Legal

Privacy Policy

Waypoint holds your team's work, so we keep this plain: what we collect, why we collect it, who can see it, and how to get it back or have it deleted.

Who we are

Waypoint is a project management service operated by Wellspring Apps, LLC ("Wellspring", "we", "us"). This policy explains how we handle personal information when you visit our website or use the Waypoint application. It applies to everyone who creates an account, is invited to a team, or simply browses the marketing site.

If you use Waypoint as a member of someone else's team, that team's owner decides what is stored in their projects. We process that content on their behalf and this policy describes how.

What we collect

We only collect what Waypoint needs to work. In practice that means:

• Account details. Your name, email address and a hashed password when you register. If you turn on two-factor authentication or add a passkey, we store the secrets needed to verify those sign-ins. We never see your password in plain text.
• Team and project content. Everything you and your teammates put into Waypoint: projects, message board posts and replies, task cards, chat messages, documents, calendar events, comments, and the files you upload to a project's drive or attach to a conversation.
• Membership and invitations. Which teams and projects you belong to, your role on them, and the email addresses of people you invite.
• Activity records. A log of who created, changed or removed things across your projects, so your team can see what happened while they were away. Mentions and the notifications they trigger are part of this.
• Preferences. Settings such as your timezone and whether you prefer the light or dark appearance.
• Billing details. If your team subscribes to a paid plan, our payment processor Stripe collects your card details directly. We store only what we need to manage the subscription: the plan, its status, the last four digits and brand of the card, and the Stripe identifiers that connect your team to its invoices.
• Technical information. Standard server logs including your IP address, browser type and the pages you request, and the session cookie that keeps you signed in.

How we use it

We use the information above to:

• Provide Waypoint: show your team its projects, deliver messages and notifications, and keep your files where you put them.
• Keep your account secure, including verifying your email address, resetting passwords and checking two-factor codes or passkeys.
• Send the emails the service depends on, such as invitations, verification links, password resets, mentions and notifications you have chosen to receive.
• Bill your team for a paid plan and enforce the project, storage and member limits of the plan you are on.
• Diagnose problems, prevent abuse and keep the service running reliably.
• Answer your questions when you contact us for support.

We do not sell your personal information, and we do not use the content of your projects for advertising or to train machine learning models.

Who can see your information

Inside Waypoint, visibility follows your team's structure. Members of a project can see that project's content. Team owners and admins can see the teams they manage, including who belongs to each project. People outside a project cannot see it.

Outside Waypoint, we share information only with the providers we rely on to run the service, and only what each one needs:

• Stripe processes payments and stores card details for paid plans.
• Hosting and storage providers run our servers and hold the database and uploaded files.
• Email delivery providers send transactional email on our behalf.

Each of these providers is bound by its own contract to protect your data. We may also disclose information when the law requires it, to protect the rights or safety of our users, or as part of a merger or acquisition, in which case we will tell you before your information becomes subject to a different policy.

Cookies

Waypoint uses a small number of strictly necessary cookies: one that keeps you signed in, one that protects forms against cross-site request forgery, and one that remembers your appearance preference. We do not use advertising or third-party tracking cookies on the application or the marketing site.

How long we keep it

We keep your account and its content for as long as your account exists. When you delete your account, or a team owner deletes a team, the associated projects, messages, files and activity are removed from our live systems promptly and from backups within thirty days. We keep billing records for as long as tax and accounting law requires, and server logs for a short rolling window used for security and troubleshooting.

Your choices and rights

You can update your name, email address and password from your account settings at any time, and you can delete your account from the same place. Team owners can remove members, delete projects and cancel subscriptions from the team's settings.

Depending on where you live you may also have the right to ask us for a copy of the personal information we hold about you, to correct it, to have it deleted, to restrict how we use it, or to object to certain processing. To make any of these requests, email us at [email protected] and we will respond within thirty days. If you are a member of a team rather than its owner, we may need to direct part of your request to that team's owner.

Security

All traffic to Waypoint is encrypted in transit. Passwords are hashed, two-factor secrets are encrypted at rest, and access to production systems is limited to the people who run the service. No system is perfectly secure, so if you believe your account has been compromised please tell us straight away.

Children

Waypoint is a tool for teams at work and is not directed at children under 16. We do not knowingly collect personal information from them, and if we learn that we have, we will delete it.

Changes to this policy

If we change this policy in a way that affects how we use your information, we will update the date at the top of this page and, for significant changes, email the owner of every active team before the change takes effect.

