The organisers of the group you join decide who is in their network and why, and act as the data controller for that network. wishola provides the platform that stores and processes the data on their behalf (the “solution provider”). You consent to both when you submit your details.

When you sign in with Google, we receive your email address and basic Google profile information (name and avatar). We use the email to identify your account; we do not use your Google name or photo in your public profile.

When you fill in your profile / the group’s form, we store:

• Public fields (visible to other active members of your group): your alias, role, company, what you do, what you need, and how you can help.
• Private fields (visible only to you, and to a member after you both accept a connection): your real name, phone / WhatsApp number, contact email, and any social/LinkedIn link you provide.
• Your consent and the time you gave it.

To power search and recommendations we generate mathematical representations (embeddings) of your “what I do / need / offer” text. We also keep operational records: group membership, connection requests and responses, saved searches, and security/audit logs (who did what, and when).

We process your data on the basis of your consent (given at sign-up) and our and the organisers’ legitimate interest in running a functioning networking community. The purpose is to let members find each other and make warm introductions. We do not sell your data or use it for advertising.

Your public fields are visible to other active members of the same group. Your private contact details are never shown until you and another member mutually accept a connection — only then are they exchanged. Refused or pending requests do not reveal your contact details. Group administrators can see member profiles in their own group for moderation.

We rely on a small number of providers to run the service, who process data on our behalf:

• Supabase — database, authentication, and hosting.
• Vercel — application hosting.
• Google — sign-in, and (for organisers) Google Forms used to collect submissions.
• Resend — sending transactional emails (e.g. welcome, moderation).

Some of our providers are US-based, so your data may be processed outside the EEA/UK. Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Profiles have a validity period and expire unless re-confirmed; pending connection requests expire automatically. You can ask us to delete your profile at any time (see your rights below).

Data is encrypted in transit (TLS) and at rest. Access is enforced at the database level by row-level security so members can only see what they are permitted to. We keep audit logs of sensitive actions.

We use only essential cookies needed to keep you signed in and remember which network you are viewing. We do not use advertising or third-party tracking cookies.

Under the GDPR (and equivalent laws) you have the right to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent at any time. To exercise any of these, contact us at contact@wishola.com. You also have the right to complain to your local data protection authority.

wishola is not intended for people under 16. We do not knowingly collect data from children.

We may update this policy; we will change the “last updated” date above and, for material changes, notify members.

Questions about this policy or your data: contact@wishola.com.