Privacy Policy
Last updated: 23 February 2025
WIYD is operated by VACSO HOLDINGS PTY LTD (ACN 684 405 356) ("we", "us", "our"). We are committed to protecting your privacy and handling personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
This policy explains how we collect, use, disclose, and protect your personal information when you use the WIYD website and service. By using our service, you consent to the practices described in this policy.
Information We Collect
We collect personal information that is reasonably necessary to provide and improve the WIYD service. The types of information we collect include:
Waitlist and Account Information
Your name
Your email address
Your reason for joining the waitlist
The date and time of your submission
Service Usage Information
Goals, projects, tasks, and notes you create within WIYD
Documents and files you upload or generate
Interactions with AI features (prompts and responses)
Usage patterns and feature engagement data
Technical Information
IP address and approximate location
Browser type, device type, and operating system
Pages visited, time spent, and navigation patterns (via Vercel Analytics)
How We Collect Information
We collect personal information:
Directly from you — when you fill out forms, create an account, or use the service
Automatically — through cookies, analytics tools, and server logs when you visit our website
From third-party integrations — when you connect external services (e.g., Strava, Notion) to your WIYD account
We do not collect sensitive information (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless you voluntarily include it in your goals or notes. We do not knowingly collect personal information from children under the age of 16. If we become aware that a child under 16 has provided personal information, we will take steps to delete it.
How We Use Your Information
We use your personal information for the following purposes:
Provide, maintain, and improve the WIYD service
Process your goals and generate AI-powered recommendations, plans, and insights
Contact you with service updates, early access opportunities, and development news
Respond to your questions, feedback, or support requests
Analyse usage patterns to improve the product experience
Comply with legal obligations and protect our rights
We do not sell or rent your personal information to third parties. We will not use your information for direct marketing without your consent, and you can opt out at any time.
AI and Automated Processing
WIYD uses artificial intelligence to provide core features of the service. It is important you understand how your data is processed by AI systems.
How AI is Used
Breaking down goals into actionable plans, milestones, and tasks
Generating strategy documents and recommendations based on your inputs
Providing contextual suggestions through project-specific AI chat assistants
Classifying goals into life pillars (e.g., Business, Health, Personal)
Identifying gaps, risks, and next steps across your projects
Third-Party AI Services
To power these features, we use third-party AI services including OpenAI and Anthropic. When you interact with AI features, relevant portions of your content (such as goal descriptions, project context, and chat messages) are sent to these providers for processing.
These providers process your data under our data processing agreements and their own privacy policies:
OpenAI: openai.com/policies/privacy-policy
Anthropic: anthropic.com/privacy
AI Training and Your Data
We do not use your personal content to train AI models. Our third-party AI providers process your data solely to generate responses and do not use your inputs for model training under our API agreements. We may use anonymised and aggregated usage data to improve the WIYD service.
AI-generated content may be inaccurate or incomplete. WIYD's AI features are provided as productivity tools and do not constitute professional advice (financial, medical, legal, or otherwise). You are responsible for reviewing and verifying any AI-generated suggestions before acting on them.
Cookies and Analytics
We use the following tracking technologies on our website:
Vercel Analytics
Privacy-focused web analytics that collects page views, referrers, and basic device information. Vercel Analytics does not use cookies and does not track individual users across sites.
Essential Cookies
We may use essential cookies required for the service to function (such as session management and authentication). These cannot be disabled while using the service.
We do not use third-party advertising cookies or tracking pixels.
Third-Party Service Providers
We share personal information with the following categories of service providers, solely for the purposes of operating and improving the WIYD service:
Cloud hosting
Website hosting and deployment
Vercel (United States)
AI processing
AI features and content generation
OpenAI, Anthropic (United States)
Email delivery
Transactional and marketing emails
Brevo, Resend (EU, United States)
Analytics
Website usage analytics
Vercel Analytics (United States)
Data storage
Internal data management
Google Workspace (Global)
Cross-Border Data Transfers
In accordance with APP 8, we disclose that your personal information may be transferred to and processed in the following countries:
United States — cloud hosting (Vercel), AI processing (OpenAI, Anthropic), email delivery (Resend)
European Union — email delivery (Brevo)
Various countries — Google Workspace data centres (subject to Google's data processing terms)
We take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the APPs. This includes entering into data processing agreements and selecting providers with appropriate security certifications (such as SOC 2 compliance).
Data Retention
We retain your personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, or as required by law.
Waitlist data — retained until the service launches and you are offered access, or until you request deletion
Account data — retained for the duration of your account and for 30 days after deletion to allow recovery
Usage data — retained in anonymised or aggregated form for analytics and service improvement
AI interaction data — chat logs and AI-generated content are retained as part of your account data
When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it in accordance with APP 11.
Data Storage and Security
We take reasonable steps to protect your personal information from unauthorised access, disclosure, misuse, interference, and loss. Our security measures include:
Encryption of data in transit (TLS/HTTPS) and at rest
Access controls limiting who can view personal information
Secure authentication mechanisms
Regular review of security practices
No online system can be guaranteed completely secure. In the event of a data breach that is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.
Your Rights
Under the Australian Privacy Principles, you have the right to:
Access your personal information
Request a copy of the personal information we hold about you. We will respond within 30 days.
Correct inaccurate information
Request correction of any inaccurate, out-of-date, incomplete, or misleading information.
Request deletion
Request deletion of your personal information, subject to our legal obligations to retain certain records.
Opt out of marketing
Unsubscribe from marketing emails at any time via the link in any email or by contacting us directly.
You may also interact with our service using a pseudonym where practicable, in accordance with APP 2. To exercise any of these rights, email us at oscar@vacso.com.au.
Complaints
If you believe we have breached the Australian Privacy Principles, you may lodge a complaint by emailing oscar@vacso.com.auwith the subject line "Privacy Complaint".
We will acknowledge your complaint within 7 business days and provide a response within 30 business days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Contact Us
For privacy questions or to exercise your rights, contact:
Entity
VACSO HOLDINGS PTY LTD
ACN 684 405 356
Changes to This Policy
We may update this policy from time to time. The updated version will be published here with a revised "Last updated" date. Where changes are significant, we will notify you by email or through the service. Your continued use of the service after changes are published indicates your acceptance of the revised policy.