Privacy

The form

If you fill in the audit form I store what you typed (name, email, phone, what eats your week, your questions) with the page you sent it from, the campaign or referring link that brought you, your country, your IP address and your browser's user-agent string. It goes into a Cloudflare D1 database and I get a notification. I use it to reply to you and to prepare the call. It is never sold, rented, or added to a marketing list.

The form is checked for bots by Cloudflare Turnstile, under its privacy addendum.

The newsletter

If you sign up for new posts by email I store your address, the page you signed up on, the exact words next to the button, your IP address and your browser's user-agent, as proof you asked. Nothing goes out until you click the link in my confirm email. After that you get one email per post, sent from portal@wrenautomation.com. Every email has a one-click unsubscribe and a link to a page where you can pause, get fewer, or stop everything. I keep the record of your yes and your unsubscribe so I can show I only mailed people who asked.

Page views

Each page view writes one row: the page, how far down it you scrolled, how long it was visible, whether you clicked through to the form or touched a field, your viewport width, your country, the referring link and your user-agent. No IP address. It also notes a few clicks: the buttons that lead to the form or a booking, starting or sending the form, and how much of a video you watched. And for heatmaps, which part of the page each click lands on and how far down you got, never what you type. Heatmaps only show them as totals per page.

If you say yes to the cookie, I may also record your visit to the page (where you scroll and click, and what shows on screen) and watch it back to fix the site. Anything you type into a field is masked, and recordings are deleted after 90 days. Sometimes I ask one short question in a box at the bottom of the page. That only happens if you said yes, and your answer is kept with your visits so I can see what brought you here.

If an email from me had a link, the link carries a short code (?r=) so I know which email brought you. Links I post on social profiles and videos go through /go/ and are tagged with the channel. I use this only to see which outreach works. Your country comes from Cloudflare, which reads it from your connection; no cookie holds it. Cloudflare Web Analytics may also be on; it is cookieless and gives me counts, not people.

Cookies

This site sets two cookies of its own and none from anyone else.

• wv: a random id so your visits to this site join up, and a form you send later is tied to the link that first brought you. It lasts up to 400 days, is never shared, and no ad or tracking company sees it. It is optional.
• wc: your answer on the cookie banner, yes or no, for six months, so I don't ask again. It is needed for the site to respect your choice.

In the EU, the UK, Switzerland, Brazil and Quebec, wv is set only after you say yes on the banner. Elsewhere it is on unless you say no. A browser that sends Global Privacy Control is treated as a no everywhere. You can change your answer any time with "Cookie settings" at the bottom of every page; a no deletes wv.

Your browser also keeps a few settings on your device that never leave it. It remembers the light or dark theme. For the current tab only, it keeps the link you arrived from and where you were on the page.

Other services load only when you use them. Cloudflare Turnstile checks the form for bots. If you book a call, the booking page is my own. Your name, email and the time go into my Google Calendar, and Google sends the invite with the Meet link. Fonts come from Google Fonts and Fontshare, which see your IP address when they send them.

Email I send you

I email firms who haven't asked, which is what cold outreach is. Addresses come from public sources: a company's own website and public business listings. Those messages can carry a one-pixel image that tells me the message was opened, and they carry an unsubscribe link. Unsubscribe, or reply with "stop", and the address is suppressed: I will not email it again. Reply once and you are in an ordinary conversation, nothing more.

Text messages

If you tick the texts box on the form, I store your phone number, that you ticked it, and when. I text you only about your request: replies, scheduling, reminders. Up to 4 texts a month. Reply STOP and you get no more texts; reply HELP for help. Full terms are on the terms page.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text opt-in data and consent are never shared with any third party. The only company that sees your number is Telnyx, the carrier that delivers the texts.

Client work

When I build for a client I handle their data under the agreement we sign, only for that build, and it stays in their systems. Nothing from a client's data ever comes into this site.

The Wren app and the accounts you connect

Clients use the Wren app at app.wrenautomation.com. In it, a client can connect its own Facebook Page, Instagram business account, LinkedIn profile or company page, YouTube channel, X account, TikTok account and Google Business Profile. You sign in on the platform's own page, and it shows you what you are allowing.

For each connected account the app keeps its id, name and handle, the permissions you allowed, and an access token. Tokens are encrypted in a separate key store. It also keeps what it reads from the account: your posts and their numbers (views, likes, comments, followers), comments, messages, and Business Profile reviews.

The app uses this only to do what you ask of it. It publishes the posts you approve, brings comments, messages and reviews into your inbox, sends the replies you approve, and shows the numbers in your reports. None of it is sold, used for advertising, or used by me to train AI models. When the app suggests a reply, the message it answers is sent to an AI model to write the suggestion, and nothing goes out until you approve it. Anything that came from Google (YouTube, Business Profile, Gmail) goes only to a model whose provider doesn't train on it.

A client can also connect its own mailbox, Gmail or Microsoft 365. With send access the app sends the replies you approve from that mailbox, in the customer's thread. With read access it also brings new mail into your inbox and sorts it by your rules. A Gmail mailbox is read only when your Workspace admin trusts the app. For each email the app keeps the sender, the subject, a short summary and the replies sent, not the full message. The mailbox's token sits in the same encrypted key store.

Google: the app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

YouTube: the app uses YouTube API Services. Connecting a YouTube channel means you agree to the YouTube Terms of Service, and the Google Privacy Policy covers what Google does with your data. You can remove the app's access any time at security.google.com/settings/security/permissions.

To disconnect an account, go to Account, then Social (or Mail for a mailbox), and press Disconnect. The token is deleted right away. You can also remove Wren in the platform's own settings. To have everything the app read from an account deleted, follow the steps on the data deletion page.

Who else sees it

Cloudflare hosts the site and the database. Google Workspace carries my email. Resend and Discord deliver the notification when the form is submitted. Telnyx delivers texts. Amazon Web Services stores the visit recordings and runs the Wren app. AI model providers (Google, OpenRouter and Cohere) write the app's suggested replies from the text they are given. Each of them sees the data it needs to do that and nothing else. No advertising networks, no data brokers.

Keeping and deleting

Form submissions are kept while there's a reason to: a live conversation, a build, the records a business has to keep. Page-view rows are kept as counts. Email william@wrenautomation.com and I will tell you what I hold about you, correct it, or delete it. No form, no account, no wait: one email to a person who reads it.

Changes

If this changes, the date at the top changes with it.