Legal
Privacy Policy
How we handle personal data across our website, sandbox and commercial engagements. Last updated 17 August 2026.
1. Who we are
WOW Finstack builds WOWBANK, a composable Bank-in-a-Box platform. This policy explains how we handle personal data that we control — primarily data from website visitors, sandbox users and business contacts.
Where we process data on behalf of a client bank or fintech, that client is the data controller and our contract with them governs the processing. This policy does not replace those terms.
2. Data we collect
Contact details you submit — name, work email, company, role, country and the message or booking topic you send us.
Sandbox and developer data — the account identifiers and API keys issued to you, plus request logs needed to operate and secure the sandbox.
Technical data — IP address, device and browser type, referring page and pages viewed, collected to keep the site secure and to understand aggregate usage.
3. Why we use it
To respond to enquiries, arrange meetings and run evaluations you have asked for.
To provide, secure and improve the website, developer documentation and sandbox.
To send service and, where you have opted in, occasional product updates. You can opt out at any time.
To meet legal, regulatory and contractual obligations that apply to us.
4. Sharing
We share personal data with service providers who host, secure and operate our website, communications and scheduling tools, under contracts that limit their use of that data.
We may disclose data where required by law or to protect our rights. We do not sell personal data.
5. Retention
We keep enquiry and business-contact data for as long as needed for the relationship, and afterwards only where a legal or contractual obligation requires it. Sandbox records are removed when the sandbox account is closed.
6. Your rights
Depending on where you live, you may ask for access, correction, deletion, restriction or portability of your personal data, and object to certain processing. Contact us and we will respond within the timeframe your law requires.
7. International transfers
Our teams and providers operate in multiple countries. Where personal data moves across borders, we use contractual protections appropriate to the destination.
8. Contact
Questions about this policy or a data request: use the contact form on this site and mark your message “Privacy”.

