Privacy Policy

1. Introduction

Wavelify Inc ("Wavelify," "we," "us," or "our") operates the Wavelify platform (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We comply with applicable data protection laws, including the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) where applicable, and other relevant privacy regulations.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: Name, email address, password, company name, and contact details when you register
• Billing Information: Payment card details (processed securely by Stripe), billing address, and transaction history
• Business Data: Customer records, invoices, quotes, projects, expenses, timesheets, and other business information you enter into the Service
• Communications: Emails, chat messages, support requests, and feedback you send to us
• Profile Information: Profile photos, job titles, and other optional information you provide

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Server logs, error reports, timestamps of access
• Cookies and Tracking: Session cookies, authentication tokens, and analytics data

2.3 Information from Third Parties

• Payment Processors: Transaction confirmations and billing details from Stripe
• Authentication Providers: If you use SSO or social login
• Integration Partners: Data from services you connect to Wavelify

3. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Legal Basis
Provide and maintain the Service	Contract performance
Process payments and billing	Contract performance
Send service notifications and updates	Contract performance
Respond to support requests	Contract performance
Improve and develop new features	Legitimate interest
Detect and prevent fraud or abuse	Legitimate interest / Legal obligation
Comply with legal obligations	Legal obligation
Send marketing communications (with consent)	Consent

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the Service:

• Stripe: Payment processing
• Google Cloud Platform / Firebase: Cloud infrastructure and database
• Email Service Providers: Transactional and marketing emails
• Analytics Providers: Service improvement and analytics

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Security

We implement robust security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication
• Infrastructure: Hosted on secure, SOC 2 compliant cloud infrastructure
• Monitoring: 24/7 security monitoring and intrusion detection
• Regular Audits: Periodic security assessments and penetration testing
• Employee Training: Regular security awareness training for all staff

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure.

6. Data Retention

We retain your information for as long as:

• Your account remains active
• Needed to provide you with our services
• Required to comply with legal obligations
• Necessary to resolve disputes and enforce agreements

Upon account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

7. Your Privacy Rights

7.1 All Users

Regardless of your location, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Object to processing of your information
• Receive a copy of your data in a portable format

7.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, but you can opt-out of certain data sharing
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at privacy@wavelify.com.

7.3 European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to access, rectification, and erasure
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for the Service to function (authentication, security)
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Understand how you use the Service to improve it

You can control cookies through your browser settings. However, disabling essential cookies may affect the functionality of the Service.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers are located. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with all service providers
• Compliance with applicable data transfer mechanisms

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification for material changes

We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Wavelify Inc
5473 Blair Rd Ste 100
PMB 785849
Dallas, Texas 75231-4227
United States

Privacy Officer
Email: privacy@wavelify.com
General Inquiries: info@wavelify.com

For data access, deletion, or other privacy-related requests, please email privacy@wavelify.com with the subject line "Privacy Request."