Wild Ducks Privacy Policy
​
Effective date: October 28, 2025
Last updated: October 28, 2025
​
1. Introduction
Wild Ducks Inc. ("Wild Ducks," "we," "us," or "our") is a U.S.-based technology company providing multi-tenant and managed-instance software platforms for forecasting, sourcing, and optimization.
We respect and protect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you interact with our websites, products, and services.
We periodically update this Policy to reflect changes in practices, regulatory requirements, or services.
2. Contact & Data Protection Officer
Wild Ducks Inc.
3112 Windsor Road #141
Austin, TX 78703
United States
Data Protection Officer
Katy Heath
Email: kheath@wildducks.io
​
3. Information We Collect and How We Use It
We collect limited business contact and usage information, including:
-
Name, job title, and company
-
Work email address and phone number (if provided)
-
Account identifiers, log data, and security activity
We may also collect browser type, IP address, device information, and usage metrics to ensure system security and improve user experience.
​
We process data to:
​
-
Deliver and support our services
-
Communicate with customers and users
-
Maintain security, compliance, and service integrity
-
Improve forecasting models using de-identified or aggregated data
​
-
Wild Ducks does not sell personal information.
​
4. Cookies and Tracking
Our websites use essential cookies for platform functionality and limited analytics cookies to understand usage patterns. You can manage preferences or opt out through our Cookie Notice.
​
5. Sharing Information with Third Parties
​
We share personal data only with:
-
Trusted service providers (e.g., Google Cloud Platform, GitHub, Atlassian) who host or support our infrastructure
-
Auditors, regulators, or legal authorities where required
-
Subprocessors performing storage, analytics, or communications functions , see https://wildducks.io/subprocessors (placeholder)
All third parties are contractually bound to confidentiality, security, and SOC 2–aligned data protection standards.
6. International Data Transfers. Wild Ducks processes data primarily in the United States. Where applicable, we rely on:
​
-
Standard Contractual Clauses (SCCs) for EU/UK transfers
-
Appropriate safeguards for other jurisdictions
​
-
All transfers are protected by encryption and access controls.
​
7. Your Rights Depending on your jurisdiction, you may have rights to:
​
-
Access and obtain a copy of your personal data
-
Correct or delete inaccurate information
-
Restrict or object to certain processing
-
Request portability of your data
Submit any request to kheath@wildducks.io. We respond within 30 days where required by law.
8. Security
Wild Ducks employs administrative, technical, and physical safeguards to protect personal data, including:
​
-
Encryption in transit and at rest
-
Role-based access control and multi-factor authentication
-
Continuous monitoring, vulnerability management, and audit logging
These controls are reviewed and tested as part of our SOC 2 Type II program.
​
9. Data Retention
​
We retain data for as long as necessary to:
​
-
Maintain active accounts and fulfill contractual obligations
-
Comply with legal, audit, and backup requirements
-
Support security investigations and operational continuity
Upon verified deletion requests, data is securely removed from active systems and scheduled for deletion from backups in accordance with our retention policy.
​
10. Children’s Data
​
Our services are intended for business use and not directed to individuals under 16 years of age. We do not knowingly collect or store information from children.
​
11. Questions or Complaints
​
For any privacy-related questions, concerns, or complaints, please contact our
Data Protection Officer at: Katy Heath , kheath@wildducks.io
EU and UK residents may also contact their local data protection authority regarding any unresolved concerns.