This Privacy Policy explains how Waygraph Pte. Ltd. ("Waygraph", "we", "us"), a company registered in Singapore, collects, uses, stores and discloses Users' personal information, in compliance with applicable law including the Singapore Personal Data Protection Act 2012 and, where it applies to Users in those regions, the General Data Protection Regulation.

For the content inside a workspace, the Customer is the controller and Waygraph acts as processor, handling that content on the Customer's instructions.

1. Information You Provide Directly

Waygraph uses this data to verify the account, provide service updates and offer relevant information about the service. Personal data is collected from the following sources:

1. Account

When Users register for or use Wayist, Waygraph collects personal data provided directly by the User, which includes but is not limited to:

1. Full name of the User
2. Email address
3. Telephone number
4. Workspace and organisation details
5. Accounts and channels connected to Wayist, such as WhatsApp, Instagram, Facebook Messenger, LINE, Telegram and web chat
6. Conversations within the channels connected to the workspace
7. Contact records the User imports into the workspace

2. Subscription

When the User subscribes to a paid plan, we collect personal information such as name, email address and payment details. Waygraph may also collect data on plan preferences and usage patterns on the platform, including seats in use and agent model spend.

2. Information We Collect Automatically

1. Device Information

IP address, browser type, operating system, device type and language preferences. We use this to optimise compatibility and improve performance across devices.

2. Usage Data

Interactions such as pages visited, features used, links clicked and session duration. This helps us understand how the platform is used and improve its functionality and design.

3. Cookies

We use cookies and similar technologies to remember preferences, keep the User signed in and understand navigation through the platform. We do not run advertising cookies.

4. Log Data

Each time the platform is accessed we collect log data, including sign-in times, error reports and actions performed, including agent runs and handoffs. This data is necessary to secure the service and diagnose technical issues.

3. Personal Data Acquired from Third Parties

Waygraph may also obtain personal information from third-party sources or through the User's interactions with platforms integrated with Wayist. This may include, but is not limited to:

1. Information from communication platforms used in the User's activity on Wayist, such as WhatsApp, Instagram, Facebook Messenger, LINE, Telegram, Zoom, Google Meet, Microsoft Teams and other integrated applications
2. Data from social accounts linked to the workspace
3. Information from calendar or scheduling tools integrated with Wayist
4. Data obtained through analytics providers regarding interactions with the platform
5. Transaction and billing history related to the User's plan, including payment information used
6. Data originating from other third-party applications and connectors integrated with the workspace

4. Data Storage and Security

1. Data Retention Period

1. Waygraph retains personal information only for as long as necessary to provide the services or for other legitimate business purposes, including resolving disputes, security and safety, and compliance with legal obligations. Chats, records and recordings additionally follow the retention window of the Customer's plan.
2. The duration of retention depends on the amount, nature and sensitivity of the information, the potential risk from unauthorised use or disclosure, the purpose of processing and applicable legal requirements. Once information is no longer needed it is securely deleted or anonymised for analytical and statistical purposes.

2. Data Security

Waygraph applies appropriate technical, administrative and physical security measures to prevent unauthorised access, disclosure, alteration or destruction of personal data. These include, but are not limited to:

1. Encryption of data in transit and at rest
2. Strict access controls, including roles, permissions and the authority matrix that bounds every agent, granting access only where needed for a legitimate purpose
3. Regular monitoring and logging to detect and prevent potential security breaches

While robust measures are in place, no transmission over the internet or email is completely secure or error-free. Users are advised to exercise caution when transmitting sensitive information through Wayist or the applications integrated with it.