Contact

Questions about privacy at Waypoint can be sent to Wellspring Apps, LLC at [email protected].

Terms & Conditions

These are the terms you agree to when you create a Waypoint account or join a team. They are written to be read, not skimmed, so they are short.

The agreement

Waypoint is a project management service provided by Wellspring Apps, LLC ("Wellspring", "we", "us"). By creating an account, accepting an invitation to a team, or using Waypoint in any other way, you agree to these terms and to our Privacy Policy. If you are using Waypoint on behalf of a company or other organisation, you confirm that you have the authority to bind it to these terms, and "you" means that organisation.

If you do not agree with these terms, please do not use Waypoint.

Your account

• You must be at least 16 years old and provide accurate information when you register.
• You are responsible for keeping your password, two-factor codes and passkeys safe, and for everything that happens under your account. Tell us immediately if you think your account has been compromised.
• One person per account. Do not share sign-in details, and do not create accounts for other people without their permission.

Teams, owners and members

Work in Waypoint is organised into teams. The person who creates a team is its owner. Owners and the admins they appoint control who is on the team, which projects exist, which members can see them, and the team's subscription. When you join a team you accept that its owner can see, manage and delete the content you contribute to it, and can remove you from the team.

The owner is responsible for the team's use of Waypoint, including paying for its plan and making sure members follow these terms.

Your content

Everything you put into Waypoint, such as messages, task cards, documents, calendar events and uploaded files, belongs to you or to the team you contributed it to. We do not claim any ownership over it. You give us permission to store, display, back up and transmit that content only as needed to provide the service to you and your team.

You are responsible for the content you add. You must have the right to share it, and it must not break any law or anyone else's rights. We do not review the content of projects, but we may remove content or suspend accounts if we are notified that it violates these terms or the law.

Acceptable use

Waypoint is for running projects. You agree not to:

• Use the service for anything unlawful, or to store or share material that is illegal, infringing, harassing or malicious.
• Attempt to gain access to accounts, teams or projects you have not been invited to, or to probe or disrupt our systems.
• Upload software intended to harm Waypoint, its users or their devices.
• Resell the service, or use automated tools to place unreasonable load on it.
• Work around the project, storage or member limits of your plan.

Plans, billing and cancellation

Waypoint offers a free plan and paid plans. Each plan sets limits on the number of projects, the amount of storage and the number of members a team can have, as described on our pricing page. Paid plans are billed to the team in advance, monthly or yearly, through our payment processor Stripe, and renew automatically until cancelled.

• A team owner can change or cancel the plan at any time from the team's billing settings. Cancelling takes effect at the end of the current billing period and the team is not charged again.
• When a plan is downgraded, existing content is kept, but the team cannot add projects, members or files beyond the new limits until it is back within them.
• Fees are non-refundable except where the law requires otherwise, or where we have failed to provide the service as described.
• We may change our prices. Any change applies from your next billing period, and we will email the team owner at least thirty days before a price increase takes effect.
• Taxes are charged where we are required to collect them.

Our service

We work hard to keep Waypoint available and to keep your data safe, and we take regular backups. Even so, Waypoint is provided "as is" without any warranty that it will be uninterrupted or error-free, and you should keep your own copies of anything you cannot afford to lose. We may change or add features, and we will give reasonable notice before removing a feature that teams depend on.

Ending your use of Waypoint

You can delete your account at any time from your settings, and team owners can delete their teams. Deleting a team removes its projects and files for every member. We may suspend or close accounts that break these terms, and we will tell you why unless the law prevents us. When an account or team is deleted, its content is removed as described in our Privacy Policy.

Liability

To the fullest extent permitted by law, Wellspring will not be liable for any indirect, incidental, special or consequential loss, including lost profits, data or business, arising from your use of Waypoint. Our total liability for any claim relating to the service is limited to the amount your team has paid us in the twelve months before the claim arose. Nothing in these terms limits liability that cannot be limited by law.

Changes to these terms

We may update these terms from time to time. We will update the date at the top of this page and, for material changes, email the owner of every active team at least fourteen days before the new terms apply. Continuing to use Waypoint after that date means you accept the updated terms.

Governing law

These terms are governed by the laws of the United States and of the state in which Wellspring Apps, LLC is organised, without regard to conflict of law rules. Any dispute that we cannot resolve together will be brought in the courts of that state.

Contact

Questions about these terms can be sent to Wellspring Apps, LLC at [email protected].