Privacy Policy
Effective August 23, 2026. This page describes our practices as of that date.
The short version: your transcripts and diagrams belong to you. We store them so you can come back to them, we send them to the processors listed below to make the product work, we never use them to train an AI model, we never sell them, and when you delete a flow its transcript, diagram, and version history are deleted with it.
What we collect
Account information
Your email address and a password (stored in hashed form by our authentication provider), or your Google account email if you sign in with Google. We use this to run your account and to send transactional email such as verification codes.
Your content
The transcripts you paste or dictate, the files you upload for extraction, and the diagrams Wavelength builds from them. Uploaded files (PDF, DOCX, and text formats) are extracted in your browser; the extracted text is what reaches our servers. When you use voice dictation, the audio clip is sent to our speech-to-text processor to be transcribed and is not stored by us.
Payment information
Payments are processed by Stripe. Your card number never touches our servers. We store your Stripe customer and subscription identifiers and your subscription status so we know which plan you are on.
Usage information
We use Google Analytics to understand how visitors use the site, and our hosting platform records standard technical logs (such as pages viewed). See the analytics section below for how to opt out.
How we use it
- To provide the service: generating, storing, editing, exporting, and sharing your flows.
- To bill you, if you are on a paid plan.
- To respond when you contact us or send feedback.
- To understand aggregate usage of the site and improve it.
What we never do
We do not use your transcripts, audio, or diagrams to train, fine-tune, or evaluate any machine learning model. We do not sell your data or share it with anyone except the processors below, and only so they can deliver the service. Wavelength does not join, dial into, or record your meetings; it hears only what you dictate into your own microphone or paste as text.
Who processes your data
| Sub-processor | What it does | What it sees |
|---|---|---|
| Base44 | Application hosting, authentication, and transactional email | Account details, application traffic |
| Supabase | Database and backend functions | Your flows, transcripts, and account records |
| Groq | AI structuring and speech-to-text | Transcript text and dictation audio while a request is processed. Per Groq's published policy, it does not retain inference inputs or outputs by default. |
| Stripe | Payment processing | Payment details, billing email |
| Google Analytics | Site usage analytics | Visit and usage data, not your flow content |
| Microsoft Clarity | Session replays and heatmaps to improve usability | Anonymized interaction data (clicks, scrolls, pages), not your flow content |
How long we keep it
Your flows and their transcripts are stored until you delete them. Deleting a flow permanently deletes its transcript, diagram, version history, and collaborator records. Deleting your account removes your flows and profile; ask us via the contact page and we will confirm when it is done. Billing records are retained as required for tax and accounting purposes.
Sharing and published flows
Flows are private to you by default. If you invite collaborators, they can see and edit that flow. If you publish a flow to the web, anyone with the link can view that page until you unpublish it, so publish only what you are comfortable sharing. Unpublishing removes public access.
Analytics and cookies
We use Google Analytics and Microsoft Clarity, which set cookies to distinguish visitors and, in Clarity's case, capture anonymized interaction data such as clicks and scrolls so we can see where the product is confusing. You can opt out with the Google Analytics opt-out browser add-on or by blocking analytics cookies in your browser. The application itself uses browser storage only for things like your dictation shortcut preference.
Your rights
Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these, use the contact page. We will respond to every request; we do not discriminate against you for making one.
A note for people mapping other people's calls
If you paste a transcript of a conversation with other participants, you are responsible for having the right to do so under the laws and agreements that apply to you. Wavelength stores that transcript on your account, under the retention rules above, and nowhere else.
Children
Wavelength is a business tool and is not directed to children under 16. We do not knowingly collect data from them.
Changes
If we change this policy, we will update this page and the effective date at the top. Meaningful changes to how we handle your content will be called out on this page rather than made silently.
Contact
Questions about any of this, or a privacy request: wavelengthflow.com/contact.