Privacy Policy
Last updated: May 22, 2026
The left column is the legal text. The right column is a plain English summary of what that section actually means for you as a real estate agent using WaveLead.
You own your data — your leads, contacts, and business info are yours. Always.
We never sell your data. Ever. To anyone.
We never see your credit card. Billing is handled directly by Stripe.
Your leads' information is only used to send them emails on your behalf. Nothing else.
You can delete your account and all your data at any time. No questions asked.
1. Introduction
WaveLead (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the WaveLead platform and related services (collectively, the “Service”).
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.
We built WaveLead to help you grow your business, and that means handling your data with care and respect. This policy explains exactly what we collect, why we collect it, and how we protect it. We want you to feel completely confident using WaveLead — if you ever have questions about your data, you can reach us directly at hello@wavelead.app.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, password, and professional details when you create an account
- Billing information: Payment card details and billing address processed securely through our payment provider
- Profile information: Business name and communication preferences
- Lead data: Contact information and inquiry details submitted through your embedded lead capture forms
- Support communications: Messages and information you send when you contact our support team
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, time spent, and clickstream data
- Device data: IP address, browser type, operating system, and device identifiers
- Log data: Server logs including requests, errors, and timestamps
- Cookies and tracking technologies: As described in Section 7 below
2.3 Information from Third Parties
We may receive information about you from third-party services you connect to WaveLead, such as CRM platforms, email providers, or authentication providers. We handle such information in accordance with this policy.
Here's exactly what ends up in our system: the info you give us directly (your name, email, and the contact details of your leads), how you use the product (which features you click, how long you're in the app), and anything from services you connect. Every bit of it is used to run WaveLead better for you — and none of it is ever sold.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process transactions and send related billing communications
- Generate AI-powered responses and follow-up sequences on your behalf
- Improve, personalize, and expand the Service
- Communicate with you about updates, new features, and support
- Send marketing communications where you have opted in
- Monitor and analyze usage patterns to improve user experience
- Detect, prevent, and address fraud, security issues, and technical problems
- Comply with legal obligations and enforce our Terms of Service
Your data is what makes WaveLead work for you — it's how we send AI replies on your behalf, run your follow-up sequences, and keep your account active. We'll occasionally email you about updates or new features. One thing we'll never do: use your leads' contact information for anything other than powering your account. That data is yours.
4. Lead Data and Your Clients
When your website visitors submit inquiries through WaveLead forms, their information is stored in your account and used solely to power the follow-up features of the Service.
We do not sell or use lead data for any purpose other than providing the Service to you.
When someone fills out your lead capture form, their information belongs to you — not to us. We store it in your account, use it only to send follow-ups on your behalf, and never share it with other agents, never sell it, and never use it to market anything to your leads ourselves. Your client relationships are your own.
5. Information Sharing and Disclosure
We do not sell your personal information. We may share information in the following limited circumstances:
- Service providers: Trusted third-party vendors who help us operate the Service (e.g., cloud hosting, payment processing, email delivery, AI model providers) under confidentiality obligations
- Business transfers: If WaveLead is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
- Legal requirements: When required by law, court order, or government authority, or to protect the rights, property, or safety of WaveLead, our users, or others
- With your consent: For any other purpose with your explicit consent
We don't sell your data — full stop. The only time another company ever sees your information is when they're directly running part of WaveLead for us: Stripe for billing, Resend for email delivery, Anthropic's Claude for AI replies. If WaveLead is ever acquired, your data would transfer as part of that — and we'd let you know. Like any company, we also comply with valid legal orders.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. We retain lead data in your account according to your subscription terms.
When you close your account, we will delete or anonymize your personal information within a reasonable time period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.
While you're a customer, we keep your account data so everything works. When you close your account, we delete or anonymize your data promptly — typically within 30 days. The only exception is if we're legally required to hold onto something, like a billing record. Your leads' contact info is deleted right along with your account.
7. Cookies and Tracking
We use cookies and similar tracking technologies to enhance your experience on the Service. These include:
- Essential cookies: Required for the Service to function, including authentication sessions
- Analytics cookies: Help us understand how users interact with the Service (e.g., page views, feature usage)
- Preference cookies: Remember your settings and preferences
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.
We use cookies for two things: keeping you logged into WaveLead, and understanding which parts of the product agents actually use so we can keep improving it. You can disable cookies in your browser settings, but heads up — you'll likely need to log back in every time you visit.
8. Third-Party Services
The Service integrates with third-party providers including but not limited to:
- Authentication providers (e.g., Clerk)
- Payment processors (e.g., Stripe)
- AI model providers for generating content
- Email delivery services
- Cloud infrastructure providers
These providers have their own privacy policies governing their use of your data. We encourage you to review their policies. We are not responsible for the privacy practices of third-party services.
WaveLead is built on a small set of carefully chosen providers: Clerk handles your login, Stripe processes payments, Anthropic's Claude generates your AI replies, and Resend delivers your emails. Each has their own privacy policy — we chose them specifically because their privacy practices meet our standards. We're not responsible for what they do on their end, but we've done our homework.
9. Data Security
We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security assessments.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.
Your data is encrypted in transit and at rest, and we follow industry-standard security practices — including strict access controls on who inside our team can see what. We want to be honest: no system on the internet is completely immune to attack. But we take this seriously, and if anything ever happened that affected your data, we'd contact you right away.
10. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal information
- Portability: Request your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications at any time via the link in our emails
- Restriction: Request that we restrict certain processing of your data
To exercise these rights, contact us at hello@wavelead.app. We will respond within 30 days.
Your data is yours to control. You can ask us to show you what we have, correct anything that's wrong, download a copy, or delete everything. To stop marketing emails, just hit unsubscribe in any email we send — it works instantly. For anything else, email hello@wavelead.app and we'll get back to you within 30 days.
11. Privacy Rights (CCPA / GDPR)
Depending on your location, you may have rights to access, correct, or delete your personal information. We do not sell personal information. To make a request, contact us at hello@wavelead.app.
If you're based in California or the EU, you have additional legal protections under CCPA and GDPR. The most important thing to know: we don't sell personal information — ever. If you'd like to exercise any of your rights under these laws, just email hello@wavelead.app and we'll take care of it.
12. International Data Transfers
WaveLead is operated in the United States and your data is stored and processed here.
WaveLead is a US-based company and your data is stored on servers in the United States. If you're joining from another country, just know that once your data crosses the border, US privacy law governs it. We've built our practices to respect strong privacy standards regardless of where you're located.
13. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.
WaveLead is built for real estate agents and business professionals — not minors. We don't knowingly collect information from anyone under 18. If we ever discover that a minor's data ended up in our system somehow, we'll remove it immediately without question.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice within the Service before the changes take effect. We encourage you to review this policy periodically. Your continued use of the Service after changes become effective constitutes your acceptance of the updated policy.
If we ever make a meaningful change to how we handle your data, we'll email you and post a notice inside the app before anything takes effect — not after. You deserve to know what's changing before you decide whether you're still okay with it. If you keep using WaveLead after a policy update, that's your acceptance of the new terms.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:
WaveLead
Email: hello@wavelead.app
Have a question about your data or this policy? Email us at hello@wavelead.app — we're a small team and we personally read every message. We take privacy seriously and we're happy to talk through anything.