Last Updated: March 2026
This Privacy Policy explains how Waffl AI ("Waffl AI," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our websites, mobile apps, and related services (collectively, the "Services"). It also describes your rights and choices under applicable laws, including the EU General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act / California Privacy Rights Act ("CCPA/CPRA").
By using Waffl AI, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Services.
We collect only the information necessary to provide and improve the Services.
When you connect a service (e.g., Gmail, Outlook, Slack, Teams, Jira, calendar providers), we access limited data through official APIs, subject to the permissions you grant.
This may include:
We do not download or permanently store your entire inbox or chat history, and we access only the data needed to identify tasks, commitments, and priorities.
This information helps us improve stability and performance.
Waffl AI does not intentionally collect sensitive personal data (e.g., health information, biometric data, racial/ethnic origin).
Any incidental exposure is processed only to provide the Service and not stored unless necessary.
We use personal information to:
We never use your identifiable data to train public AI models.
If you are located in the European Economic Area (EEA), the UK, or Switzerland, we process your personal data under these lawful bases:
We do not sell your personal information and never share data for advertising purposes.
We may share information with:
Trusted vendors who assist with:
These providers have contractual obligations to protect your data.
If you connect a service (e.g., Slack or Gmail), we use that provider's secure API to obtain relevant data.
We do not share your data with those providers beyond what is necessary for the integration.
We may share data when required to comply with:
We challenge overbroad or inappropriate requests whenever permitted.
If Waffl AI is acquired or merges with another company, user data may be transferred as part of the transaction. You will be notified of any material changes.
Your data may be stored or processed in the United States or other countries where we operate.
We use legally approved transfer mechanisms such as:
We retain personal information only as long as necessary to:
When you disconnect an integration, Waffl AI deletes data associated with that integration unless required for security or compliance.
When you delete your account, we delete all associated information except where retention is legally required.
We implement industry-standard safeguards, including:
No security system is perfect, but we are committed to protecting your data with best-in-class practices.
Users in the EEA/UK/Switzerland have the right to:
California residents may request:
We do not discriminate against users who exercise their privacy rights.
Waffl AI is not intended for children under 16, and we do not knowingly collect information from minors.
If you believe a child has provided information to us, contact us and we will delete it promptly.
The Services may contain links to external websites or tools.
We are not responsible for the privacy practices or content of those third parties.
We may update this Privacy Policy from time to time. We will notify users of material changes by:
Continued use of the Services after changes constitutes acceptance.
If you have questions or requests regarding this Privacy Policy or your data, contact us:
