VWO Engage
VWO Engage (formerly PushCrew) is a web push notification platform from Wingify, the Indian software company behind VWO. It lets sites send browser push notifications to subscribed visitors with segmentation, triggers and campaigns. For European publishers, VWO Engage involves cross border data transfers to India and explicit consent through the browser push permission prompt, plus appropriate disclosure under GDPR and ePrivacy.
What does VWO Engage do?
What is VWO Engage
VWO Engage, formerly known as PushCrew, is the web push notification product from Wingify Software Private Limited, an Indian company headquartered in New Delhi and best known for the VWO Testing and Insights platform. VWO Engage lets sites collect push subscriptions via the browser Push API and send targeted notifications to subscribers, with segmentation, automation flows and behavioural triggers. The platform is positioned for publishers, e-commerce sites and content marketers.
Data and cookies collected
VWO Engage captures the browser push subscription (endpoint URL plus public keys), visitor IP, browser, country, OS, language, URLs visited, time on site and any tags or segmentation attributes pushed by the customer. Push deliveries and clicks generate engagement events. The Service Worker required by the Push API runs in the browser and registers on the customer domain.
GDPR and ePrivacy implications
VWO Engage is a data processor under Art. 28 GDPR for push subscriptions and a controller for its own platform telemetry. The browser push prompt is the technical consent moment, but it must be preceded by a layered notice explaining what notifications cover and how to unsubscribe. Web push is direct marketing under Art. 13 ePrivacy and requires prior consent in B2C. The Push API subscription is a unique identifier triggering Art. 5(3) ePrivacy.
Consent requirements
Explicit consent is required for the push subscription itself (granted via the browser permission prompt) and for any behavioural tracking that builds a profile. A double layer prompt (custom in page CTA explaining the value, then browser prompt) is recommended to comply with GDPR validity criteria. An unsubscribe link or in browser revocation must always be available.
Data transfers outside the EEA
Wingify is an Indian company and India has no GDPR adequacy decision. Transfers rely on SCCs and a TIA that accounts for the DPDPA 2023 and the Indian Telegraph Act allowing lawful access by authorities. Some Wingify plans use AWS EU infrastructure for hosted data, but the controller remains an Indian entity.
Practical compliance steps
Sign Wingify's Data Processing Agreement and SCCs, complete a Transfer Impact Assessment for India, request the EU AWS region when available, use a double prompt for push consent with an explicit value proposition, document VWO Engage in your sub processor list, provide a clear unsubscribe in every notification, and rotate or expire inactive push subscriptions.
VWO Engage and the GDPR
VWO Engage is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) for web push notification subscription (Art. 13 ePrivacy direct marketing) and any non-essential tracking cookies; the browser native permission prompt is the consent moment for push, but the publisher must still provide context and a way to withdraw
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law), DPDPA 2023 (India), PECR (UK)
Impact assessment (DPIA)
VWO Engage processes browser push subscription IDs (endpoint URL plus keys), visitor IP, browser, country, page URLs, segmentation attributes and engagement events (deliveries, clicks). Key DPIA considerations: (1) the browser push subscription is itself a unique device identifier and triggers Art. 5(3) ePrivacy; (2) push notifications fall under Art. 13 ePrivacy direct marketing rules and require prior consent in B2C; (3) Wingify is in India with no adequacy decision, SCCs and a TIA are required; (4) segmentation can build a behavioural profile that should be disclosed; (5) the browser permission prompt is the moment of consent but cannot be the only disclosure, a layered notice is needed; (6) integrations with VWO Testing share user IDs between products.
Sample text for your banner
With your consent and your browser's permission, we use VWO Engage by Wingify to send you web push notifications about new content, offers and updates. VWO Engage processes your browser push subscription, IP and engagement events in the United States, the European Union and India. Transfers to India rely on Standard Contractual Clauses.
