Clear information. Thoughtful choices.
Trust starts with clarity.
What happens to your information, what is available now, and what needs to be agreed before a hosted business service.
Reviewed November 12, 2026 · Wishbest Business website
The browser card editor is available. The hosted delivery API is not activated. Wishbest Business is a product brand; contracting-entity details and business service agreements are not yet published.
01 / DATA HANDLING
A card in your browser.
A clear path for your data.
Creating a Business card
Client names, greeting text, signatures and selected logo files are processed in the browser. The current Business editor does not upload this content to Wishbest for rendering or send it to an AI service. Choosing Save draft keeps names, words, colors and your logo in this browser until you delete the draft or clear site data. Drafts do not sync to a Wishbest account or another device.
Downloading and sharing
The downloaded image contains the information you put on the card. You control where to save or share it. Your messaging service and recipients handle their copies; Wishbest cannot recall or delete those copies.
Visiting the website
Cloudflare hosts the site and processes technical connection and request information. The website also uses Cloudflare Web Analytics. Optional Google Analytics on applicable Wishbest pages requires a separate choice; card text and logo files are not included in those analytics.
Contacting us
If you email us, we receive the address and content you send to answer your request. Do not attach customer lists or sensitive information to a general inquiry. See the Privacy Policy for retention and rights information.
These statements describe the Business web editor. iPhone features and online group cards have separate data flows described in our Privacy Policy. Read the Privacy Policy.
02 / SECURITY
Practical safeguards.
A defined scope.
- HTTPS delivery. The public site is served over HTTPS. Card composition and image export happen in your browser.
- No recipient database needed. The current editor does not require importing an address book, customer list or CRM credentials.
- Controlled API testing. The local API preview has separate test and live modes, hashed API keys, per-business checks and duplicate-request protection. These are preview implementation controls, not a claim that a hosted enterprise service is available or audited.
Shared brand workspaces, SSO, team roles, customer-visible audit logs and a contractual uptime SLA are not available in the current release. No SOC 2 assurance report or ISO 27001 certification is claimed.
03 / GDPR & PROCUREMENT
Agree the details
before connecting client data.
GDPR obligations depend on the processing, the parties’ roles and the applicable law. This page is a factual product summary, not a GDPR certification or a substitute for a processing agreement.
Data Processing Agreement (DPA)
Not currently available for signature. Before hosted processing, identify the contracting parties, instructions, data categories, security obligations, subprocessors and assistance with individual rights.
Retention, deletion and incident response
Final operational and contractual commitments are not yet available. The API preview is designed for 90-day card-link expiry and content scrubbing; technical status and suppression hashes persist. A production retention schedule, deletion process and incident contacts still need to be finalized.
International processing
No EU-only storage commitment is offered. Identify actual processing locations and, where required, an appropriate transfer mechanism and assessment before hosted delivery. A provider’s policy alone does not establish a customer-specific transfer arrangement.
Business identity and service terms
Wishbest Business is currently presented as a product brand. Legal contracting identity, invoicing details, paid plan terms, service levels and any procurement assurances must be established before a business service is contracted.
Reference guidance: EDPB — controller and processor roles · European Commission — international transfer clauses.
04 / SERVICE PROVIDERS
Who is involved, and when.
Cloudflare
Current website hosting, protection and Web Analytics; technical request and usage information. The Privacy Policy explains this website flow.
Provider privacy policyGoogle Analytics
Optional analytics on applicable Wishbest pages after consent. No Business card text or uploaded logos are sent in analytics events.
Provider informationResend & Twilio
Email and SMS integrations in the API preview code. They are not activated as live Wishbest Business sending services. Provider scope, location and contractual terms need confirmation before activation.
This is a service overview, not a finalized contractual subprocessor schedule. Support-email handling and any future delivery providers also need to be included in the procurement data map.
05 / RESPONSIBLE SENDING
A thoughtful greeting
should be welcome.
Choose recipients deliberately, respect their preferences and make sure you have an appropriate basis and any required permission for the channel and purpose. A prior purchase does not automatically make every holiday greeting a transactional message.
- Use accurate sender details and only branding you have permission to use.
- Do not use purchased or scraped lists, or continue sending after a recipient opts out.
- For commercial email, assess applicable identification, postal-address and unsubscribe requirements. For SMS, confirm channel-specific consent and functioning opt-out handling before any live sending.
FTC — commercial email guidance · FCC — unwanted calls and texts. Requirements vary by location and use; review your specific workflow before launch.
06 / SUPPORT & REQUESTS
A clear place to ask.
For privacy, security, accessibility or business questions, contact support@wishbest.app. For data requests, describe the feature and the information you want us to locate. Please do not email passwords, API keys or a full customer list. We may need to verify the request; browser-only card drafts cannot be retrieved from our servers.
Business support is currently by email. No contracted response-time or availability guarantee is offered.