Privacy Policy

1. Controller

“WAVERISE” LIMITED LIABILITY COMPANY (Waverise LLC), registered in the Republic of Armenia, registration number 290.110.1467373, taxpayer number 01365166, registered address: 73 Andranik Street, Malatia-Sebastia, Yerevan 0064, Armenia. is the controller for personal data processed for Waverise Tools (tools.waverise.org) and Blik VPN (blik.waverise.org and the Blik Telegram bot). Contact: info@waverise.org.

2. What we collect

Account: email and profile name from Google or Yandex when you sign in to Tools; Telegram identifier when you use Blik VPN.

Billing: top-up amounts, provider (Paddle, YooKassa or Heleket), payment status, and the credit or VPN-balance ledger. We do not receive full card numbers.

Tools jobs: audio, video, text and product photos you upload, output language, quotes and job status. Product cards use the primary rectangular photo and seller text composed locally; only background generation uses AI. Additional photos are validated but not used in this version. No generative product reposing or background removal is promised.

VPN: technical connection data needed to provide the tunnel (device/session identifiers, chosen plan, whether the account carried traffic on a UTC day). We are not the recipient of the content of your VPN traffic.

Technical: IP address, browser language, Cloudflare country, cookies needed to stay signed in and remember locale.

3. Why we use it

To create your account, take payment, run the Tools job you bought, provide Blik VPN access, prevent fraud, and answer support mail. Eligible product-card trials may run without payment. We do not use your uploads or VPN traffic for advertising.

4. Processors

Product-card backgrounds use Replicate and the selected OpenAI image model. The scene brief is sent for background generation, not the source product photos; seller typography is composed locally. Provider processing and retention follow their applicable terms.

Google (sign-in and, where used, translation, speech and image models), Yandex (sign-in on the Russian Tools site), Paddle (card payments), YooKassa, Heleket, Cloudflare (DNS and proxy), and Telegram (Blik bot). They process data only to provide their service to us.

5. Retention

Product-card file access expires 24 hours after acceptance. Input photos and text are removed from the job on a definitive terminal outcome; cleanup removes expired blobs. This is not a guarantee of physical deletion from all storage or backups at exactly 24 hours. Minimal account/job, request digest, attempt and provider records remain to enforce the lifetime trial, replay safety and cost limits. Saved browser drafts become ineligible for restoration after 24 hours and are removed on the next visit; use the delete control on shared devices.

Payment records are kept as required for accounting. Tools job files are kept only as long as needed to finish the job and handle a dispute, then deleted. You can ask us to delete an account at info@waverise.org unless we must keep a record of a payment.

6. Your rights

You may ask for a copy of your data, a correction, or deletion. Mail info@waverise.org. If you are in the EEA or UK you may also complain to your local authority.

7. Cookies

We use a session cookie for login, a locale cookie for language, and cookies required by the payment provider during checkout (including Paddle). There is no advertising pixel from us. Optional first-touch and bounded interaction analytics are opt-in and off by default, using a signed pseudonymous cookie and a session consent preference. No photos, seller text, raw click IDs or arbitrary URL parameters are included. Withdrawal stops optional collection and deletes the current touch and interactions; separate aggregate server outcome records age out under retention (90 days by default, configurable). Metrica and Webvisor remain off.