
The WYRAGO team's notes and alerts
- Notes the team writes while helping your club: for example why Eva was paused, notes on a problem with a reply, what was done on a step, and notes on who may approve for a club.
- Alerts to the team about your conversation (for example, that you asked for a person). An alert carries your club's name and our own reference numbers, not your messages. When you ask for a person, the alert also carries your email address.
When Eva's page is open (presence)
- When your conversation with Eva is open and in front of you: when you started and when you were last seen. A hidden tab sends nothing.
- Only the WYRAGO team sees it.
Spend records
- The cost of each Eva reply, with the model used and the number of words processed (tokens), for your club and your account.
- The cost of each public research request, for your club; for a person profile, it is kept with your email address.
Your browser
- The only cookies are the ones that sign you in (
wyrago_session, for up to 30 days, and a short setup cookie for 15 minutes). - Your browser also keeps some settings for you, such as easy reading in Eva's conversation, the page to return to after you sign in, and where you came from before you signed up. They stay in your browser. You can clear them in your browser's settings.
- We use no tracking cookies, no analytics and no advertising.
4. Why we use it (purposes and legal bases)
- To give you WYRAGO. Your account, signing in, your club's information and files, Eva's conversation, proposals, action plans, downloads, and the emails about your account. Basis: the contract with you (our Terms of Use).
- To have Eva reply with AI. Sending your conversation to Anthropic, and your public professional profile and decision profile. Basis: your consent. You can withdraw it at any time.
- To look up public information about your club. Basis: our legitimate interest, and yours, in Eva knowing your business.
- To keep records of consents and agreements. Basis: to show what was agreed, and when (legal obligation and legitimate interest).
- To keep WYRAGO safe and working. Limits on attempts, the sign-up check, the checks on Eva's replies, the team's notes and alerts, presence, and spend records. Basis: our legitimate interest in a safe, reliable service with controlled costs.
- To learn how people find us. Where you came from when you signed up. Basis: our legitimate interest.
- To read your replies to our emails. Basis: our legitimate interest in your feedback.
- To send you occasional updates. Only if you asked for them. Basis: your consent.
- For a club's players and staff (the genie). On the club's behalf, on its instructions. The club needs its own legal basis.
5. Who processes it, and where
- Cloudflare runs WYRAGO for us: its servers (Workers), our database (D1), our file store (R2), the emails we send (Email Sending) and receive (Email Routing), and the sign-up check (Turnstile). Our file store is kept in the European Union. Our database runs in Cloudflare's Eastern Europe region. Our emails are sent from access@auth.wyrago.com.
- Anthropic provides the Claude AI model Eva uses, in the United States. See section 3.
- OpenAI and Google look up public information about your club; OpenAI also looks up your public professional profile if you agree. See section 3.
- The WYRAGO team can see your conversation and your club's information.
6. How long we keep it
WYRAGO keeps the conversation as the record of your work together, with no set end date. For each reply, WYRAGO keeps the steps Eva took and any reply the checks refused for 30 days, and then deletes them; a record without content (when, which model, the cost and the result of the checks) is kept with no set end date. Anything deleted can remain in our database backups for up to 30 days.
On a Project: WYRAGO keeps its own copy of what was sent and returned for 30 days after Eva finishes, fails or is stopped, and then deletes it. A proposal already published stays in this Project, like any proposal. After that WYRAGO keeps only a record without content: when, which model, which messages, answers and files were used (by reference), the cost, and who on the team checked it, with no set end date. If a team member downloads a copy to check it, they delete it by hand afterwards; until then our deletions do not reach it. If you ask us to remove a message or a file, we delete WYRAGO's copy of every analysis and draft built from it at once. Anything deleted can remain in our database backups for up to 30 days.
Other periods:
- An image you added but did not send: deleted after 24 hours.
- Your sign-in on a device: it ends after 30 days.
- Presence: kept in full for 90 days; after that we keep only the time per day and the number of visits.
- Records of consent and agreement: with no set end date. A Visitor's acceptance of the Demo Terms is kept with no set end date, as proof of acceptance.
- Your public professional profile: WYRAGO keeps it while your account is active and deletes it when the account closes; what you remove is deleted from our database and may remain in its backups for up to 30 days.
- Your decision profile: see section 3.
- A consultant's details on documents: until they change or remove them.
- Spend records and records without content: with no set end date.
- Your account, your club's information and files, the team's notes and the records of sign-in links: while your account is active; deleted within 30 days after it closes.
- Emails you send us: 24 months.
To close your account, write to info@wyrago.com. We delete your account data within 30 days, except the records of consents and agreements.
7. Transfers outside the European Union
Anthropic processes your conversation in the United States. Google may store research requests in any country. When your data is processed outside the EU, we rely on the safeguards in our providers' data-processing terms, such as the EU Standard Contractual Clauses.
8. Your rights
Your consent to Eva
Eva replies to you with AI only with your consent to Eva's terms of use, which you give with the button in Eva's first message.
You can withdraw this consent at any time by writing it to Eva in the conversation, for example "I don't want to continue with AI". Eva stops at once, nothing more of yours is sent to AI, and the WYRAGO team continues with you by message. Withdrawing does not delete anything sooner.
WYRAGO keeps a record of this consent (who gave or withdrew it, when and how: on the screen before you first met Eva, or in a message you wrote; and which version and language of this text) with no set end date. Requests to see, correct or delete your personal data are handled separately under data-protection law, whether or not you give this consent: write to us at info@wyrago.com.
In the EU and Cyprus
Under the GDPR and Cyprus Law 125(I)/2018, you have the right to access, correct, and request erasure of your data, restrict or object to processing, data portability, and to withdraw consent at any time. Contact info@wyrago.com to exercise any of these rights.
You may also lodge a complaint with Cyprus's supervisory authority: Office of the Commissioner for Personal Data Protection, Kypranoros 15, Nicosia 1061, Cyprus. Tel: +357 22818456 · Email: commissioner@dataprotection.gov.cy · dataprotection.gov.cy.
In the United Kingdom
The UK GDPR and the Data Protection Act 2018 apply the same rights described above. UK users may lodge a complaint with the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom. Tel: 0303 123 1113 · ico.org.uk.
In the United States
Under California's CCPA/CPRA — extended as a matter of practice to all US users — you have the right to know what personal data we hold, the right to delete it (contact info@wyrago.com), the right to opt out of sale or sharing of personal data (we do not sell or share personal data, and never have), and the right to non-discrimination for exercising these rights.
9. Security
- Sign-in links and sign-ins are stored only as hashes. Passwords are stored only as salted hashes.
- Only the WYRAGO team can open the team's area, through Cloudflare Access.
- What you share for one club is never shown in another.
10. Changes to this policy
When we change this policy, we give it a new version and date, and we tell you by email before it applies.