GDPR & Data Rights
Are we subject to GDPR?
Wexolo is based in the United States, but GDPR can still apply to us because we offer the Service to individuals in the EU/UK/EEA.
Legal basis for processing
| Processing activity | Legal basis |
|---|---|
| Responding to a support or contact request | Legitimate interest / performance of a request you initiated |
| Processing a subscription payment | Performance of a contract (Terms of Service) |
| Issuing and verifying license tokens | Performance of a contract |
| Basic security & abuse-prevention logging | Legitimate interest |
| Marketing emails (only if you opted in) | Consent |
Your rights under GDPR
If GDPR applies to you, you have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten"), subject to legal retention requirements.
- Restriction — ask us to limit how we use your data while a dispute is resolved.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest, including for direct marketing.
- Withdraw consent — at any time, where processing is based on consent.
To exercise any of these rights, email support@wexolo.com with the subject line "GDPR request."
Because most processing happens on your device
For Wexolo specifically, most "your data" concepts under GDPR — the files, audio, and documents you run through our tools — never reach us as a data controller or processor at all, because processing happens locally in your browser. That means for those categories of content, there's typically nothing on our servers to access, correct, or delete, because we never had it.
Data Processing Addendum (DPA)
Business-plan customers who need a signed DPA for their own compliance purposes can request one at our contact page.