Great Wave AI Privacy Policy

Last updated: 13th July 2026

At Great Wave AI, we are committed to safeguarding the privacy of our website visitors (https://greatwave.ai/) and users of the Great Wave AI platform (https://app.greatwave.ai/ or variations of [subdomain].greatwave.ai).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or use our services, in accordance with the UK GDPR and other applicable laws.

Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

1. Information We Collect

When you interact with us via our website, the Great Wave AI platform, or any sites that link to this Privacy Policy, we may collect Personal Data and other information from you, as further described below.

A. Information You Provide

When You Visit Our Website: We collect Personal Data from you when you submit web forms or interact with our website, for example by submitting our “Talk to our team” form so we can contact you. We may ask for your email address, phone number, first and last name, job title, and other similar business information. You are free to explore some of our website without providing any Personal Data about yourself.

Account and User Information: We collect Personal Data when you sign-up for an account, create or modify user information, or set preferences on the Great Wave AI platform.

Payment Information: We collect payment and billing information when you register for paid products or services. For example, we may ask you to provide a billing address, or a billing contact for your Great Wave AI account. If you give us payment information, we use it solely as authorised by you in accordance with this Privacy Policy.

Testimonials: We may post testimonials and comments on our websites, which may contain Personal Data.

B. Automatically Collected Information:

Usage Data: On the Great Wave AI platform, we track usage data including metrics and information regarding your use and interaction with the platform, such as what features you use the most.

Log Files: Like most websites and technology services delivered over the Internet, we automatically collect and store information about your computer hardware and software when you visit our website or the Great Wave AI platform. This information can include your IP address, browser type, domain names, internet service provider (ISP), the files viewed on our websites (e.g., HTML pages, graphics, etc), your operating system, access times, screen size, and referring website addresses.

Google reCAPTCHA: We use Google reCAPTCHA on our site to protect against spam and abuse. This service is provided by Google and is subject to Google’s Privacy Policy and Terms of Service, which may collect information from you to ensure you are a human.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our the Great Wave AI platform and website.

  • Communicate with you about updates, promotions, and relevant information regarding our services.

  • Personalise user experiences and improve our products and services.

  • Process payments and manage subscriptions.

  • Monitor usage, diagnose issues, and ensure the security of our platform.

  • Comply with legal obligations and resolve disputes.

3. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

  • Contractual necessity: To provide you with our services, including managing accounts, processing transactions, and delivering technical support.

  • Legitimate interests: To improve our services, protect the security of our platform, and communicate with you.

  • Consent: For any marketing activities, where you have provided consent.

  • Legal obligations: Where we are required to process your data to comply with legal obligations.

4. Sharing Your Information

We may share your personal data with third parties under the following circumstances:

  • Service providers: We use third-party providers (e.g., payment processors, hosting services, analytics providers) who process your data on our behalf.

  • Business transfers: If we are involved in a merger, acquisition, or asset sale, your data may be transferred as part of the business transaction.

  • Legal obligations: We may disclose your data where required by law, to enforce our terms, or to protect our rights and property.

5. Data Security

We implement technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse (please see https://docs.greatwave.ai/great-wave-ai-platform/technical-faqs for more detail).

6. International Transfers

Your personal data may be transferred to, and processed in, countries outside of the UK or European Economic Area (EEA). If we transfer your data to countries that do not provide the same level of protection as UK or EEA law, we will ensure it is protected by appropriate safeguards, such as standard contractual clauses or reliance on the UK adequacy regulations.

7. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting, or reporting requirements.

8. Your Rights

Under the UK GDPR, you have certain rights regarding your personal data, including:

  • Right to access: You may request a copy of the personal data we hold about you.

  • Right to rectification: You may ask us to correct any inaccurate or incomplete data.

  • Right to erasure: You may request the deletion of your personal data where there is no legal basis for us to continue processing it.

  • Right to restrict processing: You may ask us to suspend the processing of your personal data.

  • Right to data portability: You may request to receive your personal data in a structured, commonly used format.

