Short version: You own your data. We use it only to run the service. We don't sell it. You can access, export, or delete it at any time.
This Privacy Policy describes how Wavefront AI LLC ("Wavefront," "we," "us," or "our") collects, uses, and protects information from:
| Category | What it includes | Who it's from |
|---|---|---|
| Account info | Name, email address, hashed password, account type, subscription status | Property owners |
| Property details | Property name, address, WiFi credentials, check-in instructions, house rules, local recommendations | Property owners |
| Guest messages | Questions and AI responses in guest chat sessions, identified by an anonymous session ID stored in the guest's browser | Guests |
| Photos | Turnover photos uploaded by cleaners, annotated feedback photos | Cleaners, owners |
| Usage analytics | Pages visited, features used, timing of interactions (via anonymous visitor ID stored in localStorage) | All users |
| Support data | Bug reports, feedback submissions, screenshots you provide when contacting support | Property owners |
| Device & browser info | Browser type, operating system, page URL — collected automatically when you use the service | All users |
We use your data to:
We do not use your data for advertising. We do not build profiles for ad targeting.
Wavefront uses minimal tracking:
We don't use third-party ad trackers, Facebook Pixel, or behavioral retargeting cookies.
We share data with third parties only as needed to operate the service:
| Service | Purpose | Data shared |
|---|---|---|
| AI providers via Polsia proxy |
Generate AI responses to guest messages | Guest messages + property details you've configured |
| Twilio | SMS notifications to property owners | Your phone number (if provided), notification text |
| Cloudflare R2 via Polsia proxy |
Store uploaded photos | Photo files uploaded through the platform |
| Email delivery via Polsia proxy |
Send transactional emails | Your email address, email content |
| Stripe | Process subscription payments | Payment method details (handled directly by Stripe — we never see card numbers) |
| Render / Neon | Host the application and database | All application data (infrastructure provider under data processing agreements) |
We do not sell your data to any third party. Ever.
We retain your data as long as your account is active. Specifically:
If you close your account, we'll delete your personal data within 30 days. Some data may be retained longer if required by law or to resolve disputes.
You have the following rights over your data, regardless of where you're located:
To exercise any of these rights, email us at support@wavefront.ai. We'll respond within 30 days.
If you're a California resident, you have additional rights under the California Consumer Privacy Act:
To submit a request, email support@wavefront.ai with the subject line "CCPA Request."
If you're in the European Economic Area or United Kingdom, we process your data under the following legal bases:
You have rights to access, rectify, erase, restrict processing, and data portability. To exercise these rights or lodge a complaint, contact support@wavefront.ai.
We take data security seriously:
No system is 100% secure. If you discover a security vulnerability, please report it to support@wavefront.ai rather than disclosing it publicly.
Wavefront is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we'll delete it promptly.
We may update this Privacy Policy periodically. When we make material changes, we'll notify you by email and update the "Last updated" date above. Continued use of Wavefront after changes take effect constitutes acceptance of the updated policy.
Questions, requests, or concerns about this Privacy Policy:
For data deletion or export requests, include "Data Request" in the subject line. We'll respond within 30 days.