Date of last revision: 6 FEBRUARY 2024

  1. Who are we?
    • We are Wobby BV, a company incorporated under Belgian law, having its seat at Van Eycklei 2, 2018 Antwerpen, Belgium (“Wobby”, “we”) and registered with the Crossroads Bank for Enterprises (Kruispuntbank van Ondernemingen or KBO) under enterprise number 0799.722.339.
    • We at Wobby provide a no-code, AI-powered data analytics platform that enables users with no data background to analyze tabular statistical data (“Platform”).
    • We value your right to privacy and make every effort to protect your personal data in accordance with applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and national implementing legislation. In this privacy policy (“Privacy Policy”), we explain you, as a data subject, (“You”, “your”) what personal data we collect from you, for what purposes we will process this data, on what legal basis we base this processing, to whom your personal data may be transferred, how long we keep your data, how we protect your data and what rights you have in relation to the processing of your personal data.
    • All concepts not explicitly defined in this Privacy Policy, have the same meaning as in the GDPR.
  2. from whom do we collect data?
    • In the course of our business, we may collect personal data from contact persons of organisations, users of the Platform, prospects, visitors to our Platform, persons who provide their business card or otherwise their contact details to us, and persons who contact us by e-mail or otherwise.
    • By using our Platform, we collect and process your data. Some aspects of these data can be qualified as personal data. We process the following categories of personal data, for the following purposes, on the basis of the following legal grounds:




To create an account & account administration

Name, e-mail address


The necessity for the performance of the contract we have concluded with your employer, in particular the Services Agreement, granting you a license to use the Platform (art. 6.1 b) GDPR)

To help you with technical problems or other questions

Data required to resolve these issues

Necessary for the exercise of our legitimate interests (art. 6.1 f) GDPR), in particular to enhance the quality of our Platform

To inform you of new functionalities to our Platform

Name, email address

Necessary for the exercise of our legitimate interests (art. 6.1 f) GDPR), in particular communicate relevant information

To analyse statistics about visitors to our Platform in order to improve the Platform

Data on visitors’ behaviour

Your consent (art. 6.1 a) GDPR)

To comply with legal obligations

Data required by applicable law

Necessary to comply with a legal obligation (art. 6.1 c) GDPR)

To prevent, detect and combat fraud and other illegal or unauthorised activities

Data required for detection of fraud and illegal activities

Necessary for the exercise of our legitimate interests (art. 6.1 f) GDPR, in particular the prevention of fraud and other illegal activities

To fulfil payment obligations

Email address

Necessary for the exercise of our legitimate interests (art. 6.1 f) GDPR, in particular paying us for the premium features and in-app purchases

For newsletters

Email address

Your consent (art. 6.1 a) GDPR). This authorisation can be withdrawn by you at any time


