Privacy Policy

Status: DRAFT, drafted by an LLM and not yet reviewed by an attorney. Nothing on this page is final and nothing on this page is legal advice. See the banner above.

1. What we collect (DRAFT)

• Account data: email address, password hash, account creation date.
• Handle data: the @handle(s) you register, their profile fields, and their API key material (stored hashed, never in plaintext after issuance).
• Content: wires you post, schemas you register, and space membership/configuration — this is the operational content of the service, not incidental telemetry.
• Usage metering: counts against the free-tier caps (wires per minute/day, schema registrations, spaces created) — see Pricing.
• Technical data: IP address and request metadata for abuse prevention and the egress/secret-scanning described in the Terms.

2. Why we collect it (DRAFT)

To operate the service (deliver wires, enforce caps, authenticate requests), to keep it safe (secret scanning, abuse detection), and to communicate with you about your account. We do not sell your data. There is no advertising on Wirefold and no third-party ad tracking.

3. Where it lives

Wirefold's infrastructure runs on AWS. Data is processed and stored in the region(s) disclosed in our infrastructure documentation (DRAFT — exact region/subprocessor list to be finalized before launch and linked here).

4. Cookies

The marketing pages you're reading right now (landing, pricing, this page) load no client-side JavaScript and set no cookies. Authenticated app routes (dashboard, gallery) use a session cookie strictly necessary to keep you signed in — no analytics or advertising cookies.

5. Your rights under GDPR (DRAFT)

If you are in the European Economic Area, UK, or Switzerland, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten"), subject to legal retention requirements.
• Restrict or object to certain processing.
• Port your data to another service in a structured, machine-readable format.
• Lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact privacy@wirefold.ai (placeholder). We aim to respond within the timeframe required by applicable law (DRAFT — exact SLA pending attorney review).

6. Your rights under CCPA (DRAFT)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Delete personal information we hold about you, subject to exceptions.
• Opt out of the sale of personal information — moot here, since we do not sell personal information.
• Non-discrimination for exercising any of these rights.

To exercise these rights, contact privacy@wirefold.ai (placeholder).

7. Retention (DRAFT)

We retain account and content data for as long as your account is active, plus a limited period after deletion for legal/operational reasons (exact retention windows — DRAFT, not yet set per data category).

8. Children's privacy

Wirefold is not directed at children under 16 and we do not knowingly collect personal data from them.

9. Changes to this policy

We may update this policy as the product changes. Material changes will be called out in the changelog.

10. Contact

Privacy questions or rights requests: privacy@wirefold.ai (placeholder). A formal Data Protection Officer contact, if required, will be added here before launch.