Legal

Privacy policy

Last updated October 29, 2026

Waystone is made by Uppercase Labs (“we”). This policy explains what Waystone collects, why, and what you can do about it. By using Waystone you agree to it. Questions? Email support@waystonework.com.

What we collect

  • Your account. Your name, your email, and your profile picture if you sign in with Google.
  • What you put in. Your tasks, projects, tags, filters, notes, files, and any feedback you send us.
  • How you sign in. When you sign in, from what IP address, and with what browser. We use this to keep your account safe and to stop abuse.
  • A record of changes. Who changed what in a space, and when.

We do not run ads. We do not use tracking or analytics tools. We do not sell your data.

How we use it

  • To run Waystone and show you your work.
  • To send you sign-in codes, invites, and notices about your account.
  • To keep Waystone safe, find bugs, and stop abuse.
  • To answer you when you write to us.

Signing in with Google

If you sign in with Google, we get your name, email, and profile picture. We use them only to make and run your account. We do not read your Gmail, your calendar, your files, or anything else in your Google account. We do not share what Google gives us, and we do not use it for ads.

Our use of data from Google follows the Google API Services User Data Policy, including its Limited Use rules.

Who helps us run it

A few companies store or move your data for us. They may only use it to do that job.

  • Vercel hosts the app and stores the files you add.
  • Neon hosts our database.
  • Resend sends our email.
  • Google and Microsoft handle sign-in, if you choose them.
  • Slack tells our team when you send feedback.

We may also share data if the law makes us, or to protect people from harm. If Waystone is ever sold or merged, your data would go with it, under this policy.

Cookies

We use a few cookies to keep you signed in and to remember the last space you opened. Your browser also stores your light or dark mode choice. We use no ad or tracking cookies.

How long we keep it

We keep your data while your account is open. Tasks in the Trash are removed for good after 30 days. When you delete your account, we delete your account and remove you from every space. Work you added to a space belongs to that space, so it stays, without your name on it. We also keep anything the law makes us keep.

Your choices

  • You can change your name on your account page.
  • You can delete your account from your account page. If you own a space, make someone else the owner first, or email us and we will delete the space and your account for you.
  • You can ask us for a copy of your data, or ask us to fix or delete it. Email support@waystonework.com.

Depending on where you live, you may have more rights under laws like the GDPR or the CCPA. We will honor them. Just ask.

Keeping it safe

Your data is encrypted on its way to us. We limit who can see it, and we use sign-in codes instead of passwords. No system is perfect, so we cannot promise nothing will ever go wrong. If something does, we will tell you.

Kids

Waystone is not for children under 13. We do not knowingly collect their data. If you think we have, email us and we will delete it.

Changes

If we change this policy, we will update the date at the top. If the change is big, we will email you first. See also our terms.