Privacy Policy
Last Updated: July 18, 2024
Data Controller
WaveAlign
Note on Children
Our Site is not intended for individuals under the age of 16, and we do not knowingly collect personal data from minors.
1. Introduction
Welcome to the WaveAlign landing page. We are committed to protecting your privacy and handling your personal data in a transparent and secure manner. This Privacy Policy describes how we collect, use, and share your personal data when you visit our website (the "Site").
Please read this policy carefully. By using our Site, you agree to the collection and use of information in accordance with this policy.
2. Data We Collect
We collect different types of personal data depending on how you interact with our Site:
Information You Provide:
- Email Address: When you sign up for our beta program through the provided form, we collect your email address.
- Marketing Consent: We record whether you have provided explicit consent to receive marketing communications.
Data Collected Automatically (using Cookies and Tracking Technologies):
- Usage Data: Information about how you access and use the Site, including your IP address, browser type, operating system, referring URLs, pages viewed, time spent on pages, and clicks.
- Identifiers: Unique identifiers assigned to your browser or device (such as cookie IDs, PostHog distinct IDs).
- Session Information: Details about your current browsing session (session ID).
- Server Logs: Our hosting provider automatically collects standard server logs, which may include your IP address, browser type, page requests, and timestamps.
3. How We Use Your Data (Purpose and Legal Basis)
We use your personal data for the following purposes and rely on the indicated legal bases:
- To Process Your Beta Signup:
- Purpose: To add you to our beta waiting list and manage your request to join the beta program.
- Legal Basis: Necessary to take steps at your request prior to entering a contract (e.g., providing access to the beta) or our Legitimate Interest in managing our beta program.
- To Send You Marketing Communications:
- Purpose: To inform you about the WaveAlign beta launch, provide updates on the beta version, and send you marketing information about the full version of WaveAlign and related news.
- Legal Basis: Your explicit Consent, obtained through the checkbox on the signup form. You have the right to withdraw this consent at any time (see Section 8).
- To Analyze Site Usage and Improve the Site:
- Purpose: To understand how visitors use our Site, measure traffic sources, analyze user flows, identify popular content, measure the effectiveness of our content and features (like the A/B test on feature sections), and identify areas for technical improvement. This includes using PostHog for analytics.
- Legal Basis: Your explicit Consent, obtained through the analytics consent banner. This processing only occurs if you click "Accept" on the banner. You have the right to withdraw this consent at any time (see Section 8).
- For Security and Troubleshooting:
- Purpose: To monitor for and prevent fraudulent or malicious activity, diagnose technical problems, and maintain the security and stability of the Site. This includes processing server logs.
- Legal Basis: Our Legitimate Interest in protecting our website and business operations.
- To Comply with Legal Obligations:
- Purpose: To comply with applicable laws, regulations, and legal processes (e.g., responding to lawful requests from authorities).
- Legal Basis: Compliance with a legal obligation.
4. How We Share Your Data (Third Parties)
We share your personal data with third-party service providers who perform services on our behalf. These third parties are obligated to protect your data and use it only for the purposes for which we disclose it to them.
- Brevo (Email Marketing Service): We share your email address and marketing consent status with Brevo to manage our email contact list and send you beta announcements and marketing communications if you have consented.
- PostHog (Analytics and A/B Testing): We share usage data, identifiers, and event information (including your email address if provided during signup, linked to your user ID) with PostHog to perform website analytics and A/B testing.
- Hosting Provider: Your data, including server logs (which may contain IP addresses), is processed and stored by our hosting provider as necessary to operate the Site.
We do not sell your personal data. We may also disclose your data if required by law or in response to valid requests by public authorities.
5. Cookies and Tracking Technologies
Our Site uses cookies and similar tracking technologies.
- Essential Cookies: These cookies are strictly necessary for the operation of the Site (e.g., remembering your consent preference). They do not collect personal data for marketing or analytics and are placed based on our legitimate interest in providing a functional website.
- Analytics Cookies: These cookies are used by PostHog to collect information about how you use the Site. These are only placed if you give your explicit consent via the consent banner.
Cookie Duration: Essential cookies typically expire at session end or after a few days. Analytics cookies may persist for up to 1–2 years unless deleted or consent is withdrawn.
You can manage your cookie preferences, including withdrawing consent for analytics cookies, as described in Sections 8 and 9.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Email Address and Consent: Retained as long as you remain subscribed to our mailing list or until you withdraw your consent, unless a longer retention period is required or permitted by law.
- Analytics Data: Stored according to the retention settings configured in our PostHog account. PostHog’s default retention periods apply unless otherwise specified.
7. Data Security
We have implemented appropriate technical and organizational security measures designed to protect your personal data from accidental loss and unauthorized access, use, alteration, and disclosure. However, no method of transmission over the Internet or method of electronic storage is 100% secure.
In the event of a personal data breach, we will notify affected individuals and regulators as required by law.
8. Your Data Protection Rights
Depending on your location and applicable laws (such as GDPR), you may have the following rights regarding your personal data:
- Right to Be Informed — Know what data we collect and how we use it.
- Right to Access — Request a copy of the personal data we hold about you.
- Right to Rectification — Ask us to correct inaccurate data.
- Right to Erasure — Request deletion of your data ("right to be forgotten").
- Right to Restrict Processing — Ask us to limit how we use your data.
- Right to Data Portability — Receive your data in a portable format.
- Right to Object — Object to processing based on legitimate interest or direct marketing.
- Right to Withdraw Consent — Withdraw consent for marketing or analytics at any time.
- Right to Lodge a Complaint — Contact a data protection authority if you believe your rights are violated.
9. How to Exercise Your Rights
To exercise your rights or withdraw consent, contact us (Section 12).
Withdraw Marketing Consent: You can typically withdraw your consent for marketing emails by clicking the "unsubscribe" link at the bottom of any marketing email you receive from us.
Withdraw Analytics Consent: You gave consent for analytics via the banner when you first visited. To withdraw or change this consent, you can . Clicking this link will clear your previous choice and re-trigger the cookie banner on your next visit.
10. International Data Transfers
Your personal data may be transferred outside your jurisdiction (e.g., to the US). These countries may have different levels of data protection than your own.
We rely on safeguards such as the EU Standard Contractual Clauses (SCCs) to protect your data when transferring from the EU/UK. You may request a copy of these clauses by contacting us.
11. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be published on this page with a revised "Last Updated" date. We encourage you to review this page regularly.
12. Contact Us
If you have questions about this policy or want to exercise your data rights, contact us:
Email: contact@wavealign.com