Legal
Privacy policy
Effective date: January 1, 2026 · Last updated: January 2026
1. Who we are
WACapture is a software-as-a-service product operated by Lytheron OÜ, a company registered in Estonia, European Union. In this policy, "WACapture", "we", "us" and "our" refer to Lytheron OÜ acting as the operator of the WACapture service.
This policy describes how we handle personal data in two distinct roles: (a) as the controller of data we collect from our customers (account holders), and (b) as the processor of lead data that end users submit through widgets created by our customers.
2. Data we collect
From customers (account holders):
- Account information: name, email address, hashed password.
- Billing information: plan, subscription status, and limited payment metadata returned by our payment processor. We do not store full card numbers.
- Widget configuration: destination phone numbers, pre-filled messages, slugs and display options you create.
- Product usage: pages visited inside the dashboard, feature usage, and diagnostic logs.
From end users (people interacting with a customer's widget):
- Lead data submitted through the form: typically name and email address.
- Technical metadata: anonymous session identifier, IP address, user agent, referrer URL, and UTM parameters where present.
- Funnel events: widget opens, form starts, submissions, skips and redirects.
3. How we use data
We process personal data to: provide and operate the service, deliver captured leads to the customer who owns the widget, generate aggregated analytics for that customer, secure the service against abuse and fraud, communicate service-related notices, process payments, and improve the product. We do not sell personal data and we do not use lead data for advertising.
4. Legal basis (GDPR)
We rely on the following legal bases under the EU General Data Protection Regulation: contractual necessity to provide the service to our customers, legitimate interests to operate, secure and improve the product, consent where required (for example when an end user submits a lead form), and legal obligation where applicable.
5. Sharing and processors
Lead data is shared only with the customer that owns the widget the end user interacted with. We use a small number of trusted infrastructure providers to operate the service, including cloud hosting and database, transactional email delivery, and payment processing. These providers act as processors under contract and are bound by confidentiality and data protection obligations.
6. International transfers
Our infrastructure is operated within global cloud regions. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
7. Retention
Account and widget configuration data is retained while your account is active. Lead data and analytics events are retained until you delete them or close your account. Backups are rotated on a rolling schedule and securely deleted thereafter. Some records may be retained longer where required by law (for example, invoicing records).
8. Security
We protect data using industry-standard practices, including encryption in transit, encryption at rest for the production database, role-based access controls, row-level security on multi-tenant tables, and regular automated backups.
9. Your rights
Under GDPR and similar laws, you may have the right to access, correct, export, restrict, object to, or delete your personal data, and to withdraw consent at any time. To exercise these rights, email legal@lytheron.com. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.
10. Children
WACapture is not intended for use by children under 16. We do not knowingly collect personal data from children. If you believe we have, please contact us and we will delete it.
11. Changes to this policy
We may update this policy as the service evolves or as the law changes. Material changes will be communicated by email or in the dashboard. The "Last updated" date at the top reflects the current version.
12. Contact
Lytheron OÜ · Estonia, European Union · legal@lytheron.com
This document describes our current practices in good faith and is provided for transparency. It is not a substitute for legal advice and should be reviewed by qualified counsel before relied upon in a specific jurisdiction or contractual context.