1. Information we collect
Depending on how you use WeGateOn, we may collect:
- Account information: name, email address, organization name (if provided), account-verification status, and authentication-related records.
- Workspace content: engineering-change records, workflow decisions, comments, monitoring information, and other content you choose to enter.
- Audit information: records of actions and governance events associated with authenticated users.
- Technical and security information: information needed to operate and protect the service, such as session data and information processed by security services to detect automated or abusive activity.
- Communications: information you send when contacting WeGateOn or requesting information about a pilot.
Passwords are not stored in plain text. WeGateOn stores password-derived values used for authentication.
2. How we use information
We use information to provide and maintain the platform; create and authenticate accounts; verify email addresses; operate engineering-change workflows; preserve lifecycle and audit records; communicate about accounts or requested services; troubleshoot problems; protect the platform from abuse; and improve the service and its usability.
Workspace content is not represented as external field-validation evidence merely because it is entered into WeGateOn. Any research use requiring additional representations, publication, or identifiable disclosure should be addressed separately and transparently.
3. Cookies and similar technologies
WeGateOn uses a secure session cookie to keep authenticated users signed in. The current session cookie is configured as HttpOnly, Secure, and SameSite=Lax and normally expires after seven days. Third-party infrastructure or security providers may use their own necessary technologies as part of delivering their services.
4. Service providers
WeGateOn relies on service providers to operate parts of the platform. These currently include Cloudflare for hosting, database infrastructure, content delivery, and Turnstile bot protection; Resend for transactional email; and Google Fonts for web typography. These providers may process technical or delivery information under their own terms and privacy practices.
5. Disclosure of information
We do not state that personal information is sold. Information may be disclosed to service providers as necessary to operate the platform; when required by applicable law or a valid legal process; to protect the security, rights, or integrity of WeGateOn and its users; or in connection with a legitimate organizational restructuring or transfer, subject to applicable requirements.
6. Data location and cross-border processing
WeGateOn uses third-party cloud services. Information may therefore be processed or stored outside your province, state, or country, including in jurisdictions where service providers maintain infrastructure. Laws applicable to information may differ across jurisdictions.
7. Retention
We retain account, workspace, session, and audit information for as long as reasonably necessary to provide the service, maintain security and governance records, meet legitimate operational or legal needs, or resolve disputes. Retention periods may differ by data type. We may delete or anonymize information when it is no longer reasonably required.
8. Security
We use technical and organizational safeguards intended to protect information, including authenticated sessions, password hashing, email verification, bot protection, and access controls. No online system can guarantee absolute security, and users should not submit information that they are not authorized to provide.
9. Your choices and privacy requests
Depending on applicable law and your circumstances, you may have rights concerning access, correction, or deletion of personal information. You may also contact us about your account or privacy questions. Some information may need to be retained where required for security, legal, or legitimate recordkeeping purposes.
10. Organizational and confidential information
Users are responsible for ensuring that they are authorized to enter organizational, operational, technical, or other information into WeGateOn. Do not upload trade secrets, regulated data, export-controlled information, personal information about others, or other sensitive material unless your organization has determined that use of the platform is appropriate and authorized.
11. Changes to this policy
We may update this Privacy Policy as the platform evolves. Material changes will be reflected by an updated effective date or version on this page. Where required, additional notice or consent may be provided.
12. Contact
For privacy questions or requests, contact lmenezes@wegateon.com.