Legal
Privacy Policy
This policy explains what information we collect, why we collect it, how long we keep it, and the control you have over it. It is written in plain English on purpose.
Last updated 4 August 2026 · Big Wow Theory™ is a product of Groundbreaking Merchandise Private Limited.
1. Who we are
Big Wow Theory™ is a landing page intelligence platform operated by Groundbreaking Merchandise Private Limited (“we”, “us”). For the purposes of the EU and UK General Data Protection Regulation (GDPR), Groundbreaking Merchandise Private Limited is the data controller for the personal data described in this policy.
Privacy questions and data rights requests can be sent to privacy@bigwowtheory.com.
2. Information we collect
We collect only what we need to run the service:
- Account information — name, email address, password hash (or your Google sign-in identifier), workspace and team membership.
- Website analysis data — the URLs you submit, the publicly available page content we retrieve from them, and the structured data extracted from that content.
- AI-generated content — scores, findings, recommendations, rewrites and chat messages produced when you run an analysis or use the Optimization Studio™.
- Usage and product data — credit balances, feature usage, request logs, timestamps and diagnostic information.
- Support data — the tickets, messages and feedback you send us.
- Payment information — when paid plans launch, payments will be processed by our payment processor. We do not receive or store full card numbers; we retain only the billing metadata needed for invoicing and accounting.
- Technical data — IP address, approximate region, browser type and device information collected through normal web requests.
We do not intentionally collect special category data, and we ask that you do not submit it to the platform.
3. How we use your data
- Providing the platform: authentication, running analyses, generating reports and optimization output.
- Managing your subscription, credit balance and fair-usage limits.
- Providing customer support and responding to your requests.
- Improving reliability, accuracy and performance through aggregated diagnostics.
- Detecting, preventing and investigating abuse, fraud and security incidents.
- Meeting our legal, tax and accounting obligations.
4. Lawful basis for processing (GDPR)
Where the GDPR applies, we rely on the following lawful bases:
- Performance of a contract — to deliver the service you signed up for.
- Legitimate interests — to keep the platform secure, prevent abuse and improve the product, balanced against your rights.
- Consent — for optional analytics and, in future, marketing cookies. You can withdraw consent at any time through the cookie preferences control.
- Legal obligation — for accounting, tax and lawful requests from authorities.
5. Your rights
Subject to applicable law, you have the following rights over your personal data:
- Right of access — get a copy of the personal data we hold about you.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) — ask us to delete your account and associated data, unless we must keep it for legal reasons.
- Right to restrict processing — ask us to pause processing while a concern is resolved.
- Right to object — object to processing based on legitimate interests.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email privacy@bigwowtheory.com. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
7. Third-party services
We use a small set of vetted processors to operate the service. Each is bound by a data processing agreement and may only process data on our instructions:
- Cloud hosting and database, authentication and file storage infrastructure.
- AI model providers, used to generate analysis findings, explanations and rewrites.
- Website content retrieval services used to fetch the public pages you submit.
- Product analytics, only where you have consented.
- Payment processing, once paid plans launch.
We do not sell your personal data, and we never have.
8. International transfers
Our infrastructure and processors may store or process data outside your country, including in the United States and the European Union. Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, together with technical measures like encryption in transit.
9. Security
Data is encrypted in transit with TLS and at rest by our infrastructure providers. Access to production data is restricted to the people who need it, all database access is governed by row-level security policies scoped to your account, and privileged operations run server-side only. More detail is on our Security & Data page.
10. Data retention
- Account data is retained while your account is active.
- Analyses, reports and optimization output are retained until you delete them or close your account.
- Support tickets are retained for up to 24 months after resolution.
- Diagnostic and request logs are retained for up to 12 months.
- Billing and tax records are retained for as long as the law requires.
- After account closure, remaining personal data is deleted or irreversibly anonymised within 90 days.
11. Children
The platform is intended for business use and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the product evolves. Material changes will be announced in-product or by email before they take effect, and the “last updated” date above will always reflect the current version.
13. Contact us
Groundbreaking Merchandise Private Limited · Privacy requests: privacy@bigwowtheory.com · General enquiries: Contact page.