Privacy Policy

This policy explains how Wisest Digital handles personal data. Wisest Digital is registered at Rajkot, Gujarat 360005, India.

It covers two different relationships, and the distinction matters legally. When you browse this website or send us an enquiry, we decide why and how your data is processed — we are the controller. When we build or operate a system for a client and that system processes data about their customers or staff, the client decides why and how — they are the controller and we act as a processor under their written instructions.

This policy describes the first relationship. The second is governed by the data processing terms in the engagement contract, which take precedence over anything on this page.

We collect as little as the site can function on. There is no account system, no login, no profiling, and no tracking of your behaviour across pages or across other websites.

When you submit the enquiry form, we receive exactly the fields on it:

• Your name
• Your email address
• Your company, if you choose to enter it — the field is optional
• The message you write

You can also reach the same form through VERIS, our AI assistant. What it collects, and what happens to a conversation with it, is set out in its own section below.

Separately, to stop the form being abused by automated submissions, we run a Cloudflare Turnstile verification check. That check receives your IP address and basic technical signals from your browser. We do not store your IP address ourselves as part of the enquiry.

Our hosting provider keeps standard server logs, as any web host does, for operating and securing the service. We do not use those logs to build a profile of you.

This site runs no advertising pixels, no session-recording or heatmap tools, and no social media trackers. Nothing here follows you between pages or between websites, and no profile of you is built.

The one measurement that does run is Cloudflare Web Analytics, which our network provider serves on the live domain. It counts page views and basic performance, without cookies and without any identifier that would let us recognise you again. It tells us how many people read a page. It does not tell us who they were.

That is a design decision rather than an oversight. A site whose job is to start a conversation does not need behavioural surveillance to do it, and we would rather not ask you to accept tracking you gain nothing from.

If that ever changes, this page changes first, and a consent mechanism goes in before any such tool is loaded.

We process enquiry data to read your message and reply to it. Where the UK GDPR or EU GDPR applies to you, our lawful basis is legitimate interests — specifically, responding to a business enquiry you chose to send us — or, where the enquiry concerns entering a contract, steps taken at your request prior to that contract.

We process the bot-verification signals on the basis of legitimate interests in keeping the form usable and free from automated abuse.

We do not use your enquiry to add you to a marketing list. We send no newsletter and run no email campaigns to enquirers.

We do not sell personal data, and we do not share it for advertising. Three service providers process data on our behalf in order for the site to work at all:

• Vercel — hosting and content delivery for this website.
• Resend — delivery of the enquiry email to our inbox.
• Cloudflare — the Turnstile bot-verification check on the enquiry form, network delivery, and the page-count analytics described above.
• Groq, Inc. — the AI models behind VERIS, which produce its replies and transcribe speech.

Each acts under contract and is permitted to process the data only to provide that service to us. Beyond these, we disclose personal data only where we are legally required to.

We operate from India and work with clients across Europe, North America, the Gulf, and Asia-Pacific, so personal data will in practice be processed outside your own country — including outside the UK and the European Economic Area.

Where data originating in the UK or EEA is transferred to us or to our providers, that transfer relies on the appropriate safeguards available under Article 46 of the GDPR, most commonly the European Commission’s Standard Contractual Clauses, together with the UK International Data Transfer Addendum where UK data is involved.

If you are contracting with us and need the specific transfer mechanism recorded for your own compliance file, ask and we will put it in writing as part of the engagement.

VERIS is the AI assistant you can reach from the mark in the corner of any page. You can type to it, or press to talk to it. It answers from the words already published on this site, and it can pass an enquiry to us. It is an AI, it says so whenever it is asked, and it is never a person.

What it sends, and where:

• What you type is sent to our AI provider, Groq, Inc. in the United States, together with the earlier turns of that conversation and the extracts of our own pages that match your question. Groq produces the reply.
• If you talk to it, your browser records one spoken turn at a time and sends that recording to Groq to be turned into text. The recording is held in memory while it is transcribed and is never written to disk by us. Voice starts only when you press to talk, and your browser asks your permission first. Declining leaves typing available.
• What VERIS says back is spoken by your own browser. No audio and no text leaves your device for that.

We do not store your conversation. Nothing you say to VERIS is written to a database, a log or a file by us. It lives in the tab you are reading and is gone when you close it.

Your IP address is held in our server memory for a short time, only to limit how many messages one address can send. It is not written to storage and not used for anything else.

Because your words reach a third party, please do not tell VERIS anything sensitive, personal or confidential. VERIS is instructed to ask you to stop if you begin to.

If you ask VERIS to pass an enquiry to us, it gathers your name, your email, your company if you give it, and a description of your problem, then shows them back to you. Nothing is sent until you press Send yourself. From that point it reaches us exactly as the contact form does, through the same bot check and the same email provider.

The lawful basis for all of this, where the UK or EU GDPR applies to you, is legitimate interests: answering a question you chose to ask us.

Enquiry correspondence is kept while the conversation is live and for a reasonable period afterwards, so that we recognise you if you come back. If a conversation does not lead anywhere, we delete it once it is clear there is nothing to follow up.

Where an enquiry becomes an engagement, the correspondence is retained under the terms of that engagement contract and any statutory record-keeping obligation that applies to it.

Conversations with VERIS are kept for no time at all, because we never record them in the first place.

You can ask us to delete your enquiry at any point and we will, unless we are legally required to keep a specific record.

Depending on where you live, you may have the right to ask us for a copy of the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. Where processing relies on legitimate interests, you can object to it.

Exercising any of these costs nothing and does not require a particular form of words. Send the request through the contact page and we will act on it within one month, telling you if we need longer and why.

If you are in the UK or the EEA and you are not satisfied with how we have handled a request, you have the right to complain to your national data protection authority. We would prefer you raise it with us first, but that right does not depend on doing so.

The site is served over HTTPS. Credentials and API keys are held in environment configuration, never in source control and never in anything we publish. Access to the enquiry inbox is limited to the people who answer enquiries.

Wisest Digital does not currently hold SOC 2, ISO 27001, or any equivalent formal certification, and nothing on this site should be read as claiming one. Our Trust Center states this plainly, and states what we do instead.

No transmission over the internet is completely secure. We take measures appropriate to the data involved, but we cannot guarantee absolute security, and we will not pretend otherwise.

This is a business-to-business website. Our services are not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, tell us and we will delete it.

That applies to VERIS as well. It is there to answer business questions, it is not built or intended for children, and we do not knowingly process a child’s data through it.

When this policy changes materially, the last-updated date at the top of this page changes with it. We do not make quiet edits to widen what we are permitted to do with data already collected.