Last updated: 21 September 2026.
Widrow is a product of A3REV Software, ABN 32 556 307 251, Golden Beach, Queensland, Australia. It runs on the Digital Employee Framework. The platform’s control plane is operated at defho.ai, and its Privacy Policy of 9 March 2026 governs the platform itself. This statement sets out, for Widrow customers and the people who use it, what we collect, what we do with it, where it is kept, for how long, and what you can ask of us.
What we collect
- Account information. Name and display name, email address, company name and site address, country and timezone if you give them, and your password, stored only as an Argon2id hash. We never hold a plaintext password.
- Usage data. IP address and request metadata; browser, device and operating system; pages visited, features used and timestamps; API usage and performance metrics; error logs and diagnostics.
- Conversation and business data. The content of conversations between people and your Digital Employees, the tools they invoked and the results, files you upload for processing, the Company Knowledge you connect for retrieval, and what an assistant remembers about a person, under the settings you choose.
- Billing. Payment is handled by Stripe or PayPal. We never store card numbers or payment credentials. We keep invoice history, subscription status and usage amounts.
What we use it for
To provide and operate the platform; to run your Digital Employees’ conversations and tool actions; to manage accounts, sign-in and access; to bill you and issue invoices; to send service, security and administrative messages; to monitor health, performance and security; to investigate and prevent fraud, abuse and security incidents; to meet legal obligations; and to improve the platform using aggregated, anonymised data only.
The AI providers, and whose account they run on
Your Digital Employees run on AI provider accounts you hold, not ours: you choose the provider for each slot and bring the key. Today that is Anthropic or OpenAI for the model that thinks and writes (OpenAI directly, or through your own Microsoft Azure OpenAI resource), Tavily or Brave for web research, and OpenAI or Google for images and voice. Conversation content goes to the provider you chose, for inference only, under that provider’s commercial API terms; Anthropic’s and OpenAI’s commercial terms exclude the use of your data for model training. Each provider retains data under its own policy, published on its own site. Nothing you give Widrow is used to train anyone’s model, ours included.
Where it is stored, and how it is protected
On Microsoft Azure in the Australia East region (Sydney). Encryption in transit (TLS 1.2 or later) and at rest (AES-256); Argon2id password hashing; short-lived signed sign-in tokens; role-based access with strict isolation between tenancies; signed service-to-service calls; secrets held in Azure Key Vault; automated database backups with point-in-time recovery; and a correlation ID on every request, so that any action can be traced.
Who it is shared with
We do not sell personal data. It is shared only with: the AI providers you chose, for inference; Stripe or PayPal, for payment; Microsoft Azure, which hosts and processes it; the law, where a court order, statute or regulation requires it, or to protect rights, safety or property; and your Widrow partner, who can see your tenancy’s configuration and usage because that is how the platform is set up and supported.
How long we keep it
- Account data: while your account is active, and for thirty days after it ends.
- Conversation data: for as long as your settings say; you can delete conversation history yourself.
- Usage and billing records: for as long as tax and accounting law requires, typically seven years.
- Audit logs: twelve months, for security and compliance.
When you leave
Cancelling starts a thirty-day countdown with emailed reminders, and you can reactivate at any point inside it. When it ends, everything of yours on the platform is permanently deleted: both search indexes, every file in your tenancy’s storage and every database record keyed to your business. Only your invoices and the audit trail remain, for the period tax law requires. Your Company Knowledge was always a one-way synced copy of sources you own; the originals are never touched.
Your rights
You can ask us for a copy of the personal data we hold about you; to correct it; to delete it, subject to the retention the law requires; to export it in a machine-readable form; to restrict how it is processed; or to object to processing based on our legitimate interests. Write to hello@widrow.ai. We respond within thirty days. Two of these you can do yourself, without asking: every person can see and delete what an assistant remembers about them, and a tenant administrator can export or erase everything held for a person in one click.
Australian law
We are an Australian business and comply with the Privacy Act 1988 and the Australian Privacy Principles in how we collect, use, disclose and store personal information. If you believe we have breached the Principles, you may complain to the Office of the Australian Information Commissioner (OAIC).
Where data travels
Your data is stored in Australia. It leaves Australia when your chosen AI provider processes it: Anthropic processes in the United States, and OpenAI in US-based regions. Other providers you connect process under their own terms and in their own regions. These transfers happen under your agreement with the provider and ours with our infrastructure suppliers.
Cookies and tracking
This website sets no tracking cookies and runs no analytics that follow you across sites. The platform itself keeps a sign-in token and your partner context in your browser’s local storage, because it cannot work without them, and uses server-side performance monitoring that does not track individuals. There are no advertising pixels and no third-party tracking cookies anywhere.
Children
Widrow is not directed at anyone under eighteen and we do not knowingly collect their information. If we learn that we have, we delete it promptly.
Changes
When this statement changes materially we publish the new version here with a new date. Continued use after that date is acceptance of it.
Contact
A3REV Software · Privacy Officer · hello@widrow.ai · Golden Beach, Queensland, Australia