This Privacy Policy explains how WAVYLON ("we", "us", "the Service") collects, uses, and protects your information when you use our AI career coaching platform at wavylon.com and app.wavylon.com. By using the Service, you agree to the practices described here.
1. Information We Collect
We collect the following categories of information:
Account information: your name, email address, and authentication data when you sign up (including via Google Sign-In).
Profile and career data: information you provide about your role, skills, experience, salary, goals, and career history, including any resumes, screenshots, documents, or links you upload or share with the AI coach.
Conversation data: the messages you exchange with the AI coach, which we store to maintain your coaching history and memory.
Usage and analytics data: pages visited, features used, session activity, device and browser information, approximate location (derived from IP), and interaction events, collected through analytics tools including PostHog. On our marketing pages (wavylon.com) we also record session replays — page views, clicks and scrolling — to understand how visitors use the site and improve it; text you type into fields is masked and not recorded, and session replays are not recorded inside the coaching app.
Free question on our website: if you use the free question on wavylon.com without an account, your question is sent to our AI provider (Anthropic) to generate the answer. We do not store the text of your question; we keep only a one-way hash of your IP address, a timestamp and the cost for rate limiting and abuse prevention. If you then sign up, your question is kept for up to 7 days in a cookie in your own browser so your coach can pick it up.
Payment information: handled entirely by our payment processor, Stripe. We do not store your full card details on our servers.
2. How We Use Your Information
To provide, personalize, and improve the AI coaching experience.
To generate career guidance, which involves sending your relevant data to our AI provider (Anthropic) to produce responses.
To maintain your profile, progress, memory, and conversation history.
To process subscriptions and payments through Stripe.
To analyze usage, diagnose issues, and improve the product.
To communicate with you about your account, subscription, trial, and billing.
3. Third-Party Services
We share data with trusted service providers strictly to operate the Service:
Anthropic — processes your messages and uploaded content to generate AI responses. See Anthropic's privacy practices at anthropic.com/legal/privacy.
Supabase — stores your account, profile, conversations, and uploaded files in private, access-controlled storage.
Stripe — processes payments and subscriptions.
PostHog — provides product analytics and session insights.
Google Ads — measures the performance of our advertising (for example, whether a visit from an ad led to a trial sign-up) using cookies and similar technologies on our websites.
Vercel — hosts the application.
We do not sell your personal information for money. However, using advertising cookies to measure ad performance may be considered "sharing" of personal information under California law. You can opt out at any time (see "Your Privacy Choices" below).
4. AI Processing Notice
WAVYLON is an AI-powered product. Content you share with the coach — including text, images, and documents — is transmitted to our AI provider to generate responses. Do not share information you consider highly sensitive (such as government ID numbers, financial account numbers, or health records) in the chat.
5. Data Retention
We retain your account and conversation data for as long as your account is active. You can delete your account and associated data at any time from within the app (Menu → Delete account), or by contacting us (see Section 9). Deletion removes your profile, conversations, uploaded files and usage records and cancels your subscription; payment records required for tax and accounting are retained by Stripe. Uploaded files are stored privately and are accessible only to your account.
6. Your Rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Residents of California (under the CCPA) and the EU/UK (under the GDPR) have specific rights, including the right to know what data we hold and to request its deletion. To exercise any of these rights, contact us at the email in Section 9.
7. Data Security
We use industry-standard measures to protect your data, including encrypted connections and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Children
The Service is not intended for individuals under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
9. Contact
For any privacy questions, data requests, or deletion requests, contact us at: aptelyx@gmail.com
10. Your Privacy Choices — Do Not Sell or Share My Personal Information
You can opt out of the use of advertising cookies on wavylon.com and app.wavylon.com. We also honor the Global Privacy Control (GPC) signal sent by your browser as a valid opt-out.
Opt out on this browser:
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the revised policy.