Legal

Privacy Policy

Last updated: 1 September 2026

What we collect, why we collect it, who else sees it, and how long we keep it. WEVORI reads and writes content on your WordPress site, so this policy also covers what happens to that content.

Who is responsible
What we collect
Why we use it
Who else processes your data
Where your data is stored
Your content is not used to train AI models
How long we keep it
Your rights
Cookies
Children
Changes to this policy
Contact

1. Who is responsible

The controller of your personal data is NOOR&NOOR SARL AU, registered in Morocco, at 35, Residence El Hadika, Appt 21, Douha-Laayayda, 11050 Salé, Morocco, commercial register number RC Salé 40289.

Data processing and hosting are part of the company's registered activities (NMA 631, "traitement de données, hébergement et activité connexe").

For privacy questions, write to office@wevori.com.

2. What we collect

Account and workspace data

Your name, company name and email address, given at signup.
Your workspace name, timezone and interface language.
The names and email addresses of Production Users you invite.
Your plan, website slots and Credit balance.

Data from your WordPress website

Through the WEVORI Connector, we read and store:

your site structure, categories and tags;
your WordPress authors, including their name and profile information, so articles can be written in their voice;
your existing and scheduled posts, so planning builds on what is already there;
pageview counts for Insights, collected first-party from your own site.

Note that your WordPress authors are usually real people who are not our customers. You remain responsible for having a basis to share their details with us.

Content you create in WEVORI

Editorial calendars, approved titles, generated articles and their revisions.
Your Website Intelligence Profile, including the writing style settings you configure.
Images generated or uploaded for articles.

Technical and usage data

Log data such as IP address, browser type and timestamps, needed to run and secure the service.
A record of actions that consume Credits, so your billing history is accurate.

Payment data

We do not receive or store your card details. Payments are handled by Paddle as Merchant of Record. We receive from Paddle only what we need to activate your purchase: a customer identifier, what was bought, and the amount.

3. Why we use it

To provide the service. Planning, generating, reviewing and publishing articles is the purpose you signed up for. Legal basis: performance of our contract with you.
To operate and secure the platform. Logs, abuse prevention, debugging. Legal basis: our legitimate interest in a working, secure service.
To communicate with you. Account emails, password resets, team invitations and important service notices. Legal basis: performance of our contract.
To meet legal obligations. Retaining records where the law requires it.

We do not sell your data, and we do not display advertising.

We use a small number of providers to run WEVORI. Each of them processes data only to perform their part of the service.

Paddle.com Market Ltd (United Kingdom), Merchant of Record. Handles payments, tax and refunds, and is the controller of the payment data you give it.
Anthropic (United States), AI provider. Receives the content needed to write and translate articles.
OpenAI (United States), AI provider. Receives the content needed to analyse your website for the Website Intelligence Profile.
Resend (United States), email delivery. Receives the recipient address and the content of transactional emails.
Kyzoe (Belgium), hosting provider. Stores the application and its database.

5. Where your data is stored, and who can reach it

The application and its database are hosted in Belgium, within the European Union. Our AI and email providers are located in the United States, and our team accesses the system from Morocco in order to operate and support the service.

These transfers are made on the basis of appropriate safeguards, including the European Commission's Standard Contractual Clauses where applicable.

What is encrypted

The servers holding your data use full-disk encryption, so the data at rest cannot be read if a physical drive is ever removed from the datacentre.

The connection key that links WEVORI to your WordPress site is encrypted a second time before it is stored, with a key held separately from the database, so it stays unreadable even to someone who reaches the database itself. Passwords are hashed and cannot be read back, not even by us. We never receive or store your card details: those go to Paddle.

What is not, and why

Your articles, your Website Intelligence Profile, your author profiles and your account details are stored in readable form. They have to be: an article cannot be reviewed, regenerated or published on its scheduled date if it was never kept. Anyone telling you otherwise is describing a product that could not work.

This means our staff can technically reach your content. In practice that access is used only to operate the service and to help you when you ask us to, and it is limited to the people who need it for that. If you would rather we did not look at a specific workspace while resolving a support request, say so and we will work around it.

6. Your content is not used to train AI models

We do not use your content to train our own models, and we do not sell it to anyone for that purpose. Content sent to our AI providers is sent so they can return a result to you.

7. How long we keep it

Workspace and content data: for as long as your workspace exists.
After a workspace is closed: deleted within 30 days, except where we must keep records longer by law.
Billing records: for the period required by tax law, which is typically several years.
Technical logs: 12 months. These are the server and application logs: which page was requested, when, from which IP address, and any errors that occurred. They exist to keep the service running and secure, and they are not used to build any profile of you.

8. Your rights

Depending on where you live, you may have the right to access your data, to correct it, to have it deleted, to restrict or object to how we use it, and to receive a copy in a portable format. You also have the right to complain to your data protection authority.

To exercise any of these, write to office@wevori.com. We respond within one month.

If you are a Production User rather than a workspace owner, note that the workspace owner controls the workspace you were invited into. We will help you reach them.

9. Cookies

WEVORI uses one cookie: a session cookie that keeps you logged in. It is necessary for the service to work and cannot be switched off.

We use no analytics cookies, no advertising pixels and no third-party trackers, on wevori.com or in the application. That is also why you are not asked to accept cookies anywhere on this site.

10. Children

WEVORI is a business product and is not intended for anyone under 18, the age of majority in Morocco. We do not knowingly collect data from minors.

11. Changes to this policy

We will update this page when our processing changes. Material changes are announced to workspace owners by email. The date at the top always shows the current version.

12. Contact

NOOR&NOOR SARL AU, 35, Residence El Hadika, Appt 21, Douha-Laayayda, 11050 Salé, Morocco
Email: office@wevori.com