Beta draft — last updated 2026-07-01
Privacy Policy
Draft for beta participants. Final legal review pending. This page is not legal advice and may change before or after a formal review.
Who operates WombatOps
WombatOps is operated by Andersen Innovations. A registered entity name and address will be confirmed here before this policy is finalized. Contact: hello@wombatops.com.
What data is collected
Account data (email, name, title, role), organization data, and the content your organization creates in WombatOps — clients, projects, tasks, documents and attachments — plus notification preferences and basic product usage/audit records.
How data is used
To provide the service, authenticate you, send notifications you've opted into (currently an email digest), generate AI task drafts only when you choose to use that feature, and to operate and debug the product.
Customer content
For the content your organization puts into WombatOps about your own clients and projects, we act as a processor — we store and serve it under your instructions. You remain the controller of your own clients' personal data. See our Data Processing Agreement for detail.
Legal bases (draft only)
- Contract — providing the service you signed up for.
- Legitimate interest — security, audit logging, fraud prevention.
- Consent — notification opt-ins.
This is a placeholder framing, not a finished lawful-basis determination.
Subprocessors
We use a small number of providers to operate WombatOps. See our Subprocessors page — some regions are still being confirmed and marked as pending there.
International transfers
Our primary data residency is the EU/UK (database, authentication and file storage hosted in London). Whether any subprocessor involves a transfer outside the UK/EEA is still being confirmed — we will not claim "no international transfers" until that's verified.
Retention
Generally, for the lifetime of your account or organization, deleted on request. See our Security page and contact us to request export or deletion.
User rights
Access, correction, deletion, and export of your data are available on request today via a manual process — contact us and we'll handle it directly. A self-serve tool is planned but not built yet.
Security
See our full Security & Data Handling page.
Cookies / tracking
Only the essential authentication session cookie is used. No analytics, advertising or marketing cookies exist today. See our Cookie Policy.
Beta limitations
Beta-stage data handling (manual export/delete, no formal SLA) materially affects what we can promise today — see our Beta Limitations page.