Privacy Policy
Effective October 8, 2026. This page describes our practices as of that date.
The short version: your transcripts and diagrams belong to you. We store them so you can come back to them, we send them to the processors listed below to make the product work, we never use them to train an AI model, we never sell them, and when you delete a flow its transcript, diagram, and version history are deleted with it.
What we collect
Account information
Your email address and a password (stored in hashed form by our authentication provider), or your Google account email if you sign in with Google. We use this to run your account and to send transactional email such as verification codes.
Your content
The transcripts you paste or dictate, the files you upload for extraction, and the diagrams Wavelength builds from them. Uploaded files (PDF, DOCX, and text formats) are extracted in your browser; the extracted text is what reaches our servers. When you use voice dictation, the audio clip is sent to our speech-to-text processor to be transcribed and is not stored by us.
Payment information
Payments are processed by Stripe. Your card number never touches our servers. We store your Stripe customer and subscription identifiers and your subscription status so we know which plan you are on.
Usage information
We use Google Analytics to understand how visitors use the site, and our hosting platform records standard technical logs (such as pages viewed). See the analytics section below for how to opt out.
Google user data
This section describes the data Wavelength receives from Google APIs and how we use it.
- Google sign-in. If you sign in with Google, we receive your name, email address, and profile picture (scopes: openid, userinfo.email, userinfo.profile). We use them only to create and run your account.
- Google Drive. If you connect Google Drive, we request the drive.file scope. Wavelength can open only the files you select or the files Wavelength creates. We use this access only to import a file you choose and to save diagrams you export to Drive. We cannot see other files in your Drive.
- No AI imagery. Wavelength is a business tool that turns call transcripts and dictation into process flow diagrams. It does not make images, photos, or video of people, and it does not use Google APIs to make AI imagery.
- Storage. We store your Google account email and an encrypted Drive connection token in our database (Supabase, United States).
- No sale, no ads, no AI training. We do not sell Google user data. We do not share it, except with the processors listed below, to run the features you use. We do not use it for advertising. We do not use it to train or improve AI or machine learning models.
- Remove access. To remove access, disconnect Google Drive in Settings, or remove Wavelength at myaccount.google.com/permissions. When you delete your account, we delete your Google data.
Wavelength's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use it
- To provide the service: generating, storing, editing, exporting, and sharing your flows.
- To bill you, if you are on a paid plan.
- To respond when you contact us or send feedback.
- To understand aggregate usage of the site and improve it.
What we never do
We do not use your transcripts, audio, or diagrams to train, fine-tune, or evaluate any machine learning model. We do not sell your data or share it with anyone except the processors below, and only so they can deliver the service. Wavelength does not join, dial into, or record your meetings; it hears only what you dictate into your own microphone or paste as text.
Who processes your data
| Sub-processor | What it does | What it sees |
|---|---|---|
| Base44 | Application hosting, authentication, transactional email, and AI summaries of a flow (recap email, statement of work outline) | Account details, application traffic, and the flow content you ask it to summarize |
| Supabase | Database and backend functions | Your flows, transcripts, and account records |
| Groq | AI structuring and speech-to-text | Transcript text and dictation audio while a request is processed. Zero data retention is on for our Groq account, so Groq does not keep this data. |
| HubSpot | Only if you connect your own HubSpot account. Searching your deals and attaching a flow to a deal | Your deal names, and the flow summary and share link you choose to attach as a note on that deal |
| Stripe | Payment processing | Payment details, billing email |
| Google Analytics | Site usage analytics | Visit and usage data, not your flow content |
See the full list on our Subprocessors page.
How long we keep it
Your flows and their transcripts are stored until you delete them. Deleting a flow permanently deletes its transcript, diagram, version history, and collaborator records. To delete your account, open Settings in the app and select Delete account. This removes your flows, transcripts, profile, and connections. You can also ask us via the contact page and we will confirm when it is done. Billing records are retained as required for tax and accounting purposes.
Sharing and published flows
Flows are private to you by default. If you invite collaborators, they can see and edit that flow. If you publish a flow to the web, anyone with the link can view that page until you unpublish it, so publish only what you are comfortable sharing. Unpublishing removes public access.
AI assistant connectors
You can connect Wavelength to an AI assistant such as Claude, ChatGPT, or Muse through our connector at wavelengthflow.com/api/mcp. You sign in with OAuth, and each tool acts only as you, with your plan limits. The assistant can read, create, edit, share, and delete your flows only when you or the assistant calls a tool. Content that the assistant sends to Wavelength follows this policy. Content that Wavelength returns to the assistant follows the privacy terms of that assistant. To stop access, disconnect Wavelength in the assistant settings.
Analytics and cookies
We use Google Analytics, which sets cookies to distinguish visitors and understand where the product is confusing. You can opt out with the Google Analytics opt-out browser add-on or by blocking analytics cookies in your browser. The application itself uses browser storage only for things like your dictation shortcut preference.
Visitors in the EU, EEA, UK, and Switzerland see a choice before Google Analytics stores cookies. Google Analytics stores no analytics cookies for these visitors until they select Accept. To change your choice, clear this site's data in your browser and reload the page.
When you arrive from an ad or a tagged link, we save the ad click ID (for example gclid, fbclid, li_fat_id, or msclkid), the campaign tags (utm_source, utm_medium, utm_campaign), and the page you first landed on. We save them in your browser and, if you sign up, on your account. If you buy a plan, we also add them to your Stripe payment record. We use them only to measure which ads bring paying customers. For visitors in the EU, EEA, UK, and Switzerland, we save them only after you select Accept.
Your rights
Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these, use the contact page. We will respond to every request; we do not discriminate against you for making one.
Where your data is stored
Our database is in the United States. Base44 is part of Wix.com, which has its headquarters in Israel. Israel has an adequacy decision from the European Commission.
Requests from governments and other third parties
We disclose your data only when a valid legal process requires it, such as a subpoena, a court order, or a warrant. We review each request for legal validity and scope, and we push back on requests that are too broad. We disclose only the minimum data the order requires. We tell you before we disclose, unless the law prohibits it. We do not give any government or third party direct access to our systems.
A note for people mapping other people's calls
If you paste a transcript of a conversation with other participants, you are responsible for having the right to do so under the laws and agreements that apply to you. Wavelength stores that transcript on your account, under the retention rules above, and nowhere else.
Children
Wavelength is a business tool and is not directed to children under 16. We do not knowingly collect data from them.
Changes
If we change this policy, we will update this page and the effective date at the top. Meaningful changes to how we handle your content will be called out on this page rather than made silently.
Contact
Questions about any of this, or a privacy request: wavelengthflow.com/contact.