Privacy Policy

1. Who we are

Safiri ("we", "us", "our") provides data-driven ad creative analysis. This policy explains how we collect, use, and protect your personal data when you use our website and services at weching.com (the "Service").

For any privacy-related questions, contact us at privacy@weching.com.

2. What data we collect

We collect only what is necessary to deliver and improve the Service:

• Account information — name and email address you provide when submitting a creative for analysis.
• Uploaded creatives — ad images or videos you upload for analysis. These are processed solely to generate your report and are not used for any other purpose.
• Usage data — pages visited, features used, browser type, device type, and referring URL. Collected only with your consent via cookies (see Section 5).
• Survey responses — platform, industry, and creative count selections you make during the upload flow.

3. How we use your data

• Deliver your analysis report — we process your uploaded creative and contact details to generate and send your personalized ad analysis.
• Improve the Service — aggregated, anonymized usage data helps us understand how the Service is used and where to improve.
• Communicate with you — we may email you about your report, product updates, or relevant tips. You can unsubscribe at any time.
• Measure ad performance — with your consent, we use Meta Pixel to measure the effectiveness of our advertising campaigns (see Section 5).

4. Legal basis for processing (GDPR)

We process your personal data under the following legal bases as defined by the EU General Data Protection Regulation:

• Consent — for analytics cookies and Meta Pixel tracking. You can grant or withdraw consent at any time via the cookie banner.
• Contract performance — to deliver the analysis service you requested when you upload your creative.
• Legitimate interest — for basic service operation, security, and fraud prevention.

5. Cookies and tracking

We use a cookie consent banner that appears on your first visit. No analytics cookies or tracking scripts are loaded until you explicitly click "Accept".

If you decline cookies, Meta Pixel will not load and no advertising-related data will be collected. You can change your preferences at any time by clicking the "Cookie Settings" link in the page footer.

6. Data sharing and third parties

We do not sell your personal data. We share data only with:

• Meta Platforms, Inc. — page view events sent via Meta Pixel when you consent to analytics cookies. Subject to Meta's Privacy Policy.
• Hosting and infrastructure providers — to store and serve the application (e.g., Vercel, Supabase). These providers act as data processors under appropriate data processing agreements.

7. Data retention

• Account and contact data — retained for as long as you use the Service, or until you request deletion.
• Uploaded creatives — retained only for the duration needed to generate your report, then deleted within 30 days.
• Analytics data — aggregated data may be retained indefinitely; identifiable data is deleted within 12 months.

8. Your rights

Under the GDPR and applicable data protection laws, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your personal data ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw cookie or marketing consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at privacy@weching.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

9. Data security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), access controls, and secure infrastructure hosting.

10. International transfers

Your data may be processed outside the European Economic Area (EEA) by our infrastructure providers. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Children's privacy

The Service is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date at the top of this page and, where appropriate, by email. We encourage you to review this page periodically.