Draft privacy policy

Privacy Policy

Last updated: May 2026

This page describes how CellWise expects to collect, use, protect, and retain data for the website, waitlist, and future product. It is written as a GDPR-aware product draft and should be reviewed by qualified counsel before production launch.

What data we collect

Waitlist and contact data: name, work email, company, role, ERP status, target ERP, and messages you send to CellWise.
Future product account data: account profile details, authentication information, organization membership, billing contact details, support requests, and product usage events needed to operate the service.
Uploaded production and master data: item masters, BOMs, routing records, ERP exports, spreadsheets, metadata, validation results, CLW records, review decisions, and conversion logs when a customer uses the product.

Purpose of processing

We process waitlist and contact data to respond to requests, evaluate early access fit, and communicate product updates.
We process product account data to provide access, operate the service, secure accounts, support customers, and manage commercial relationships.
We process uploaded master data to parse, extract, normalize, validate, convert to CLW, support human review, run BOM explosion tests, and produce deterministic ERP conversion outputs.

Uploaded production and master data

Customer uploaded production data remains customer data. CellWise uses it only to provide the requested product workflow and related support.
No customer production data is used for model training.
Where possible, CellWise separates customer environments and keeps processing scoped to the customer's organization, users, and authorized workflows.

GDPR-aware rights

Depending on your location and role, you may have rights to access, correct, delete, restrict, or object to processing of your personal data.
You may also have the right to data portability and the right to withdraw consent where processing is based on consent.
To exercise privacy rights, contact info@cellwise.io. We may need to verify your identity and confirm whether we act as controller or processor for the relevant data.

Cookies and analytics consent

CellWise intends to use analytics only after explicit cookie consent.
Strictly necessary cookies may be used for security, session management, and service operation.
This draft page does not implement analytics or cookie consent behavior. Those controls are planned for a later implementation phase.

Retention

Waitlist and contact data is retained while we evaluate product fit, communicate with you, or maintain a business relationship.
Future account, billing, and support records may be retained for operational, legal, accounting, and security purposes.
Uploaded customer master data retention will be governed by customer agreement, product configuration, and deletion requests where applicable.

Security and hosting

CellWise is designed around EU-based servers, data isolation, and industry-standard encryption.
We use technical and organizational measures intended to protect data against unauthorized access, alteration, disclosure, and loss.
No website statement should be read as a guarantee of absolute security, and CellWise does not claim SOC 2, ISO certification, or completed formal audits on this page.

Third-party processors

CellWise may use third-party processors at a high level for cloud hosting, database infrastructure, authentication, email delivery, analytics after consent, payment operations, and support tooling.
When processors handle personal data, CellWise expects appropriate contractual, security, and data protection safeguards.
A production privacy policy should list specific processors and subprocessors once vendor choices are finalized.

Legal draft notice: This privacy policy is a product draft for CellWise planning and implementation. It is not legal advice and should be reviewed by counsel before public production use.