Draft for review · Last updated 15 November 2026
Privacy Policy
Waypoint holds two kinds of personal information: details about you as a user, and the details you keep about your clients. Here is what we do with each.
What we collect about you
- Account details: your name, email address, password (stored only as a secure hash) and, if you turn it on, your two-factor authenticator.
- Workspace settings: your workspace name, timezone, currency, field names and preferences.
- Activity in the app: a history of changes in your workspace (who changed what, and when), kept so your team can trust its records.
What you keep about your clients
The leads, people, companies, notes and tasks you add are your data. We process them on your behalf only to provide Waypoint — we don’t sell them, use them for advertising, or look at them except to keep the service running or when you ask for help.
Where it’s stored
Waypoint runs on Supabase (database and sign-in) hosted in [Singapore], and the website and app are served by Cloudflare. Emails such as invitations and password resets are sent through [Brevo]. These providers process data for us under their own security and privacy commitments.
How it’s protected
- Every workspace is walled off from every other one inside the database itself.
- Every change is checked on the server; optional two-factor login protects your account.
- Data is encrypted in transit, and backups are encrypted.
Cookies
The app keeps you signed in using storage in your browser. We don’t use advertising or tracking cookies. [Add any analytics you introduce here.]
How long we keep it
We keep your data while your account is active. Deleting your account erases workspaces you own alone, removes your sign-in, and, where teammates’ records still mention you, replaces your name with “Former member”. Backups that contain deleted data expire on our normal schedule of [period].
Your rights
You can see, correct and export your data in the app, and delete your account in Settings → Profile. For anything else — including requests from people whose details are stored in a Waypoint workspace — contact [privacy email]. You may also complain to your data protection authority (in the Philippines, the National Privacy Commission).
Changes
If we change this policy, we’ll update the date above and tell you about significant changes before they take effect.