Privacy Policy

Last updated: January 1, 2025

1. Who We Are

Waypoint Terminal operates this Platform. References to "we," "us," or "our" refer to Waypoint Terminal. If you have privacy questions, contact us at privacy@waypointterminal.com.

2. Information We Collect

Account Information

• Email address (required for account creation and login)
• Password (stored in hashed, encrypted form — we never see your plaintext password)
• Name or display name (if provided)
• Subscription plan and billing history

Usage and Activity Data

• Analytical sessions, scans, and outputs generated within the Platform
• Decision journal entries you create
• Feature usage patterns and interaction data
• Session timestamps and duration

Technical Data

• IP address and approximate geolocation (country/region level)
• Browser type and version
• Device type and operating system
• Cookies and session tokens for authentication
• Error logs and performance data

Payment Data

Payment processing is handled by third-party providers (e.g., Stripe). We do not store full credit card numbers or payment instrument details on our systems. We retain billing records such as transaction IDs, plan type, and payment timestamps.

3. How We Use Your Information

Purpose	Legal Basis
Account authentication and security	Contract performance
Delivering Platform features and functionality	Contract performance
Processing subscription payments	Contract performance
Sending transactional emails (receipts, password resets)	Contract performance
Product improvement and analytics	Legitimate interest
Customer support	Legitimate interest
Legal compliance and fraud prevention	Legal obligation
Marketing communications (with opt-in)	Consent

4. Data Storage and Infrastructure

User account data, session data, and analytical records are stored using Supabase, a secure cloud database infrastructure built on PostgreSQL. Data is encrypted at rest and in transit. Supabase operates under industry-standard security controls.

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. However, no system is completely secure, and we cannot guarantee absolute security.

5. Third-Party Service Providers

We share data with a limited set of third-party providers strictly necessary to operate the Platform:

• Supabase — database, authentication, and storage infrastructure
• Stripe — payment processing
• Analytics providers — aggregated, anonymized usage analytics
• Market data providers — financial data feeds (no personal data shared)

We do not sell, rent, or trade your personal information to any third party. We do not permit third-party advertising on the Platform.

6. Cookies

We use cookies and similar tracking technologies for:

• Session authentication (required for login functionality)
• User preference storage
• Analytics and performance monitoring

You may disable cookies through your browser settings, but this may affect Platform functionality, particularly authentication.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — request your data in a structured, machine-readable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interest
• Opt-out — unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at privacy@waypointterminal.com. We will respond within 30 days.

Note: Deleting your account will remove personal information but may not immediately remove all analytical session logs from backup systems, which are purged on a rolling schedule.

8. Data Retention

We retain account data for the duration of your subscription and for up to 2 years after account closure for legal and audit purposes. Anonymized usage analytics may be retained indefinitely. You may request earlier deletion at any time.

9. International Users

The Platform is operated from the United States. If you access the Platform from outside the US, your data may be transferred to and processed in the US, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to this transfer. We make reasonable efforts to comply with applicable international privacy requirements including GDPR principles for EU users and CCPA provisions for California residents.

10. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, contact us immediately for removal.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

12. Contact

Privacy inquiries: privacy@waypointterminal.com