Legal
Privacy Policy
Last updated August 24, 2026~3 min read · Wahtodo.com
In short
- Marketing site today: only what your browser sends to load pages. No accounts, no workspace data yet.
- Workspace (when you sign in): email + your capture + usage to run ranking. We don’t sell data. We don’t train public models on your workspace.
- Your rights: access, correction, export, deletion at privacy@wahtodo.com.
WAH, Inc. (“WAH”, “we”) is the company. WAH Todo is the product. This policy covers wahtodo.com as it works today — a marketing site with an /app demo that stores a sample graph locally. Workspace capture begins when you use the signed-in product (local session today, cloud later).
What we collect
| Where | What | Why |
|---|---|---|
| Marketing site | Browser logs your host may record (IP, user agent) to serve pages | Delivery + reliability |
| Product (signed in) | Account: email, name, auth identifiers · Workspace: tasks/projects/notes you capture · Billing via provider (we don’t store full card) | Next-move ranking, auth, billing |
How we use it
- Provide the site and, when in use, generate Do this next and Why this from your work graph.
- Secure accounts, bill Intelligence plans, keep the service reliable.
- We do not sell personal information. We will not use workspace content to train public foundation models.
If a model provider processes a prompt on your behalf in the future, that processing will be described here and in the DPA before it is enabled.
Sharing
- Subprocessors — hosting, email, payments — under contract. List on request at privacy@wahtodo.com.
- Legal requests when required by law.
- Team admins see workspace they own — not another team’s graph.
Retention & your rights
While your account is active, plus a limited backup window after deletion. You may request:
- Access, correction, export, or deletion at privacy@wahtodo.com
- EU/UK residents may lodge a complaint with a supervisory authority.
Contact & related
privacy@wahtodo.com · legal@wahtodo.com · See Cookie Policy, DPA, and Security (launch requirements until isolation/encryption are live).