Privacy Policy

To run the Service, we collect:

• Account information: email, name, and avatar URL returned by your third-party sign-in provider. We do not receive your password.
• Usage data: queries you submit, attachments you upload, generated report content, and credit ledger entries.
• Payment data: subscription status, order ID, and billing cycle from a third-party payment processor. Full card details are held by that processor and never reach the Service.
• Technical data: IP address (used for security and rate limiting only), browser User-Agent, and access timestamps.

• card numbers, CVVs, or full payment credentials;
• location, contacts, photos, microphone, or any device data unrelated to the Service;
• profiles built from third-party advertising SDKs or tracking cookies;
• personal data sold or rented to any third party.

• Operate the core product: run agent queries, persist your conversations, debit credits;
• Improve the product through aggregate usage statistics (model selection, prompts, data sources);
• Billing and compliance: keep transaction records as required by law;
• Security: detect abuse, fraud, and anomalous traffic.

We will not use the data above for any other purpose without your explicit consent or a legal obligation to do so.

All data is stored on cloud infrastructure covered by industry compliance frameworks (SOC 2, ISO 27001, and similar). Account data is retained for the lifetime of your account. You can delete query history and reports at any time from settings. Billing records are retained for a minimum of 5 years per applicable tax law.

When you close your account, we delete all personal data within 30 days, except for financial records we are legally required to retain.

To deliver the Service, we share necessary data with the following categories of processors:

• Identity provider: handles sign-in and account verification (we only receive the profile fields you authorize).
• Payment processor: handles subscriptions, charges, and invoices.
• AI inference providers: receive your query text to generate reasoning output. Contracts with these providers prohibit using your data for model training.
• Email delivery: sends transactional emails (subscription notifications, security verification).
• Cloud infrastructure: edge CDN, security, and log aggregation.

A full sub-processor list is available on request from team@wakealpha.com. We do not share data with advertising networks, data brokers, or any third party unrelated to running the Service.

We use only necessary cookies and localStorage entries: session token (to keep you signed in), language and theme preferences, and a temporary draft cache for in-flight queries that survive an OAuth round-trip. We do not use tracking cookies and do not send behavioral data to third-party ad platforms.

You have the right to:

• access and export your query history and billing data;
• correct or delete personal information on your account;
• close your account, which triggers data deletion;
• object to your data being used in aggregate analysis (contact us to opt out).

To exercise any of the above, or to raise concerns about how we handle your data, email team@wakealpha.com. We respond to verified requests within the timeframes required by applicable law.

The Service runs on a globally distributed edge network, so your data may transit and be processed across borders. All transfers are encrypted with TLS, and we choose providers committed to GDPR and CCPA compliance.

The Service is intended for users 18 and older. We do not knowingly collect data from anyone under 18. If we learn that an account has been registered by a minor, we will close it.

This policy may be updated from time to time. Material changes will be announced in-product or via email to your registered address. Continued use of the Service after an update constitutes acceptance of the revised policy.

Privacy questions: team@wakealpha.com.