Privacy Policy

Last updated: 24 July 2026

Who we are

Waypoint is a conversational project management tool operated by Sparkways Solutions (“Sparkways”, “we”, “us”), the data controller for the personal data described in this policy. You can contact us about anything in this policy at admin@tell-waypoint.com.

What we collect

Account details: your first and last name and email address, collected when you create an account. Passwords are handled entirely by our authentication provider, Supabase — they never pass through our own servers and we cannot see them.

Project data: the programmes, projects, tasks, blockers, risks, effort logs and messages you enter into Waypoint. This data belongs to you.

Usage data: counts of the AI actions and reports you use each month, kept to operate plan limits, plus standard technical logs needed to run and secure the service.

How we use your data

To provide Waypoint: storing your project data, keeping your account working, and enforcing the limits of your plan. When you send Waypoint a message, the text of that message plus minimal context about the relevant project is sent to Anthropic’s Claude API so it can be understood and turned into proposed changes. Your project data is never used to train AI models, and we never send bulk exports of your data to any AI provider.

We do not sell your data, we do not use it for advertising, and this website sets no marketing or tracking cookies.

Who processes data for us

Supabase (database hosting and authentication), Anthropic (AI processing of the messages you send), Resend (transactional email such as confirmation and password-reset messages), and Render (application hosting). Each acts as a processor on our instructions.

How long we keep it

Your project data and its audit trail are kept for as long as your account exists — the audit trail is an integral part of the product. If you want your account and personal data removed, contact us and we will action it; where records must be preserved for integrity reasons, we anonymise rather than delete.

Your rights

Under UK data protection law you have the right to access, correct, delete, restrict or object to our processing of your personal data, and to data portability. To exercise any of these, contact us. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Changes

If we make material changes to this policy we will post the updated version here and note the new date above.