Privacy Notice

Quantforge Software, trading as Wayfinder, is the data controller for personal data processed through the Wayfinder service. This notice explains what we collect, why, who we share it with, and the rights you have.

1. Data we collect and why

• Account data — email address, name if provided, authentication identifiers (including Google sign-in identifiers) and password hashes held by our authentication provider. Used to create and secure your account. Legal basis: performance of our contract with you.
• Service content — waypoint prompts, keywords, pinned URLs, schedules, alert settings, webhook endpoints, and the findings and summaries generated for you. Used to deliver the monitoring you configure. Legal basis: contract.
• Usage and metering data — runs performed, model tokens consumed, AI Credit ledger entries, feature interactions and timestamps. Used to meter billing, enforce plan limits and improve the product. Legal basis: contract and our legitimate interest in operating a sustainable service.
• Technical data — IP address, device and browser identifiers, push notification tokens, and error and security logs. Used for delivery of notifications, security, abuse and fraud prevention. Legal basis: legitimate interests and legal obligation.
• Support and communications — messages you send us and our replies. Used to provide support. Legal basis: contract and legitimate interests.
• Marketing preferences — where you opt in to product emails. Legal basis: consent, withdrawable at any time.

Payment card details are never collected or stored by us. Web payments are handled by Paddle as Merchant of Record. Native mobile payments are collected by Google Play or Apple, while RevenueCat processes purchase and entitlement lifecycle information on our behalf.

1a. Feed personalization stored on your device

To make the Public Feed more relevant, Wayfinder keeps a small preference profile in your browser's local storage. It records only the public Waypoints you open, save or mark as not interested, plus numeric interest weights for the categories and tags attached to them. It contains no personal data, no free-text browsing history and nothing from other websites, and it is never shared with third parties.

Interest weights fade over time (halving roughly every three weeks) and the profile is capped in size, so old activity stops influencing your feed. When a request is made to rank your feed, only the derived weights and a short list of Waypoint identifiers are sent, and they are not stored on our servers while you are signed out. If you create an account, the profile is merged into your account preferences once and then cleared from your browser; existing preferences are never overwritten. Clearing your browser storage, or using the “Reset feed personalization” link in the footer, removes it entirely. Legal basis: our legitimate interest in providing a useful, relevant feed.

2. AI processing

Waypoint prompts and retrieved source material are sent to third-party large language model providers to produce summaries, relevance checks and scores. We do not sell your content, and we use model providers under terms that prohibit training on submitted content unless you have separately consented.

3. Who we share data with

• Service providers and subprocessors — cloud hosting and database, email delivery, push notification delivery, web search and crawling, AI model providers, and error monitoring, each processing data on our instructions.
• Paddle, our Merchant of Record, for the sale of the product, subscription management, payments, invoicing and tax compliance.
• Google Play, Apple and RevenueCat, where applicable, for native mobile purchases, subscription and entitlement management, restoration, refunds, fraud prevention and purchase reconciliation.
• Endpoints you configure — if you set up outbound webhooks, we transmit the relevant findings to the URL you specify; you control that destination.
• Professional advisers — legal, accounting and audit advisers where necessary.
• Authorities — where required by law or to establish, exercise or defend legal claims.

4. International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards, such as UK/EU Standard Contractual Clauses or an adequacy decision.

5. Retention

Account and service content is retained while your account is active. Findings and run history are retained according to your plan's retention window; webhook event logs are retained for 7 days. After account closure we delete or anonymise personal data within 90 days, except records we must keep for legal, tax or accounting purposes (typically up to 7 years) or to defend legal claims.

6. Your rights

Subject to applicable law you may request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests or withdraw consent at any time. Contact us via the in-app support channel; we respond within one month. If you are in the UK or EEA you may also complain to your local supervisory authority.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls scoped to your account, least-privilege service credentials, HMAC signing of outbound webhooks, and audit logging of administrative actions.

8. Cookies

We use strictly necessary cookies and local storage to keep you signed in and to remember interface preferences. We do not use advertising cookies. Any analytics we run is aggregated and privacy-preserving. You can clear or block cookies in your browser, though sign-in will not work without the essential ones.

9. Children

Wayfinder is not intended for children under 16 and we do not knowingly collect their data.

10. Changes and contact

We will post updates to this notice here and notify you of material changes. For any privacy question or request, contact Quantforge Software through the support channel in the app.

11. Getting your data removed

You can delete your Wayfinder account and associated personal data from the authenticated application at any time: open Account, choose Delete account, confirm your identity, and complete the permanent-deletion confirmation. If you cannot access your account, request deletion through the support channel. Account data is deleted or anonymised as described above, except for records we must retain for legal, tax or accounting purposes (typically up to 7 years) or to defend legal claims. Deleting Wayfinder does not cancel a subscription billed by Google Play, Apple or Paddle; cancel recurring billing with that provider.