Privacy

Your data, in plain words.

Wavis lets you lend your LinkedIn account to serious brands and get paid per result. That takes a few pieces of personal data. This page says which ones, why, who sees them and how you stay in control. No legal fog: if something is unclear, ask us.

Last updated : 14 October 2026

01Who is responsible

The service wavis.ai is published by Oratis Conseil (see the legal notice). Oratis is the data controller for the processing described here. You can reach us at hello@wavis.ai for anything about your data.

02What we collect

We only collect what the service needs. Concretely:

  • Your account: email address, first name, and a password (stored hashed by our authentication provider, never readable by us). If you sign in with Google, we receive the name, email address and profile picture Google shares with us.
  • How you arrived: the language you signed up in, the page that brought you (for example the students page) and, if someone invited you, their referral code.
  • Your LinkedIn account, once connected: the public information of your profile (name, headline, location, photo, number of connections, premium status), the connection status of the account, and the events of that connection (connected, paused, disconnected).
  • Activity run from your account: which campaigns used it, the messages sent, the invitations and replies received, the results counted, and daily counters that keep the pace normal. This is what lets us pay you and keep your account safe.
  • Your earnings and rewards: points credited, gift cards redeemed, and the referral link between you and the people you invited.
  • The emails we send you (welcome, reminders, account emails) and whether they were delivered.
  • Technical data: IP address, browser, dates and times of requests, in server logs used for security.

03What we never do

  • Your LinkedIn password goes encrypted to our connection partner, which opens your session (two-factor included) and keeps it on its side. Wavis never stores it.
  • We never post, comment or change anything on your profile, and we never change your password.
  • We never sell your data, and we never share it with advertisers beyond aggregated results.
  • There is no advertising tracker or analytics script on wavis.ai.

04Why, and on what legal basis

  • To run the service you signed up for (performance of the contract): creating your account, connecting your LinkedIn, running the campaigns you accepted, counting results.
  • To pay you (performance of the contract, and our legal obligations on accounting): credits, gift cards, referral earnings.
  • To write to you about your account (performance of the contract): confirmation, password reset, security notices. And to remind you to connect your LinkedIn after you signed up (our legitimate interest in helping you finish the setup): a few emails over two weeks, with an unsubscribe link in each one.
  • To keep your account and the network safe (our legitimate interest): pacing, anomaly detection, fraud prevention, server logs.
  • To meet our legal obligations: requests from authorities, record keeping.

05Who sees your data

Advertisers see the results of their campaigns in aggregate. They never see your credentials, and they never choose your account by name.

The people contacted from your account see your public LinkedIn profile, as anyone on LinkedIn does. Messages are flagged as a sponsored partner offer and are never signed with your name.

A few providers process data on our behalf, under contracts that bind them to our instructions:

  • Supabase (Ireland): database and authentication.
  • Google Cloud (Belgium, europe-west1): our API and the workers that run the service.
  • Vercel (servers in Dublin, Ireland): the website.
  • Resend: sending our emails.
  • Our connection partner: the secure connection to your LinkedIn account.
  • Google: sign-in with Google, only if you choose it.

Your data stays in the European Union, except for providers based elsewhere, which are bound by the standard contractual clauses of the European Commission.

06How long we keep it

  • Your account and your activity: as long as your account exists, then 30 days to let you change your mind.
  • Earnings, payouts and the records that go with them: as long as the law requires for accounting (ten years in France).
  • Server logs: 30 days.
  • Emails we sent you and their status: 12 months.

07Your rights

You can access your data, correct it, have it deleted, receive a copy, object to a processing or ask to restrict it. Write to hello@wavis.ai from the address of your account: we answer within a month.

You can remove Wavis from your LinkedIn account at any time from your space (My LinkedIn): access is revoked immediately. To delete your account entirely, write to us.

You can stop our emails with the link at the bottom of each one; account emails (confirmation, password) still reach you.

If you think we are not handling your data properly, you can complain to the CNIL (cnil.fr), the French data protection authority.

08Cookies

wavis.ai uses only the cookies the service needs, and nothing for advertising:

  • Session cookies that keep you signed in (set by our authentication provider).
  • NEXT_LOCALE: the language you chose, for a year.
  • wavis_ref: the referral code of the person who invited you, for 30 days, so that the link is kept if you sign up later.

You can block cookies in your browser; the service then cannot keep you signed in.

09Security

Everything travels over TLS. Access to your data is limited to the people who run the service, with named accounts. Your LinkedIn session is held by our partner, never stored on our servers. If a breach ever affected your data, we would tell you and the authorities as the law requires.

10Changes

We update this page when the service changes. The date at the top says when. For a change that matters to you, we also tell you by email.