Privacy Policy

Sarp Kandamar, trading as Waypoint, is the data controller for the personal data processed through the service. This means we decide how and why your personal data is processed, and you can contact us at any time using the details at the bottom of this page.

We process your personal data only where we have a legal basis to do so:

• Contract performance — to create and run your account, provide the service you signed up for, and manage your subscription.
• Legitimate interests — to keep the service secure, prevent abuse, and improve features, in ways that do not override your rights.
• Consent — where you have given it, for example when you choose to submit content to AI-powered features.
• Legal obligations — where we must keep or disclose records to comply with the law.

Depending on how you use Waypoint, we may process:

• Account information, such as your email address and authentication records.
• Project names, descriptions, and any additional context you add to a project.
• Roadmaps, phases, tasks, task statuses, notes, and progress data.
• Responses from coding agents that you paste into the service.
• AI-generated or extracted results derived from the content you submit.
• Sync sessions and history records showing what was reviewed and applied.
• Technical and usage data needed to operate the service, such as log data, approximate request timing, browser or device information, and error reports.
• Payment and subscription information handled by Paddle, our Merchant of Record.

• To provide, maintain, and improve the service and its features.
• To authenticate you and keep your data separated from other accounts.
• To generate roadmaps, progress calculations, recommendations, and prompts.
• To detect, prevent, and respond to abuse, misuse, or attempts to overload the service.
• To manage subscriptions, billing, and customer support requests.
• To meet legal and regulatory obligations.

Some Waypoint features are AI-powered, including roadmap extraction from pasted plans and Agent Sync interpretation of coding-agent responses. When you use these features, the relevant content — such as the text you pasted and the titles and statuses of the tasks being matched — is sent to the AI/model infrastructure used by the service so that a result can be returned.

When you use an AI-powered feature, the content you submit and relevant project context needed to perform that feature may be sent to the AI/model infrastructure used by Waypoint.

We rely on third parties to run Waypoint, including hosting and database infrastructure, authentication, AI model providers, and Paddle, our Merchant of Record. These providers process data on our behalf and only for the purposes described here.

Payments are processed by Paddle (Paddle.com), which acts as the Merchant of Record for all purchases. Paddle collects and processes your payment details, handles billing, tax compliance, and invoicing, and Paddle's name appears on your bank or card statement. Waypoint does not store full payment card details. We may receive limited billing information from Paddle such as subscription status, plan, and transaction identifiers.

We keep your account and project data for as long as your account is active, or as long as needed to provide the service. You can delete projects at any time from within the app. When you ask us to delete your account, we remove associated content within a reasonable period, except where we must retain records to meet legal, accounting, or security obligations.

We use technical and organizational access controls designed to keep account and project data separated and protect information from unauthorized access. Data is transmitted over encrypted connections. No online service can guarantee absolute security, but we take reasonable technical and organisational measures to protect your information.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to complain to a supervisory authority. To exercise any of these rights, contact sapoosenrt@yahoo.com.

Waypoint is not directed at children and is not intended for use by anyone under the age required to form a binding contract in their country.

We may update this Privacy Policy as the service changes. When we do, we will update the date at the top of this page. Continued use of Waypoint after an update means you accept the revised policy.

Sarp Kandamar (trading as Waypoint) — sapoosenrt@yahoo.com — agentswaypoint.com