Wiserta policy

Privacy, in plain language.

Effective September 19, 2026

Wiserta collects only the information needed to deliver products, manage purchases, answer support requests and improve the service.

Controller and contact

Wiserta is operated by PE Oleg Khmelnytskyi, a sole proprietor registered in Ukraine (ФОП Хмельницький Олег Юрійович). Registered and actual address: Antonovycha St, 160, Kyiv, Ukraine, 03150. For questions about Wiserta's use of personal information or to exercise an applicable privacy right, email hello@wiserta.com or call +380 97 947 6074. Do not send identity or banking documents by email. Paddle separately controls the personal information it processes as Merchant of Record under Paddle's own privacy notice.

Information we may collect

• Contact details such as your name and email address.
• Your consent choice, signup source and message-delivery status when you request a free resource or email updates.
• Your organization name when you voluntarily provide it with a Wiserta Pro request.
• Order and billing records supplied by a marketplace or payment provider.
• Non-medical choices submitted through a Wiserta enquiry or pilot.
• Device, page and referral information when you allow optional analytics.

Optional measurement

If you allow analytics, Wiserta records page paths, navigation and call-to-action clicks, on-site search terms, scroll milestones, product and checkout steps, a random session identifier, broad device category and campaign parameters such as UTM source. This helps us understand which pages are useful and where a flow becomes confusing.

Wiserta uses Google Analytics 4 for aggregated traffic measurement and Microsoft Clarity for consented heatmaps and session recordings. These optional services load only after you allow analytics. Clarity is disabled on Familiar Meals, and the tool suppresses ordinary button and form tracking inside its private workspace. Wiserta does not intentionally send form contents, uploaded files, meal content or family information to either service.

Meta Pixel and Pinterest Tag load only after you separately allow marketing technologies. They are used for campaign attribution and advertising measurement, not to receive form contents, uploaded files or family information.

Analytics events do not include your email address, name, family facts, form text or uploaded files. You can decline either optional category or change your choice from the Privacy choices control. Cookie names, purposes, typical periods and provider links are listed in the Cookie Policy.

Local files and uploads

The Research Companion reads a GEDCOM file locally in your browser. The file, names, family facts and generated case are not uploaded to Wiserta, Cloudflare, analytics providers or an AI provider. Closing or reloading the page removes the parsed file data from the page; Wiserta has no server copy to delete.

Familiar Meals stores meal photos, meal names, named choice sets, confirmed choices and optional meal outcomes only in browser storage on the current device. Wiserta, Cloudflare, analytics providers and AI providers do not receive that meal content. It remains until you delete it inside the tool or browser storage is cleared. Private browsing, browser cleanup or changing devices can remove it, and Wiserta cannot restore a local copy.

Familiar Meals sends only allow-listed product events after analytics consent, such as the tier and the number of choices shown. Events never include meal names, images, selected meal values, outcomes, timestamps or local record identifiers. Any future Paddle entitlement record is separate from meal content and contains only the purchase information needed to confirm access.

Wiserta does not currently provide a public account area or a server upload feature for GEDCOM, DNA, photographs, audio or documents. If a future service accepts uploads, the upload screen must first identify the files collected, purpose, recipients, security controls, retention period and deletion route. Do not send sensitive files as ordinary email attachments unless Wiserta has agreed a suitable transfer method with you.

Product availability updates

For products that are not yet available through direct Wiserta checkout, you may ask Wiserta to notify you when a selected product becomes available. We store the email address, selected product, consent record, source page and campaign attribution. This list is separate from behavioral analytics. No order is placed, nothing is reserved or charged, and you may unsubscribe or ask us to delete the request at any time.

Family Stories pilots

If you voluntarily participate in a Family Stories pilot, the material may include a family-tree or GEDCOM export, names and relationships, dates and places, photographs, documents, written notes, audio recordings and your corrections. These materials can contain information about people other than you. Submit only material you are authorized to share.

Family materials are used to create the requested product, perform source and design quality checks, provide revisions and prevent delivery errors. Sensitive family facts must not be sent to advertising platforms or included in analytics parameters.

Living people and genetic data

Living people should be hidden or minimized by default unless their inclusion is necessary and authorized. The initial Family Stories service is not designed to accept raw DNA files, medical records or family health histories. Do not submit those materials.

How it is used

Wiserta uses personal information to deliver files, recover purchases, provide support, manage billing records, prevent fraud, improve products and send communications you requested. Depending on the context and applicable law, the basis is performance of a requested service or contract, compliance with legal obligations, a legitimate interest that does not override your rights, or your consent. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

Wiserta does not use personal information for solely automated decisions that produce legal or similarly significant effects. It does not use customer or family information to decide health, care, credit, employment, insurance or eligibility outcomes.

