Privacy Policy

This Privacy Policy explains how Wizzsurf (operated by Inderaction Ltd) collects, uses, and protects personal information when you use our website and services.

1. Who we are

Controller: Inderaction Ltd (trading as Wizzsurf)
Company number: 15994468
Contact email: contact@wizzsurf.com
Registered address: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF

2. What we collect

Depending on how you use our service, we may collect the following categories of data:

• Message details you provide: sender name, recipient name, recipient email, delivery date/time, and the voice recording and/or text you submit.
• Delivery and playback data: a unique play token and message identifiers (used to access your private play page).
• Payment processing data: payment is processed by Stripe. We do not store your card details.
• Technical data: basic server logs such as IP address, user agent, and timestamps (used for security and troubleshooting).

3. How we use your data

• To create your message and manage delivery at the scheduled time.
• To send the recipient an email containing a private link to play the message.
• To process payments, handle billing events, and prevent fraud (through Stripe).
• To operate, secure, and improve our website and services.
• To send marketing emails and newsletters about Wizzsurf where permitted by applicable law. You can unsubscribe at any time using the unsubscribe link in our emails.

4. Legal basis (UK GDPR / GDPR)

We rely on the following legal bases:

• Contract: to provide the service you request (including message creation and delivery).
• Legitimate interests: to secure the service, prevent abuse, and maintain site operations.
• Legitimate interests (and/or consent where required by law) for marketing communications.
• Legal obligation: where required to comply with applicable law.

5. Who we share data with

We use trusted third-party providers that process data on our behalf:

• Stripe (payments, checkout sessions, webhooks).
• Resend (email delivery).
• Vercel (hosting and serverless runtime).
• Prisma + Postgres (database/storage).
• Cloudflare (domain/DNS management), if you use our custom domain.

These providers are contractually required to protect your information and are only permitted to use it to provide services to us.

6. International transfers

Some third parties may process data outside the UK/EEA. Where required, we use appropriate safeguards.

7. Data retention

We retain personal data only for as long as necessary to provide Wizzsurf, complete delivery, and comply with legal and operational requirements.

Default retention (30 days)
Message content and delivery details (including audio/text you submit, sender/recipient details, and the play token) are retained until delivery completes and then deleted within 30 days.
Technical and security logs (such as IP address, user agent, and timestamps) are retained for up to 30 days for monitoring and abuse prevention.
Payment and accounting identifiers may be retained longer where required by applicable tax/accounting obligations.

8. Your rights

• Request access to your personal data.
• Request correction or deletion of your personal data.
• Request restriction or object to certain processing.
• Request portability of certain data.
• Lodge a complaint with the UK Information Commissioner's Office (ICO): https://ico.org.uk

If you want to access, correct, or request deletion of your personal data, email contact@wizzsurf.com with the subject line “Data request”. We may ask you to verify your identity before responding. We will respond within one month of receiving your request (and may extend by up to two additional months for complex requests).

9. Security

We implement reasonable technical and organisational measures designed to protect personal information from unauthorised access, loss, or misuse.

10. Cookies

We may use essential cookies to ensure the website functions properly. We do not use cookies to build advertising profiles. Third-party services (such as payment and email providers) may set cookies when you interact with them.
We are not using Google Analytics at this time.

11. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page.

12. Contact us

Questions or requests regarding this Privacy Policy should be sent to contact@wizzsurf.com.