Privacy Policy
Who is responsible (the controller)
The data controller for this website is Waild (waild.fi), the operator of this Site. You can reach us about anything in this policy at hello@waild.fi.
What we collect, and why
The waitlist (only if you join it). When you submit the waitlist form we store three things: your email address, the timestamp of your consent, and the referring website's origin (scheme, hostname and port), or “direct” when unavailable. New signups do not retain referrer paths, query strings or fragments; older records may contain the previous page URL. We use this data for exactly one purpose: sending you a single notification when the product launches. No newsletter, no drip campaign, no profiling, and we never sell or rent the data to anyone. The legal basis is your consent (GDPR Art. 6(1)(a)), which you may withdraw at any time.
Beta accounts. Google sign-in supplies your Google account identifier and verified email address. We store these with an account identifier and the country reported by Cloudflare, to provide access and enforce regional restrictions. We also keep session records, your BYOK or included-usage plan choice, the beta-terms version and acceptance time, owner decisions on BYOK and included-usage applications and custom one-time credit grants made by the owner (older approval audit entries may include former usage limits), any legacy invitation redemption, hashed connector credentials, usage totals and security audit records. Your Google password is never sent to Waild.
Cookies and service requests. Sign-in uses a short-lived security cookie and an essential session cookie lasting up to 24 hours. Signing out ends that session. The beta dashboard loads no analytics script. Plan choices are saved to your account so they remain after refresh. Search requests are processed by Cloudflare and DataForSEO to return results. Do not send sensitive personal information in searches or tool inputs. Separate AI clients, including Claude, handle conversations under their own privacy terms.
Connected Umami Cloud data. If you connect Umami Cloud, Waild stores your API key encrypted and the websites you allow. Your approved connected agents can request live reports for any of those allowed websites. Waild does not automatically store the reports or place them in a shared analytics cache. Evidence you explicitly save to a plan remains in your personal workspace.
Disconnecting Umami removes the key from the active connection and stops new analytics requests. Requests already running may finish. Disconnecting does not delete saved plan evidence, revoke the API key at Umami, or immediately erase historical backups. You can revoke the key in Umami separately. Reports delivered to an AI client are handled under that client's terms.
Connected Google Search Console data. Connecting this service is separate from signing in to Waild. Waild requests read-only access to discover properties and retrieve search queries, pages, clicks, impressions, click-through rates and average positions for reports you request. We use the selected Google account identifier and email to identify the connection and encrypt its stored authorization credentials. Requested reports are delivered to the agent you authorize. Waild does not automatically store reports, use Google data to train AI models, sell it or use it for advertising. Evidence you explicitly save remains in your personal workspace until deleted. Your chosen agent provider separately handles received reports under its terms and settings.
Disconnecting Google from Waild removes the active stored credentials and stops future Waild access. Requests already running may finish. Saved evidence and historical backups follow the retention rules below. The Google app permission can be removed separately in your Google Account; removing the data app there may affect its other Google data connections. Short-lived, encrypted connection attempts expire after ten minutes and are periodically cleaned up. Google API data use is subject to the Google API Services User Data Policy, including applicable Limited Use requirements.
Where it lives
Waitlist and account records are stored in Cloudflare D1. The Site itself is hosted on Cloudflare Pages; like any web host, Cloudflare processes connection data (such as IP addresses) transiently to serve and protect the Site. If we enable Cloudflare Turnstile bot protection on the form, Cloudflare processes the verification request — Turnstile is designed to work without tracking cookies.
Analytics without surveillance
We use Umami, a privacy-focused analytics tool, to count page views. Umami is cookieless, stores no personal data, does not track you across sites, and does not build profiles — which is why this Site shows no cookie consent banner: there is nothing to consent to. If the analytics script is not configured, nothing is loaded at all.
How long we keep it
Waitlist entries are kept until the launch notification has been sent and a reasonable period after, or until you ask us to delete yours — whichever comes first. Ask at hello@waild.fi and the entry is removed.
Beta account, acceptance and security records are retained during the beta and a short period afterwards for support, abuse investigation and access control. Expired sessions no longer authorize access. Account deletion is handled by the beta host on request; access is revoked and personal account information is removed, subject to records we must retain. No automated deletion schedule is currently promised.
Your rights under the GDPR
You have the right to access the data we hold about you, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time (withdrawal does not affect processing that happened before it). Exercise any of these by emailing hello@waild.fi. You also have the right to lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi), or the authority in your own EU country.
Changes to this policy
If our data practices change, we will update this page and its effective date before the change takes effect. We will not retroactively use waitlist emails for anything beyond the single launch notification you signed up for.