Privacy Policy
Last updated: October 12, 2026
WaveRider (“we,” “us,” or “our”) operates the website waverider.ai and the WaveFinder application at app.waverider.ai (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
Information You Provide
- Account Information: Email address, display name, and authentication credentials when you create an account.
- Payment Information: Billing details are processed securely by Stripe. We do not store your credit card numbers on our servers.
- Communications: Information you provide when contacting us for support.
Information Collected Automatically
- Usage Data: Pages visited, features used, time spent, and interaction patterns within the Service.
- Device Information: Browser type, operating system, IP address, and device identifiers.
- Cookies: We use essential cookies for authentication and session management. Optional analytics cookies and similar storage (PostHog and Google Analytics) help us understand how the Service is used. On waverider.ai we set them only if you accept analytics, and we do not record sessions on waverider.ai. You can change your choice at any time with “Analytics preferences” in the site footer. Declining does not affect your ability to use the site or to log in to WaveFinder. We also store your choice itself (a cookie named
wr_consentand a matching browser-storage entry) so the choice carries over between waverider.ai and app.waverider.ai.
2. How We Use Your Information
- Provide, operate, and maintain the Service
- Process subscriptions and payments
- Send transactional emails (account verification, subscription confirmations, billing notices)
- Improve and personalize the Service
- Monitor usage to detect abuse and ensure security
- Comply with legal obligations
3. Third-Party Services
We use the following third-party services that may collect information about you:
- Stripe — Payment processing. See Stripe’s Privacy Policy.
- Supabase — Authentication and database services. See Supabase’s Privacy Policy.
- Vercel — Application hosting. See Vercel’s Privacy Policy.
- PostHog — Product analytics (primary). Events from waverider.ai are sent through our own domain to PostHog’s US cloud. See PostHog’s Privacy Policy.
- Google Analytics — Usage analytics (secondary). See Google’s Privacy Policy.
- Cloudflare Turnstile — Bot protection. See Cloudflare’s Privacy Policy.
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.
5. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure authentication (OTP-based passwordless login), and access controls. However, no method of electronic transmission or storage is 100% secure.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Opt out of marketing communications
To exercise any of these rights, contact us at support@waverider.ai.
7. Children’s Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
8. International Data Transfers
Your information may be transferred to and processed in the United States, where our servers are located. By using the Service, you consent to such transfer.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date.
10. Contact Us
If you have questions about this Privacy Policy, please contact us at:
- Email: support@waverider.ai
- Website: waverider.ai