Privacy & Security
Your data is yours.
We built everything around that.
Every AI tool asks you for the same deal: give us your data, and we'll give you intelligence. We didn't think that was fair. So we built an AI workspace where privacy isn't an upgrade — it's the foundation.
Your prompts and outputs are processed and immediately discarded. Our default providers retain nothing after processing.
No AI provider uses your conversations, documents, or emails to train, fine-tune, or improve their models. Ever.
AES-256 encryption at rest, TLS in transit. On every plan, including free. Not a premium add-on.
Compliance
GDPR isn't our limit. It's our starting point.
Wysor is a German company, built and operated under German and EU law. We didn't retrofit GDPR compliance — we designed every system around it from day one.
German company, German law
Wysor is incorporated in Germany and fully subject to EU data protection law. No legal grey areas.
EU infrastructure
All core infrastructure — hosting, analytics, error monitoring, and data storage — operates within the EU. Your data doesn't take a world tour.
Transfer safeguards
Where a provider operates outside the EU, EU Standard Contractual Clauses (SCCs) are in place. We don't rely on goodwill — we rely on contracts.
GDPR compliance doesn't tell the whole story.
GDPR compliance certifies that a company has data protection processes in place. It doesn't guarantee that your data isn't stored, isn't used for marketing, or can't be read by employees. A fully GDPR-compliant provider can still use your data for analysis, target you with ads, or have staff review your conversations.
We go further: contractual zero data retention, zero training, and encryption on every plan — not just a badge on a landing page.
Your data
What happens when you use Wysor
Your AI conversations
When you send a message, it's processed by the AI provider and the response is returned to you. Our default providers discard your input immediately after processing. We don't store, log, read, or analyse the content of your AI interactions. Switch between models mid-conversation — the protections don't change.
Your emails
Contracts, salary discussions, client communications — your most sensitive information. AI-powered replies, priority sorting, and tone matching all run under the same legal protections. None of it is stored or trained on by any provider.
Your voice notes
Transcribed directly on your device. The audio never leaves your phone. There's no server in between. We don't receive your recordings, which means we can't leak them either.
Your browsing
No advertising trackers on our website. No Facebook pixel. No Google tracking tag. We use privacy-respecting, EU-hosted analytics only.
Encryption
Encryption isn't a feature. It's a baseline.
Some companies charge extra for encryption. We think that's like charging extra for a lock on your front door. Every plan gets the same protection.
At rest
AES-256 encryption — the same standard used by banks and governments. Your emails, chats, documents, and voice transcriptions. All encrypted when stored.
In transit
TLS 1.2+ on every connection. The data moving between your device and our servers is protected from interception.
Legal guarantees
These aren't promises on a marketing page. They're binding contracts.
We negotiated dedicated data processing agreements with every AI provider we work with. Not the standard terms of service — dedicated, binding legal contracts that hold up in court.
For regulated industries
When contracts aren't enough: run everything locally
Some organisations can't send data to any external provider — no matter how good the contract is. For those cases, we offer fully dedicated AI infrastructure hosted entirely within the EU. Your hardware, your data, your control. No third-party AI providers involved.
Privacy and performance. No trade-off.
Start for free with the same protections enterprise customers get. Because privacy shouldn't be a premium feature.