Privacy Policy
Last updated 28 October 2026
This policy explains what personal data Wayframer collects, what we do with it, who else handles it and the choices you have. "Wayframer", "we" and "us" mean the team that runs Wayframer. "You" means anyone who visits wayframer.com or uses the app.
If you have a question about this policy or a request about your data, email hello@wayframer.com.
What we collect
Your account
Your name, email address and password. We store the password only as a one-way hash, which cannot be turned back into the password. If you add them, we also keep your company, job title, phone number, bio, profile picture, time zone, language and display preferences, and how you heard about us.
Your work
Everything you create in Wayframer: endeavors, frameworks, matrices, notes, modules, comments, the files you upload and the documents you add to a knowledge base. To make knowledge base documents searchable, we also store them in short passages, each with a numerical index of its meaning.
Conversations with Huxley
What you write or say to Huxley, and Huxley's replies. Conversations are kept with your work so you can pick them up later. Huxley can also keep short notes about you and your work, so later replies can take them into account.
Billing details
If you pay for Wayframer, Stripe collects your card details. We keep your Stripe customer reference, the card's brand, last four digits and expiry date, your billing name and address, any VAT number, and your invoices. We never receive your full card number.
Records of use
We record sign-ins and important account events with the time, IP address and browser used. Each request the app makes to an AI provider is logged with the model, the amount of text processed and the cost, and the log leaves out what was written. Errors are reported to our monitoring tools so we can fix them.
Newsletter and messages
If you sign up for our newsletter: your email address, your name if you give it, and where you signed up. If you contact us or open a support ticket: what you send us.
Cookies
The cookies we use, including the one kind you can switch on or off, are listed in our Cookie Policy.
How we use it
To run the service. We use your account and your work to sign you in, store and sync what you make, let the people you invite work alongside you, and send the emails the service needs, such as address checks, password resets, invitations and notifications.
To answer you with Huxley. When you ask Huxley something, or use a feature that relies on AI, we send the parts of your work and the conversation the request needs to an AI provider, which returns the reply. Where the feature is switched on, Huxley may also comment after some edits without being asked. If Huxley searches the web for you, the search terms go to a search provider. If you use voice, your recording is turned into text by an AI provider, and spoken replies are generated the same way.
To bill you, if you pay, and to keep the records tax law requires.
To keep Wayframer secure and working. We use records of use and error reports to spot abuse, investigate problems and fix bugs.
To check changes to Huxley. While we test a change to how Huxley handles requests, we may keep the text of a conversation turn for up to 90 days, so our team can judge whether the change worked.
To keep in touch. When you create an account, we add your name, email address, company and how you heard about us to ActiveCampaign, our email tool, along with account events such as a change of plan. If you subscribe to the newsletter, we send you product news. You can stop marketing emails at any time with the unsubscribe link in the email, or by writing to us.
To understand how the public site is used, through Google Analytics, and only if you allow analytics cookies.
Our legal bases
Where data protection law such as the GDPR applies, we rely on these grounds:
Contract: running your account, your work, Huxley and billing.
Legitimate interests: keeping the service secure, fixing problems, improving Huxley and telling customers about Wayframer.
Consent: analytics cookies and the newsletter. You can withdraw it at any time.
Legal obligation: keeping financial records and answering lawful requests.
Who else handles your data
We use a small number of providers to run Wayframer, such as our hosting provider, our AI providers and our payment processor. Each one receives only what its job needs. The full list, with what each one receives, is on our Sub-processors page.
The people you share work with can see what you share with them. We also disclose data when the law requires it. We do not sell your personal data.
Where your data is processed
Several of our providers are based in the United States, so your data may be processed there as well as in the country you use Wayframer from.
How long we keep it
Your account and your work: for as long as your account is open.
Work you delete goes to Recently deleted, where you can restore it for 30 days. After that it is removed permanently.
When you delete your account, it is closed straight away and can no longer be used. Billing records are kept for as long as tax law requires. To have the rest of your data erased, email us and we will reply within 30 days.
Conversation text kept to check a change to Huxley: up to 90 days.
Newsletter details: until you unsubscribe.
Your rights
Depending on where you live, you can ask us to:
give you a copy of the personal data we hold about you
correct data that is wrong
erase your data
limit how we use it, or object to a use
send your data to you or another provider in a usable format
You can withdraw consent at any time. For cookies, use the Cookie settings link at the foot of our public pages. For anything else, email hello@wayframer.com. We may ask you to confirm who you are, and we will reply within 30 days. If you are unhappy with our answer, you can complain to your local data protection authority.
How we protect it
Connections to Wayframer are encrypted, passwords are hashed, and each organisation's data is kept apart from every other organisation's. Our Security page describes these measures and how to report a vulnerability.
Children
Wayframer is built for organisations and professionals, and is meant for people aged 16 and over.
Changes to this policy
When we change this policy, we will update it here and change the date at the top. If a change affects how we use data you have already given us, we will tell you by email or in the app before it takes effect.