1. What Waves stores
- Account: email, name, locale, hashed password (argon2id), email verification time.
- Sessions and API keys: only a SHA-256 hash of each token; the plaintext is never written down.
- Jobs: the request you sent, status, errors, results for the retention period, and which model/provider served it.
- Payments: amount, transfer memo and the transaction reference reported by the bank/payment gateway. Waves never sees your card number or bank password.
- Technical logs: IP address, time and error code of requests, kept at most 30 days for abuse prevention and debugging.
2. What it is used for
Running the service, billing and reconciliation, transactional email (verification, password reset, top-up confirmation) and abuse prevention. Waves does not sell data and sends no marketing email.
3. Third parties
Prompts and input files are forwarded to the model provider for processing. The payment gateway receives the amount and transfer memo. Nobody else receives your data unless the law requires it.
4. Your rights
You can view and edit account details in the portal, revoke keys at any time and close the account: email and name are anonymised at once, keys and sessions are revoked; the transaction history is kept for reconciliation as accounting rules require.
5. Contact
Questions about your data go to the support address shown in the portal.