5. Data Sharing

Waygraph shares User data with third parties only under clearly defined conditions and in compliance with applicable law:

1. Services the User relies on: personal information may be shared with third-party services integrated into Wayist, including communication channels used in the workspace, the model providers selected in the workspace cognition settings, payment processors and infrastructure such as analytics or cloud storage. These parties receive only the information necessary to support the User's use of the service and are bound by agreements to maintain confidentiality and security.
2. Legal requirements: Waygraph may be required to share data in order to comply with court orders, law enforcement investigations or other legal obligations, and may disclose information where necessary to protect the rights, safety or interests of Waygraph, its Users or others, including to prevent fraud or security risks.
3. Business partners and affiliates: data may be shared for the purpose of developing and improving the services. Such parties must comply with strict security and privacy standards and use data only for legitimate purposes consistent with this policy.
4. Change of ownership: in the event of a merger, acquisition, restructuring or sale of assets, User data may be transferred as part of that transaction. Waygraph will communicate significant changes in the handling of User data resulting from such a transfer.
5. Marketing: Waygraph will not share personal information with third parties for direct marketing or other commercial purposes without the User's explicit consent, requested separately and clearly.
6. Protection: all data shared with third parties is protected by appropriate measures such as encryption and access control, and third parties are audited and monitored for compliance with this policy.

Workspace content is not used to train models offered to other customers.

6. Where Your Data Is Stored

Workspace data is stored in the region selected where the Customer's plan offers that choice: the EU, the US or APAC. Account and billing records may be processed in Singapore. Transfers between regions are covered by standard contractual clauses or another lawful transfer mechanism.

7. User Rights and Responsibilities

1. User Rights

1. Users have the right to access, update or request deletion of the personal information held about them, to request a copy of their personal data in an accessible format, and to withdraw consent to processing at any time, subject to this policy and related legal obligations. Workspace administrators can carry out most of these actions directly in the product.
2. Users have the right to know how their personal data is processed, stored and protected, including the purposes of processing, the parties with access to it and the security measures applied.
3. Users have the right to have their personal data protected from unauthorised use or access. In the event of a data breach that could harm Users, Waygraph will provide notice in accordance with this policy and applicable legal requirements.
4. Users have the right to request information about service updates, changes or discontinuation, including the impact on their personal data.

2. User Responsibilities

1. Users are responsible for providing accurate, complete and current information when registering or using the services. Errors or inaccuracies may affect access to or the quality of the services.
2. Users are responsible for keeping account information confidential, including passwords and login credentials, and must not share them with third parties.
3. Users agree to comply with all policies, terms of service and applicable laws when using the platform, and must not use it for illegal activity or activity that breaches the terms.
4. Users must use the services responsibly, without abusing, damaging or disrupting their operation, and must not attempt to access Waygraph's systems unlawfully.
5. Waygraph is indemnified against losses or claims brought by third parties resulting from a User's actions while using the services.

If a User breaches the applicable terms or laws while using the services, Waygraph reserves the right to act, including suspending or deleting the account and reporting to the relevant authorities.

8. Age Restrictions

Wayist is designed for adults, meaning individuals who have reached the age of legal capacity in their jurisdiction. We do not knowingly collect personal data from children or minors. If you become aware of personal data submitted by someone under that age, contact us and we will take steps to delete it promptly.

9. Changes to This Privacy Policy

1. Waygraph may modify or update this policy from time to time to reflect changes in practice, accommodate new technology or comply with applicable law. Changes take effect on publication of the updated policy.
2. Changes will be communicated through the platform, whether by in-app notification, website update or other channels such as email.
3. Users are encouraged to review this policy periodically. The latest version is always available on this page.
4. By continuing to use the services after a change takes effect, Users are deemed to have accepted the updated policy. Users who do not agree may discontinue use or contact us for clarification.
5. Where a significant change is made to how personal data is collected, used or shared, Waygraph will give Users direct notice, by email, in-app notification or another direct method.

10. Contact

If Users have questions, complaints or require further clarification regarding this policy or how Waygraph manages their personal data, they may contact the Wayist team through the contact form available on the platform.

Waygraph Pte. Ltd., Singapore. Last updated 22 September 2026.