Privacy Policy

What We Collect

We collect information you provide directly: your email address when subscribing, and payment details when purchasing Pro (processed by Stripe -- we never see your card number).

What We Don't Collect

• We don't track you across other websites
• We don't sell or share your personal data
• We don't use advertising trackers or cookies
• We use Plausible Analytics (privacy-friendly, no cookies, GDPR-compliant)

How We Store and Protect Data

Your data is stored in Supabase (hosted on AWS, SOC 2 compliant). Payment data is handled entirely by Stripe (PCI DSS Level 1). We use HTTPS everywhere. Access to user data is restricted to the minimum number of systems and people required to operate the service.

Who We Share Data With

We do not sell, rent, or share your personal information with anyone else.

Your Rights

• Access: You can request a copy of your data at any time
• Deletion: You can request deletion of your account and data
• Unsubscribe: Every email includes a one-click unsubscribe link
• Export: You can request your data in a portable format

To exercise any of these rights, email hello@waypointsai.com.

Cookies

We use only essential cookies for authentication (session tokens). No tracking cookies, no advertising cookies. Plausible Analytics runs entirely without cookies.

Children's Privacy

WaypointsAI is not intended for children under 13. We do not knowingly collect data from children.

Changes

We may update this policy occasionally. We'll notify subscribers via email for material changes. Continued use after changes means you accept the updated policy.

Contact

Questions? Email hello@waypointsai.com.