Product Privacy Statement

Wild Ducks Privacy Policy

Effective date: October 28, 2025
Last updated: October 28, 2025

1. Introduction

Wild Ducks Inc. ("Wild Ducks," "we," "us," or "our") is a U.S.-based technology company providing multi-tenant and managed-instance software platforms for forecasting, sourcing, and optimization.

We respect and protect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you interact with our websites, products, and services.

We periodically update this Policy to reflect changes in practices, regulatory requirements, or services.

2. Contact & Data Protection Officer

Wild Ducks Inc.
3112 Windsor Road #141
Austin, TX 78703
United States

Data Protection Officer
Katy Heath
Email: kheath@wildducks.io

3. Information We Collect and How We Use It

We collect limited business contact and usage information, including:

Name, job title, and company
Work email address and phone number (if provided)
Account identifiers, log data, and security activity

We may also collect browser type, IP address, device information, and usage metrics to ensure system security and improve user experience.

We process data to:

Deliver and support our services
Communicate with customers and users
Maintain security, compliance, and service integrity
Improve forecasting models using de-identified or aggregated data

Wild Ducks does not sell personal information.

4. Cookies and Tracking

Our websites use essential cookies for platform functionality and limited analytics cookies to understand usage patterns. You can manage preferences or opt out through our Cookie Notice.

5. Sharing Information with Third Parties

We share personal data only with:

Trusted service providers (e.g., Google Cloud Platform, GitHub, Atlassian) who host or support our infrastructure
Auditors, regulators, or legal authorities where required
Subprocessors performing storage, analytics, or communications functions , see https://wildducks.io/subprocessors (placeholder)

All third parties are contractually bound to confidentiality, security, and SOC 2–aligned data protection standards.

6. International Data Transfers. Wild Ducks processes data primarily in the United States. Where applicable, we rely on:

Standard Contractual Clauses (SCCs) for EU/UK transfers
Appropriate safeguards for other jurisdictions

All transfers are protected by encryption and access controls.

7. Your Rights Depending on your jurisdiction, you may have rights to:

Access and obtain a copy of your personal data
Correct or delete inaccurate information
Restrict or object to certain processing
Request portability of your data

Submit any request to kheath@wildducks.io. We respond within 30 days where required by law.

8. Security

Wild Ducks employs administrative, technical, and physical safeguards to protect personal data, including:

Encryption in transit and at rest
Role-based access control and multi-factor authentication
Continuous monitoring, vulnerability management, and audit logging

These controls are reviewed and tested as part of our SOC 2 Type II program.

9. Data Retention

We retain data for as long as necessary to:

Maintain active accounts and fulfill contractual obligations
Comply with legal, audit, and backup requirements
Support security investigations and operational continuity

Upon verified deletion requests, data is securely removed from active systems and scheduled for deletion from backups in accordance with our retention policy.

10. Children’s Data

Our services are intended for business use and not directed to individuals under 16 years of age. We do not knowingly collect or store information from children.

11. Questions or Complaints

For any privacy-related questions, concerns, or complaints, please contact our

Data Protection Officer at: Katy Heath , kheath@wildducks.io

EU and UK residents may also contact their local data protection authority regarding any unresolved concerns.

‍