  • Right to object: You may object to the processing of your data based on legitimate interests or for direct marketing purposes.

  • Right to withdraw consent: You may withdraw your consent at any time where processing is based on your consent.

9. Marketing Communications and Newsletters

From time to time, we may send you newsletters and other marketing communications about Great Wave AI, including product updates, feature announcements, promotions, event invitations, and other content we think may be of interest to you. This section explains how we do this and the choices available to you.

Information we use: To send you our newsletter and marketing communications, we use the contact details you provide to us, such as your email address and, where available, your first and last name and job title. We may also use usage data (as described in Section 1) to tailor the content of our communications so that it is more relevant to you. We do not use special category data for marketing purposes.

Legal basis: We send marketing communications and newsletters either on the basis of your consent, or in reliance on the “soft opt-in” permitted under the Privacy and Electronic Communications Regulations (PECR). The soft opt-in applies only where all of the following are met: we obtained your contact details in the course of a sale, or negotiations for a sale, of our products or services to you; we are marketing our own similar products or services; and you were given a clear and simple opportunity to opt out of such communications both at the point your details were collected and in every message since. Where these conditions are not met, we will rely on your prior consent, which we will obtain before adding you to our newsletter list and which you may decline without affecting your access to our services. We direct our newsletters and marketing communications to business users at their corporate contact details, and not to consumers at personal addresses. Where the recipient is an individual (for example, a named employee at a work address), we continue to treat their contact details as personal data and apply the protections set out in this policy, including the right to opt out at any time.

No third-party marketing: We use your details only to send you marketing about our own products and services. We do not sell, rent, or share your contact details with third parties for their own marketing purposes.

Third-party providers: We use third-party email and marketing service providers to manage our mailing lists and deliver our communications on our behalf. These providers act as our processors, may only process your data on our documented instructions, and are bound by appropriate contractual and security obligations, in accordance with Section 4 (Sharing Your Information) and Section 5 (Data Security) of this policy. Where this involves a transfer of your data outside the UK or EEA, we apply the safeguards described in Section 6 (International Transfers).

Your choices and how to opt out: You can opt out of receiving our newsletters and marketing communications at any time, free of charge, by clicking the “unsubscribe” link included in every marketing email we send, or by contacting us using the details in Section 13 (Contact Us). We action opt-out requests promptly. To ensure we respect your choice, we retain a minimal record of your opt-out (for example, your email address on a suppression list) for the sole purpose of not contacting you again. Withdrawing your consent or opting out will not affect the lawfulness of any processing carried out before you did so, and you may continue to receive service-related or transactional messages that are necessary for us to provide our services to you.

Retention of marketing data: We retain the personal data used for marketing purposes only for as long as we have a lawful basis to do so, matching the basis on which we contacted you. Where we rely on your consent, we retain your details for marketing purposes until you withdraw that consent or unsubscribe, after which we stop sending you marketing communications. Where we rely on the soft opt-in, we retain your details for marketing purposes for as long as you remain a customer and for a reasonable period afterwards, after which we cease sending you marketing communications unless you have separately consented to continue receiving them. In either case, opting out or withdrawing consent takes effect promptly, and we will retain only the minimal record needed to honour your choice (for example, your email address on a suppression list), as described above.

Children: Consistent with Section 12, our products, services, and marketing communications are not intended for or directed at children under 16, and we do not knowingly send marketing communications to them.

Your right to complain: If you are unhappy with how we handle your data for marketing purposes, you have the right to object at any time, and you may also lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

10. Cookies

We use cookies and similar tracking technologies to enhance your experience on our website. You can manage your cookie preferences through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We encourage you to review this page periodically for any updates.

12. Other Important Privacy Information

Information About Children: The websites, product and services are not intended for or targeted at children under 16, and we do not knowingly or intentionally collect Personal Data about children under 16. If you believe that we have collected Personal Data about a child under 16, please contact us, so that we may delete the information.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, or you want to exercise your rights regarding your personal data, please contact us at:

Great Wave AI

Email: contact@greatwave.ai