AI and automation

Wiserta uses OpenAI tools in a private production workflow to help draft and quality-check general product content and to generate or review some public artwork. A human-controlled release process checks the resulting materials before publication. Wiserta does not operate a public chatbot, automated therapist, crisis adviser or automated care decision tool.

Public forms, support requests, purchase emails, GEDCOM files and information about living people are not sent to OpenAI by the current website flows. If a future personalised service proposes using submitted personal information with an AI provider, Wiserta must explain that use and obtain any required permission before the transfer. AI-assisted text and images must not be presented as a customer review, a real historical record, a real person or a verified fact when they are not.

Email choices

Free-resource sequences, The Wiserta Letter and the Wiserta Pro interest list are separate. Marketing lists use confirmation, and each marketing message includes an unsubscribe link. Joining one list does not add you to another.

At direct Wiserta checkout, you may separately choose to receive occasional Wiserta resources and product updates. This optional box is unchecked by default and is not required to buy or receive a product. The choice, source page and time are recorded with the checkout; the marketing subscription becomes active only after a completed purchase and your separate email confirmation.

Marketing consent is separate from service communication. Unsubscribing from marketing does not stop product delivery, receipts, payment notices, security messages or replies to a support request. Those messages are sent only when needed to provide the transaction or service you requested.

Feedback and reviews

Product ratings, comments and requests are private by default. If you separately consent to publication, Wiserta may review the comment, remove private family details and publish an approved excerpt. Publication is never automatic. Contact information is not displayed as part of a review, and a review is described as a verified purchase only after Wiserta can match it to a completed order.

Providers and transfers

Information is disclosed only as needed for the relevant service:

• Cloudflare: website delivery, bot protection through Turnstile, protected application records, private digital files and security logs.
• Resend: confirmation, requested marketing and transactional email delivery.
• Paddle: checkout, payment, fraud prevention, tax, receipts, invoices and refunds as Merchant of Record. Wiserta receives the purchase email, product, transaction status and amounts needed for delivery, support and accounting. Wiserta does not receive or store full card details.
• Google Analytics and Microsoft Clarity: optional website measurement only after analytics consent.
• Meta and Pinterest: optional advertising measurement only after marketing consent.
• OpenAI: the internal, human-controlled content and artwork workflow described above; current public website flows do not send customer form contents or uploaded family material to OpenAI.

Wiserta does not sell personal information for money. Optional advertising providers may receive limited browser, device and interaction data only after marketing consent. You can stop future optional disclosure through Privacy choices. Some providers may process information outside your country; where required, Wiserta relies on the provider's applicable transfer mechanism and contractual safeguards.

Retention

• Browser consent choices remain on your device for up to 180 days. Session identifiers and attribution in session storage end with the browser session.
• Familiar Meals content remains in browser storage on the current device until you delete it in the tool or clear browser storage. Wiserta has no server copy to delete or restore.
• Optional first-party analytics records use pseudonymous session identifiers and are retained for up to 14 months.
• Email confirmation links expire after 48 hours. Unconfirmed request records are deleted or anonymised when they are no longer needed to deliver the request, prove consent or prevent abuse. Confirmed marketing contact records remain until you unsubscribe or ask for deletion.
• A minimal suppression record may be retained after unsubscribe, bounce or complaint so Wiserta can respect the choice and avoid sending again.
• Enquiries, pilot requests and private feedback are normally reviewed or deleted within 24 months after the last relevant contact unless an active service, dispute, safeguarding need or legal duty requires longer retention.
• Order, entitlement, refund, fraud-prevention and accounting records are kept for the period required to deliver and recover purchases, resolve disputes and meet applicable tax or legal duties. Full payment-card data is not stored by Wiserta.
• Restricted database backups expire after 35 days. If active data is erased, it is not restored for ordinary use; any disaster recovery restore must repeat the applicable erasure before the system returns to service.

When a stated period ends, Wiserta deletes or anonymises the record unless a documented legal, security or claims reason requires limited further retention. Before any server upload service launches, it must publish a file-specific deletion timetable and implement that timetable in the service.

Your choices

Depending on applicable law, you may request access, correction, deletion, restriction, objection or a portable copy of personal information, withdraw consent, and complain to a competent supervisory authority. Contact hello@wiserta.com with the subject “Privacy request”. Wiserta will acknowledge and handle the request without undue delay and, where GDPR or UK GDPR applies, normally within one month. Wiserta may need proportionate identity verification and may retain limited information where the law requires it or where needed to establish, exercise or defend legal claims.