Privacy Policy

A clearer view of your information, your choices, and how we handle both.

Draft for review · Prepared October 18, 2026. This policy must be verified against Waypoint’s actual practices and completed with the operating entity, contact details, service providers, and applicable jurisdictions before publication.

This draft describes the personal information that may be processed when people visit the Waypoint website, create an account, or use its sales workspace. Customer workspace data may also be governed by a separate agreement and data processing addendum.

01 Information we collect

Depending on the features you use, information may include your name, work email, organization, account settings, support messages, billing details, and technical information such as device, browser, IP address, and usage logs. Connected services may supply contacts, conversations, and calendar information within the permissions you authorize.

02 How information is used

Information is used to deliver the workspace, manage accounts, support customers, maintain security, and improve the service. Marketing communications and optional analytics should be described separately, including the choices available to you and any consent required by law.

03 Customer workspace data

Your organization controls the contacts, messages, and other records it adds to its workspace. Where Waypoint acts on that organization’s instructions, its customer agreement and data processing addendum should explain the respective responsibilities. Direct workspace access or deletion requests to your administrator first.

04 Cookies and similar technologies

Essential technologies may be used to keep sessions secure and remember preferences. Before launch, document every analytics, advertising, and other optional technology actually deployed, its provider and purpose, and how visitors can accept, reject, or withdraw consent where required. Browser settings may also limit cookies.

05 Sharing and service providers

Personal information may be processed by providers supporting hosting, payments, communications, and customer support, or disclosed where required by law. The final policy must identify relevant provider categories, any advertising or data-sharing practices, and the safeguards and notice requirements for business transfers.

06 Retention, security, and transfers

Information should be retained only for documented business and legal purposes, then deleted or anonymized under an established schedule. No system is completely secure. The final policy must describe verified security practices, hosting locations, international transfers, and applicable safeguards without promising unverified certifications.

07 Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or receive a copy of personal information, restrict or object to processing, withdraw consent, or complain to a regulator. Some rights have exceptions. The final policy must provide a working request channel, verification process, and region-specific notices where applicable.

08 Children and policy changes

The workspace is intended for business use rather than use by children. Confirm the applicable minimum age and process for handling information collected from children before launch. Material changes to this policy should be communicated as required by applicable law, with the effective date updated.

09 Who is responsible and how to contact us

Before publication, insert the full legal name and address of the entity operating Waypoint, a monitored privacy contact, and any required representative or data protection officer details. This draft is not a substitute for a policy tailored to the company’s actual data practices.