Privacy Policy

Last Updated: January 29, 2026
Effective Date: February 1, 2026

1. Introduction

Watobu (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and use our subscription-based feature research platform (the “Service”).

Watobu is a company incorporated in the State of Delaware, United States. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide to Us

Account Information: When you register via Auth0, we collect your email address and name/username to identify you and manage your login sessions.
Payment Information: We do not store your credit card details on our servers. All payment transactions are processed by Stripe, our third-party payment processor. We only retain a customer token (e.g., cus_12345) and transaction history to verify your subscription status.
Support Inquiries: If you contact us via support@watobu.com, we collect your email address and the content of your message.

2.2 Information Collected Automatically

Usage Data: We collect information on how you access the Service, including your IP address, browser type, device type, operating system, and the specific pages or workflows you view.
Session Data (Heatmaps): We use Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replays. This helps us fix bugs and improve the user interface.
Cookies: We use cookies to maintain your session (keep you logged in) and to store your preferences.

3. How We Use Your Information

We use the collected data for the following purposes:

Service Provision: To provide access to the platform, authenticate your identity via Auth0, and manage your subscription via Stripe.
Security & Anti-Scraping: To monitor for suspicious activity, such as concurrent logins or high-frequency requests that indicate scraping (prohibited under our Terms of Service).
Analytics: To understand which features and UI patterns are most popular, using Google Analytics and Microsoft Clarity.
Legal Compliance: To comply with applicable laws and regulations in the United States (Federal and Delaware state law).

4. Disclosure of Data (Sub-processors)

We do not sell your personal data. We share your information only with the following third-party service providers (“Sub-processors”) to facilitate the Service. Each provider is bound by confidentiality agreements or data processing terms.

Service Provider	Function	Location of Data
AWS (Amazon Web Services)	Hosting, Server Infrastructure, and Database Storage	United States
Auth0	User Authentication and Identity Management	United States / Global
Stripe	Payment Processing and Subscription Management	United States / Global
Microsoft Clarity	Behavioral Analytics (Heatmaps, Session Recording)	United States
Google Analytics	Traffic Analysis and Usage Metrics	United States

5. International Data Transfers

Watobu is a United States entity, and our infrastructure is located in the United States.
If you are accessing the Service from outside the United States (e.g., from the European Economic Area, UK, or Nepal), please be aware that your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

6. Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes set out in this Privacy Policy.

Account Data: Retained as long as your account is active. If you delete your account, we will delete your personal data within 30 days, subject to data retention required for tax/legal obligations (e.g., keeping Stripe invoice records for tax audits).
Usage Logs: Server logs and analytics data are retained for security and auditing purposes for a limited period (typically up to 12 months) before being anonymized or deleted.

7. Security of Data

We implement industry-standard security measures to protect your data, including encryption in transit (SSL/TLS) and encryption at rest within AWS. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. “Do Not Track” Disclosure (Delaware DOPPA)

The Delaware Online Privacy and Protection Act (DOPPA) requires us to disclose how we respond to “Do Not Track” (DNT) signals.
We do not currently respond to DNT browser signals. Because there is no consistent industry standard for how to interpret DNT signals, our practices regarding data collection and use remain as described in this Policy, regardless of the DNT signal sent by your browser.

9. Notice to California Residents (CCPA/CalOPPA)

This section applies solely to visitors, users, and others who reside in the State of California (“consumers”).

9.1 Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information:

Identifiers: Name, email address, IP address, and unique personal identifier (User ID).
Internet Activity: Browsing history, interaction with our website (via Microsoft Clarity), and search history within the app.

9.2 No Sale of Personal Information

We do not sell your personal information. We use Google Analytics solely for traffic metrics and have not enabled “Advertising Features” that would share your data for cross-context behavioral advertising.

9.3 Your Rights under CCPA

If you are a California resident, you have the right to:

Request disclosure of the specific personal information we have collected about you.
Request deletion of your personal information.
Not be discriminated against for exercising your CCPA rights.

9.4 “Shine the Light” Law

California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for their direct marketing purposes. Watobu does not share personal information with third parties for their direct marketing purposes.

10. Your Data Protection Rights (General)

Regardless of your location, we strive to provide the following rights:

Access: The right to request copies of your personal data.
Rectification: The right to request correction of inaccurate information.
Deletion: The right to request that we delete your personal data (subject to our need to retain records for billing/legal reasons).
Objection: The right to object to our processing of your data for analytics.

To exercise these rights, please contact us at legal@watobu.com.

11. Third-Party Links

Our Service contains screenshots and workflows from third-party applications (e.g., Salesforce, HubSpot). This Privacy Policy applies only to Watobu. We are not responsible for the privacy practices of the third-party apps referenced in our content.

12. Children’s Privacy

Our Service is restricted to users aged 18 and older. We do not knowingly collect personally identifiable information from anyone under the age of 18. If we become aware that we have collected data from a minor, we will take steps to remove that information from our servers.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: legal@watobu.com