Privacy policy

Who operates this service

Adwave Digital Inc operates this Waveform service. Its postal address and privacy contact are listed below. This policy applies to the service’s website, accounts, page creation tools, and enabled hosting, forms, billing, and integration features.

A customer who publishes a page or collects a form submission may decide how that information is used. Their own privacy notice and instructions also apply. Contact that customer about their use of your submission; contact the operator below about this service’s handling of it.

Information we handle

• Account and workspace details you provide, such as your name, email, memberships, invitations, and sign-in/security settings.
• Briefs, supplied URLs and source material, authorized branding, design choices, generated pages, revisions, assets, and review results needed to perform your requests.
• Form definitions, submissions, delivery destinations, and delivery history when you use managed forms.
• Plan, payment-reference, invoice, credit, authorization, and usage records when paid services are enabled. Payment details entered with a payment provider are handled through that provider’s payment flow.
• Service and security records such as request times, network addresses, session activity, failures, and support correspondence.

Do not include passwords, API keys, payment-card details, or other unnecessary sensitive information in a brief or support message. Only provide content and personal information you have authority to use.

Why we use it

We use information to provide the features you request, maintain accounts and workspace permissions, create and review pages, publish authorized versions, process form receipt and delivery, administer paid services, respond to support requests, and protect the service from abuse. We also keep records needed for legal obligations and resolving disputes.

Where data-protection law requires a legal basis, processing may be necessary to provide the service under an agreement, meet a legal obligation, protect legitimate service/security interests, or follow consent for an optional use. You can withdraw consent for a consent-based use without changing the lawfulness of earlier processing.

We process the briefs, URLs, references and other content you provide to create, check, revise and deliver the work you request. Relevant content is sent to the AI and website-research providers listed below. Authorized personnel may access information for support, troubleshooting, security and service administration. Provider processing is governed by the applicable service arrangements; this notice does not promise that every provider request has zero retention. Publishing a page makes its published content available to visitors.

Who may receive information

Authorized workspace members receive information according to their role. Content you explicitly publish becomes publicly accessible, and people may retain copies outside this service. Form information sent to a destination you configure is then handled by that destination as well.

Service providers process information needed for their assigned functions. The reviewed provider list below identifies their purposes and privacy information. Information may also be disclosed when required by law or to protect rights and investigate abuse; any transfer of the service must respect applicable data obligations.

Processing locations and transfers

Adwave Digital Inc is based in Maryland, United States. Waveform's application and database infrastructure is configured in Fly.io's Northern Virginia region. Object storage, network delivery and other service providers may process information in additional locations; this is not a promise that all information remains in one region or country.

Using Waveform can involve transferring information to the United States and other countries where the listed providers operate. Their locations and applicable data-protection rules may differ from those where you live. Contact privacy@adwave.com for questions about processing locations or the arrangements applicable to your information.

Cookies and measurement

Account sessions use cookies so the service can recognize an authorized browser. Disabling necessary session cookies can prevent sign-in and account features from working.

Waveform uses session and security cookies and browser storage for sign-in, safe return destinations, text drafts and recovery of submitted requests or checkout. Drafts and recovery data may remain in the browser until cleared or the browser session ends. The current Waveform application does not include third-party advertising pixels or a browser analytics SDK. We use operational and aggregate service records to understand reliability and service usage. Network, security and payment providers may use their own necessary cookies when their services are used.

Retention and deletion

We retain information for the service purposes and legal obligations described here. The deployment’s retention schedule is listed below. Account deletion revokes access and records a deletion request for private workspaces; it does not mean that every backup or required financial record disappears immediately.

Before deleting an account that is the only owner of a shared workspace, assign another owner. Shared workspace information may remain available to the people who continue to operate that workspace. Cancelling a subscription is different from deleting an account.

Protecting your account

Access controls separate workspace data, and sensitive account changes require identity checks. Protect your password and integration keys, enable two-step verification, and revoke access you no longer need. No service can promise that every security risk is eliminated.

Your choices and requests

Depending on the law that applies, you may request access, correction, deletion, or an export of personal information, object to or restrict certain processing, withdraw relevant consent, and complain to a data-protection authority. Use the privacy contact below. We may need to verify your identity and understand the affected workspace before acting.

The service is intended for people who can lawfully enter an agreement to use it, and is not designed for children. Contact the privacy channel if you believe a child has provided personal information through an account.

Changes to this policy

The effective date identifies the published version. If practices change, the operator will update this notice and provide any notice or choice required by applicable law. New wording does not authorize a use that would otherwise require your consent.

Data retention schedule

Service-provider disclosures

• Fly.io

  Application and worker hosting, managed PostgreSQL database storage, infrastructure operations and recovery. This supports account, workspace, page, form and service records.

  Privacy information
• Tigris

  Private object storage for uploaded references, generated assets, page files and related service artifacts.

  Privacy information
• OpenAI

  AI processing of relevant briefs, reference material and requested changes to create and review designs and website content.

  Privacy information
• Firecrawl

  Retrieving and processing website information relevant to a submitted URL or requested page research.

  Privacy information
• Resend

  Delivery of account verification, password recovery and workspace invitation emails, including recipient addresses and delivery information.

  Privacy information
• Stripe

  Checkout, recurring subscriptions, payment management, invoices, refunds and payment-status records. Card information entered in Stripe's payment flow is handled by Stripe.

  Privacy information
• Cloudflare

  DNS, network delivery, certificates, custom-domain routing and security services. Network requests can include IP addresses, hostnames and request information.

  Privacy information