What VWO Engage sets and contacts
- Tracking method
- Web push notification platform (formerly PushCrew); browser Push API subscription with service worker; first-party cookies for subscriber tracking; behavioural triggers based on browsing
- Server location
- Wingify Software Private Limited is headquartered in New Delhi, India, with AWS infrastructure in India, the United States and the European Union depending on customer plan
- Cookieless mode available
- Yes
- Data transferred outside the EU
- Wingify, operator of VWO Engage, is incorporated in New Delhi, India. India has no GDPR adequacy decision, so transfers from EU customers require Standard Contractual Clauses under Art. 46(2)(c) GDPR and a Transfer Impact Assessment that accounts for the Digital Personal Data Protection Act 2023 and the Indian Telegraph Act. Wingify also operates AWS infrastructure in EU regions for some plans.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| vwo_eng_subscriber | Marketing | 1 year | Stores the VWO Engage subscriber identifier used to associate a browser push subscription with engagement events. |
| vwo_eng_prompt | Functional | 30 days | Tracks whether the visitor has seen or dismissed the push opt in prompt to avoid showing it repeatedly. |
| vwo_eng_segments | Marketing | 6 months | Stores segmentation attributes used to target push notifications to specific subscriber groups. |
Third-party domains contacted (5)
vwo.comengage.vwo.compushcrew.comcdn.pushcrew.comwingify.com
Frequently asked questions about VWO Engage
Can't find your question? Write to us, we answer fast.
Does VWO Engage set cookies?
VWO Engage relies primarily on the browser Push API and a Service Worker rather than cookies. The Push subscription endpoint and public keys are identifiers stored by the browser. Some auxiliary first party cookies (vwo_eng_*) may be set for analytics about the prompt and segmentation.
Do I need consent to send web push notifications via VWO Engage?
Yes. Web push is direct marketing under Art. 13 ePrivacy and the browser permission prompt alone is not enough. Use a double prompt: an in page CTA explaining the value of notifications, then the browser native prompt. Always provide a clear way to unsubscribe.
What is the legal basis for processing data via VWO Engage?
Consent (Art. 6(1)(a) GDPR) for the push subscription and for any tracking cookies. The browser push prompt is the technical mechanism but the controller must demonstrate freely given, informed and specific consent. Contract is not sufficient unless push notifications are part of the contracted service the user signed up for.
Where does VWO Engage process and store data?
Wingify is an Indian company. Default processing happens on AWS in India and the United States. EU customers can request the AWS EU region for some plans. Transfers to India rely on Standard Contractual Clauses and a Transfer Impact Assessment that accounts for the DPDPA 2023.
Is a DPIA required for VWO Engage?
A DPIA is recommended when web push is used at scale, when segmentation builds detailed behavioural profiles or when data is transferred to India. The DPIA should cover the consent UX, retention of subscriptions and engagement events, and the SCC framework for India.
How do I deploy VWO Engage compliantly?
Sign Wingify's DPA and SCCs, run a TIA, request the EU AWS region when available, design a double prompt with clear value proposition, document VWO Engage as a sub processor, provide a one click unsubscribe in every notification and expire inactive subscriptions after a defined period.
What are GDPR friendly alternatives to VWO Engage?
EU based or EU friendly web push alternatives include PushPushGo (Poland), Notify Visitors (US/India), OneSignal (US, with EU options), Webpushr (US) and self hosted OpenSource alternatives such as Notiflow or Gotify. Selecting an EU controller with EU data residency simplifies the transfer story.
How should I update my privacy policy for VWO Engage?
Disclose Wingify as a data processor based in India, describe the push subscription as an identifier processed for marketing communication, document the categories of behavioural data captured, name AWS EU and India as sub processor locations, mention SCCs and the DPDPA 2023 context, and link Wingify's privacy notice and DPA.
BowNow
BowNow is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. BowNow provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, BowNow helps deliver the right message to the right audience at the right time.
Fomo
Fomo is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Fomo provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Fomo helps deliver the right message to the right audience at the right time.
Sierra Interactive
Sierra Interactive is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Sierra Interactive enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Sierra Interactive empowers marketing teams to achieve measurable growth.
CiviCRM plugins
CiviCRM plugins is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. CiviCRM plugins supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, CiviCRM plugins remains a leading web development choice.
Growave
Growave is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Growave provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Growave helps deliver the right message to the right audience at the right time.
Justuno App
Justuno App is a conversion rate optimization (CRO) platform that helps businesses increase the percentage of website visitors who take desired actions. It combines A/B testing, user behavior analysis, and personalization tools to identify and remove conversion barriers. Justuno App provides actionable insights through heatmaps, funnel analysis, and session recordings, enabling teams to implement data-driven improvements that boost revenue without increasing traffic costs.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.