What Wavn reads, what it never touches, and what is not done yet.

Your material

Wavn reads your material only inside the project you put it in. It does not read anything you have not put in front of it. Moving a conversation into a project is how you grant that, and moving it out is how you withdraw it.

Your connections

Every connection is either yours alone or your team’s. A connection marked as yours cannot be read by anyone else on the account, including whoever set the account up. Wavn never touches anything it did not create: it manages its own items and cannot edit or delete something you or anyone else made. For a private calendar, Wavn asks only for your availability, so event titles never reach Wavn.

Your payments

Payment happens on a hosted page. Wavn never sees your card. Card data is held by the payment processor, not by Wavn. Leaving a paid plan never deletes a project, a file, or a decision.

Your mail

Mail sent to your Wavn address is only acted on if it came from an address you have allowed. Wavn checks that a message really came from where it claims before it checks whether that sender is allowed, because anybody can type a From line.

Your published pages

A page you publish runs in its own sealed frame on its public link. It cannot reach the account of anyone who opens it, and it cannot reach yours.

Where your material rests, and how

Your database rows and your files rest with one host. Everything between your browser and Wavn travels over HTTPS. Both hosts publish the same statement about what they hold, and we repeat it without adding to it: data is encrypted at rest with AES-256 and in transit with TLS (the database host’s statement, the app host’s statement). Every company that holds or processes your material, and the country each sits in, is on the sub-processors page.

What Wavn learns from

Wavn trains its own model on the free plan only, and only if you switch it on; the switch is in Settings under Privacy and starts off. Paid accounts are never used for training, and there is no switch on a paid plan because there is nothing to decide. Chat text only: files and mail are never included. The whole stance, including the contract term that bars every other company on the list from training on your work, is on the sub-processors page.

Your agent connections

A tool you connect holds a token for one account, yours, and every call reads the account from that token, never from anything the tool sends. A token minted by consent in a browser lives an hour and renews for up to thirty days; disconnecting the tool in the app revokes every token it holds, on its next call. A key you mint by hand is shown once, stored only as a hash, never expires, and is revoked by you in the app. A lost key is revoked and remade; there is no recovery path. The address and the tools are on the agents page.

Honest about the roadmap

We are an early company. Formal certifications like SOC 2, plus data-residency and deeper enterprise controls, are on the roadmap rather than done, and we will say so plainly until they are. That honesty is the whole point of this page.

Found something that looks off?

report@wavn.app. We would rather hear about it.