    • We may disclose your personal data to the following parties:
  • Other users of the Platform: you share information with other users when you disclose information on the Platform. Please be careful with your information and make sure you are comfortable with the visibility of the content you share.
  • With our service providers and partners: We use third parties to help us operate and improve our Platform. These third parties assist us with various tasks, including data hosting and maintenance, analytics, customer care, marketing, advertising, payment processing and security operations. We also share information with partners who distribute and assist us in advertising our Platform.
  • With law enforcement/when required by law: We may disclose your information if reasonably necessary: (i) to comply with a legal process, such as a court order, subpoena or search warrant, government / law enforcement investigation or other legal requirements; (ii) to assist in the prevention or detection of crime (subject in each case to applicable law); or (iii) to protect the safety of any person.
    • When transferring personal data to third parties, we always ensure that we implement appropriate technical and organisational protection measures. Where necessary, we will, for example, conclude a transfer agreement or a processor agreement, which sets out restrictions on the use of your personal data and obligations in respect of the security of your personal data.
    • Your personal data will not be lent or sold to third parties for marketing purposes without your prior express consent.
    • In principle, no personal data will be exported to countries outside the European Economic Area. To the extent that your data is transferred in the context of this article to countries outside the EEA which do not provide an adequate level of protection for your data, Wobby will ensure that the companies to which your data is transferred do provide an adequate level of protection. In particular, we have concluded Standard Contractual Clauses (SCC) with them. Wobby guarantees to always verify, on a case-by-case basis, whether an adequate level of protection is in place for transfers to third countries.
    • We do not keep your personal data longer than necessary for the purposes for which it is collected and processed (as described above).
    • For the purposes of providing Platform to the organisations, we will retain it for as long as necessary to fulfil the purposes set out above, unless a longer retention period is (i) necessary to cover our liability or (ii) required or permitted by law.
    • We store the personal data until you decide to delete it. If you delete your personal data, we follow a deletion procedure to ensure that your personal data is securely and completely deleted from our servers or kept only in an anonymized form. We try to ensure that our services prevent accidental or malicious deletion of personal data. Therefore, there may be some delay between the moment you delete the personal data and the moment the copies are removed from our active and backup systems.
    • All personal data purely for the purpose of scientific research or statistical purposes may be stored for longer periods.
    • Regarding the data of visitors to our Platform, we refer to our Cookie Policy.
    • We take appropriate technical and organisational measures to ensure a level of security appropriate to the specific risks we have identified.
    • We thus protect your personal data as best as we can against the destruction, loss, alteration or unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed. More information on our security measures is available upon request.
    • Withdraw your consent at any time: you have the right to withdraw consent where they have previously given their consent to the processing of your personal data.
    • Object to processing of your personal data: you have the right to object to the processing of your personal data if the processing is carried out on the legal basis of a legitimate interest, including profiling. You also have the right to object to the processing of your personal data for direct marketing purposes. This right is absolute – we will always comply with it.
    • Right to access: You have the right to obtain confirmation from us as to whether or not we are processing your personal data, to obtain access to that personal data and how and why it is being processed, as well as to receive a copy of that data.
    • Right to rectification: You have the right to obtain a correction of your personal data or to request that we complete your personal data if you notice that we are processing incorrect or incomplete data about you.
    • Right to erasure: You have the right to obtain data erasure in certain specific cases.
    • Right to restriction: You have the right to have the processing of your personal data restricted in certain specific cases.
    • Right to data portability: You have the right to obtain the personal data you have provided us with in a structured, commonly used and machine-readable form, and to transfer that personal data (or have it transferred) to another controller.
    • You may exercise the above rights by sending an e-mail to or in the case of the right to object to direct marketing also via the opt-out link included in our marketing e-mails. The exercise of these rights is in principle free of charge. Only in case of unreasonable or repeated requests may we charge a reasonable administrative fee. We always try to answer your requests or questions as quickly as possible. It is possible that we will first ask you for proof of identity in order to verify your identity. For further information and advice on the above rights, please visit the Platform of the Data Protection Authority: In addition to the above rights, you also have the right at any time to lodge a complaint with the Data Protection Authority in connection with the processing of your personal data by us. You can contact the authority at or by mail at the following address:


Drukpersstraat 35

1000 Brussel

  • Furthermore, you can always choose to uninstall the Platform or delete your account. When the information on your profile is inaccurate, you have the right to update your information.
  1. References to other websites
    • Our Platform may contain links to other sites that are not operated by us. If you click on a third-party link, you will be redirected to that third-party site. We strongly recommend that you review the Privacy Policy of each site you visit.
    • We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or Platform.
    • From time to time it may be necessary to amend this Privacy Policy. When we post changes to the policy, we will change the “last updated” date at the top of the document. The most recent version of this Privacy Policy will be available on our Platform at all times.

    Wobby’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

    When we refer to user-uploaded datasets, we mean any data that a user imports into our platform, whether by uploading CSV or Excel files, pasting data directly from the clipboard, or integrating data through the Google Sheets connection.

    – To improve our platform and provide personalized features, we share only the necessary fragments of user-uploaded datasets with third-party large language models (LLMs), including those available within Azure (Azure OpenAI) and locally hosted and finetuned LLMs. These interactions are designed to enhance data analysis capabilities without compromising the integrity and confidentiality of your data. 
    – Small fragments of user-uploaded datasets may also be shared with logging tools such as Elasticsearch. This sharing is crucial for monitoring platform performance, auditing activities, and ensuring the security and reliability of our services.
    – User-uploaded datasets are shared with Azure Storage, where we securely store data. This ensures the availability and integrity of user-uploaded data, facilitating efficient access and management.

    • If you have any questions or concerns regarding this Privacy Policy or our processing of your personal data, you may contact us at