Privacy Policy

1. Scope

This policy explains how Waino (waino.ai) collects, uses, and protects your information. It applies to site visitors and registered users.

We write this policy with a boundaries-first principle: what we deliberately do not do comes before what we do.

2. What we collect

Account information: email (or phone number), password hash, store name, and industry.

Business information: address, ZIP code, business details, and the business data you enter yourself (such as customers, records, and price lists).

Usage information: feature usage logs and error diagnostics (used for troubleshooting and improvement).

Preferences: language and theme (stored in cookies and your browser's local storage).

3. What we deliberately do not do

We never sell personal information, and we do not run cross-site behavioral ad tracking.

Review text is never stored in full — only structured conclusions such as ratings, counts, and themes are kept.

Voice transcription happens entirely in the browser or at the operating-system level; audio never passes through our servers.

4. Why we use data

To provide and improve the service: analysis, maps, workflow assembly, and explanations of results.

For account security and abuse prevention: human verification, rate limiting, and anomaly detection.

To comply with the law.

5. Information from public sources

Peer and market data comes from public web pages and public channels such as Google Places, and is used only to display and compute aggregate analysis.

6. Storage and protection

Data is stored on Supabase (a managed database service) with encryption in transit.

Data belonging to different merchants is enforced apart by row-level security (RLS) — separation is executed by real code, not promised in words.

7. Sharing and disclosure

We share only the data necessary to operate the service with the infrastructure processors listed in Section 8 of the Terms of Service.

We disclose information only when the law explicitly requires it.

8. Your rights

You can view and correct your profile inside the product.

You can request export or deletion of your data — deleting your account cascade-deletes your business data and analysis snapshots, with the scope enforced by real code.

9. Cookies and local storage

Used only for preferences such as language and theme, and for keeping necessary sessions. Never used for ad tracking.

10. Retention

We keep the data necessary to provide the service while your account is active. After account deletion, data is cascade-deleted unless the law requires otherwise.

11. Children

The platform serves business operators and is not directed at anyone under 16.

12. Changes and contact

Updates are published on this page with a new effective date.

Privacy questions? Reach us through the in-app assistant or the signed-in feedback channel.