GWIX Privacy Policy
Last updated October 31, 2026
1. Who we are and what this policy covers
Global Wholesale Intelligence Exchange Corp., a Delaware corporation (GWIX, we), runs gwix.ai, the GWIX API, the GWIX console and Ask GWIX (the Service). This policy explains what personal data we handle, why, who we share it with and the choices you have. It covers three groups of people:
- Customers and their users: people who create accounts, register agents, buy credits or use the Service for a business;
- Website visitors: people who browse gwix.ai or contact us;
- People in data partners’ records: individuals whose information appears in data that partners license to GWIX.
GWIX decides why and how it uses this data, so it is the controller. Where we do work for a single customer solely on that customer’s instructions, we act as its processor.
Our products today. GWIX sells aggregated statistics and reference data, built so that no individual can be identified. We do not sell personal data, and we do not share it for cross-context behavioral advertising. We will publish an updated policy before that changes.
2. Information about customers and visitors
| What we collect | Examples | Why we use it | Legal basis (EU/UK) |
|---|---|---|---|
| Account details | Name, work email, organization, role, sign-in records | Create and secure the account, contact you about it | Contract where you are the customer; otherwise legitimate interests in administering your organization’s account |
| Verification details | Business registration, operator domain, identity of the person verifying | Decide access levels, prevent fraud and abuse | Legitimate interests; legal obligation where it applies |
| Agent registrations | Agent name, operator, contact address, declared use | Identify calls, apply limits, enforce the terms | Legitimate interests |
| Payment details | Billing name and address, payment status, and a card saved to unlock evaluation credit. Card details are held by our payment processor, not by GWIX | Sell credits, invoice, keep tax records | Contract; legal obligation |
| Service usage | API keys used, IP address, timestamps, endpoints and parameters called, credits charged, errors | Run, bill, secure and support the Service; quality control (section 3) | Legitimate interests |
| Ask GWIX questions and answers | The questions you type, the conversation and the answers produced | Answer questions, fix errors, check the quality of answers | Legitimate interests |
| Website and contact form | Name, email, company, message; pages visited | Reply to you, follow up on trials, run the website | Legitimate interests; consent where the law requires it |
We follow up with people who start a trial, about their trial and GWIX. You can opt out of marketing email at any time; we will still send messages needed to run your account.
3. Customers’ usage and purchase records
We keep records of how customers use the Service (calls made, parameters, credits charged, Ask GWIX activity) and what they buy. We use them to run, bill, secure and support the Service, and for quality control: finding errors, checking data coverage and planning improvements. We do not sell these records, we do not include them in GWIX Data products, and we do not use them to train AI models.
4. Data from data partners
GWIX licenses data from data partners to build its products. At launch these are mainly job advertisements and related reference data. Job advertisements can contain incidental personal data, such as a recruiter’s name or contact details. We do not use that information in our products, and we do not sell it.
We build statistics so that no individual can be identified. We publish figures only for groups above minimum sizes, suppress or flag small samples, and review the risk of identification as our products and query options change.
5. Who we share information with
| Recipient | What they receive | Why |
|---|---|---|
| Service providers | Only what each needs: hosting and storage (Amazon Web Services), sign-in (WorkOS), payments (Stripe), Ask GWIX answers (Anthropic, our AI model provider), CRM and email (HubSpot, Resend) | Run the Service on our behalf, under contracts that limit their use of the data |
| Buyers of GWIX statistics | Aggregated statistics only | Our products |
| Data partners | Aggregated reports on how their data contributes, and revenue shares | Partner agreements; never other partners’ or customers’ data |
| Authorities and advisors | What the law requires | Legal obligations, protecting rights and safety |
| A buyer or successor of GWIX | The data covered by this policy | A merger, financing or sale, under the same commitments |
We do not sell personal data, and we do not share it for cross-context behavioral advertising. To produce Ask GWIX answers, we send the questions, the conversation so far and the GWIX Data retrieved for them to our AI model provider. Under its commercial terms, it does not use them to train its models.
6. International transfers, retention and security
Where data is held. The Service runs in the United States. When we transfer personal data from the EU, we use the European Commission’s standard contractual clauses; from the UK, the UK International Data Transfer Agreement or Addendum; from Switzerland, the standard contractual clauses with the Swiss adaptations. We apply the same safeguards to onward transfers.
How long we keep it.
| Data | Kept for |
|---|---|
| Account and agent records | While the account is open, then 2 years |
| Verification documents | Deleted within 90 days of the verification decision; we keep the result |
| Payment and tax records | As long as tax and accounting law requires, generally 7 years |
| Detailed API call logs (parameters) | Up to 90 days |
| Security logs | Up to 13 months |
| Ask GWIX questions and answers | Up to 90 days; our AI model provider keeps its copies only as its commercial terms allow |
| Raw data-partner records | Only as long as needed to build our products, and never longer than the partner agreement allows |
| Aggregated statistics | Indefinitely, provided they continue to meet our standard for preventing identification |
| Backups | Overwritten on a regular cycle; deleted data is not restored to active use |
Security. We encrypt data in transit and at rest, limit access to staff and systems that need it and review that access, keep keys and secrets in managed vaults, and log and alert on unusual activity. No system is perfectly secure; we will notify you and regulators of a breach as the law requires.
7. Your rights
Depending on where you live, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct it;
- delete it;
- restrict or stop using it, or object to uses based on our legitimate interests;
- move your data to another service where the law gives that right;
- withdraw consent where we rely on it.
How to ask. Use the privacy request form at gwix.ai/privacy or email info@gwix.ai. You do not need a GWIX account. We do not sell personal data, so there is nothing to opt out of; we still honor Global Privacy Control signals on gwix.ai.
Verification. We ask only for what we need to find your records and, for access, correction and deletion, to confirm it is you.
Authorized agents. Someone you authorize may make a request for you with your signed permission. We may confirm the request with you directly.
Timing. We confirm requests within 10 business days and respond within 45 days. If the law allows more time and we need it, we will tell you why.
If we decline. We will explain why. You can appeal by replying to our decision, and we will answer within the time the law sets. You can also complain to your data protection authority or state attorney general. We will not treat you differently for using these rights.
8. Cookies, children, changes and contact
- Cookies. gwix.ai and the console use cookies needed to sign you in and keep the site secure. We use analytics cookies only with your consent where the law requires it. We do not use advertising cookies.
- Children. The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect children’s data.
- Changes. We will post updates here with a new date, and tell account holders by email about material changes before they take effect.
- Contact. Global Wholesale Intelligence Exchange Corp., info@gwix.ai.
Make a privacy request
You do not need a GWIX account. We ask only for what we need to find your records and reply to you. You can also email info@gwix.ai.