This Privacy Policy explains how Wayfound US, Inc. ("Wayfound," "we," "us," or "our") collects, uses, shares, and protects information when you use the Wayfound website, applications, and services (the "Service"). We know the information families share with us is sensitive, and we treat it that way. By using the Service, you agree to this Policy.
1. Information we collect
Information you provide
- Account information, such as your name and email address.
- Family and child information you enter, such as your child's age, disability or diagnosis, school and education details, the programs you are pursuing, your household details, and your state and county.
- Documents you upload, such as Individualized Education Programs, medical or evaluation reports, benefit notices, and letters from agencies.
- Communications you send us, such as support requests.
Information collected automatically
- Usage and device information, such as the pages and features you use, log data, approximate location derived from your IP address, and similar technical information, collected to operate and improve the Service.
Payment information
If you subscribe to Premium, our payment processor (Stripe) collects and processes your payment details. We do not collect or store your full card number. We receive limited billing information such as your subscription status and the last four digits of your card.
2. Sensitive information
To do its job, the Service necessarily handles sensitive information, including information about a child's disability and health, education records, and, where you choose to provide it, immigration status. We collect and use this information only to provide and personalize the Service for you. We do not use sensitive information to serve advertising, and we do not sell it.
3. How we use information
- To provide, personalize, and operate the Service, including generating eligibility information, document analysis, suggestions, forms, letters, and deadlines.
- To respond to your requests and provide support.
- To maintain the security and integrity of the Service and prevent misuse.
- To comply with legal obligations.
- To improve the Service, using aggregated or de-identified information. We do not use your documents or personal information to train third-party foundation models.
4. How AI processing works
The Service uses artificial intelligence to analyze the documents and information you provide and to generate guidance, drafts, and answers. This processing is performed through our AI provider (Anthropic), accessed through the Vercel AI Gateway. This processing is configured for zero data retention, which means your content is used to generate a response for you and is not retained by the AI provider to train its models. AI-generated content can be inaccurate, and you should verify important information, as described in our Terms of Service.
5. How we share information
We share information only as described here:
- Service providers (subprocessors) that help us run the Service, under contracts that limit their use of the information to providing services to us. See the list below.
- Legal and safety reasons, such as to comply with a law, regulation, legal process, or enforceable governmental request, or to protect the rights, safety, or property of users, the public, or Wayfound.
- Business transfers, such as in connection with a merger, acquisition, or sale of assets, subject to this Policy.
6. Our subprocessors
We rely on a small set of trusted providers to operate the Service:
| Provider | Purpose |
|---|---|
| Clerk | Account sign-in and authentication |
| Supabase | Application database and file storage |
| Anthropic (via Vercel AI Gateway) | AI processing, configured for zero data retention |
| Pinecone | Search index for the program knowledge base |
| Vercel | Application hosting and delivery |
| Stripe | Payment processing for subscriptions |
| Resend | Transactional email, such as account and support messages |
7. Data retention and deletion
We keep your information for as long as your account is active or as needed to provide the Service. You can delete your information at any time from your account settings, which removes your family and child records, your documents, and associated stored files. We may retain limited information where required for legal, accounting, or security purposes, and residual copies may persist in routine backups for a limited period before they are overwritten.
8. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Know and access the personal information we hold about you.
- Correct inaccurate personal information.
- Delete your personal information.
- Data portability, to receive a copy of your information.
- Opt out of sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of, but you have the right regardless.
- Limit the use of sensitive personal information to what is necessary to provide the Service, which is how we already use it.
- Non-discrimination for exercising your rights.
To exercise these rights, email us at hello@wayfound.us, or use the tools in your account settings. We will verify your request, usually through your account, before acting on it. You may use an authorized agent to submit a request on your behalf, with proof of authorization. If we decline a request, you may ask us to reconsider.
9. California notice at collection
For California residents, the categories of personal information we collect are described in Section 1 above and include identifiers, account information, sensitive personal information (such as health and, where provided, immigration status), internet and device activity, and the contents of documents you upload. We collect this information for the purposes described in Section 3, retain it as described in Section 7, and disclose it to the subprocessors listed in Section 6. We do not sell personal information and do not share it for cross-context behavioral advertising.
10. Children's information
The Service is designed for parents, guardians, and caregivers, who must be adults. It is not directed to children, and we do not knowingly allow children under 13 to create accounts. The Service does involve information about children, which parents and guardians provide and control on their child's behalf. A parent or guardian can review, correct, export, or delete their child's information through their account at any time.
11. Immigration-status information
We understand that information about immigration status is especially sensitive. You are never required to provide it to use the Service. Where you do provide it, we use it only to give you more accurate information, and the Service is designed to keep a child's eligibility, which often depends on the child's own status, separate from a parent's status. We do not share immigration-status information with immigration authorities, except where we are legally compelled to do so.
12. Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest. See our Security page for details. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Where your information is processed
Wayfound is based in the United States, and your information is processed and stored in the United States. If you use the Service from outside the United States, you understand that your information will be processed in the United States.
14. A note on HIPAA
Wayfound is a consumer service that you use directly. We are generally not a "covered entity" or a "business associate" under the federal Health Insurance Portability and Accountability Act (HIPAA), and using the Service does not create a HIPAA-covered relationship. The health-related information you share with us is protected by this Privacy Policy and by our security practices, rather than by HIPAA.
15. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will provide reasonable notice, for example by posting the updated Policy with a new date or by notifying you in the Service or by email.
16. Contact us
Wayfound US, Inc.
Email: hello@wayfound.us
California, USA