Last updated October 6, 2026
Privacy policy
This policy explains what Waypoint (a service of Codified LLC) collects, why, and the choices you have. We don’t sell your personal information.
What we collect
- Account details: your email address, and the name of your workspace.
- Your project data: the projects, milestones, tasks, owners, dates and notes you create or import, plus the settings for each live link.
- Sources you connect: for a shared sheet or file link, the address you give us, which we read on a schedule to keep the project current. Uploaded files are read in your browser; we store the resulting project, not the file.
- Usage and device data: sign-in times, basic request logs (such as IP address and browser) for security and troubleshooting, and Google Analytics on signed-in app pages to understand how features are used. Live links don’t load Google Analytics.
- Billing: payments are processed by Stripe. We receive your plan, billing status and billing email, never your full card number.
How we use it
To run Waypoint for you: sign you in, save and display your projects, keep connected sources in sync, show live links the way you configure them, send service emails (like sign-in links), provide support, keep the service secure, and improve it.
Live links
Anyone with a live link’s address can see what you chose to show. Owners, notes and internal IDs are never included.
Who processes data for us
Cloudflare (hosting and database), Resend (email delivery), Google (analytics) and Stripe (payments). They process data on our behalf under their own security and privacy commitments.
Retention and deletion
We keep your data while your account is active. Delete a project and it’s removed right away. Ask us to delete your account and we’ll remove your workspace and projects within 30 days, except where we must keep records (such as invoices) by law.
Your choices
You can export a backup of any project, change or turn off live links, and ask us for a copy of your data or to correct or delete it.
Security
Data is encrypted in transit. Sign-in links are single-use and expire after 20 minutes, and we store only a hash of each sign-in link and session.
Contact
Email erik@codified.dev with any privacy question or request.