Privacy Policy

1. Who we are and scope

VEDTECH Solutions is the data controller for personal data described in this policy. This policy covers (a) this website, (b) the free Waykeep local product ("Waykeep Core"), and (c) the paid Waykeep Team service ("Waykeep Team"). It does not cover third-party sites we link to, such as GitHub or npm; their own policies apply there.

2. This website

The website sets only the cookies needed to run it (session and security cookies). We do not run analytics trackers or advertising pixels, and we do not use third-party marketing cookies. Standard web server logs (IP address, request time, requested page, user agent) are kept for security and troubleshooting and are routinely deleted.

If you submit the contact form, we store what you send — your name, email address, and message — so we can read and answer it. We keep contact submissions only as long as needed to handle your enquiry and any follow-up. Do not send passwords, API keys, or sensitive memory content through the form.

3. Waykeep Core: your data stays with you

Waykeep Core is local-first by design. Your memory database, full-text index, and locally computed embeddings are stored on your machine and are not transmitted to us. Waykeep Core contains no telemetry, no analytics, and no phone-home behavior: we do not receive your memories, your code, your prompts, or usage statistics from it.

Installing the package from npm and cloning from GitHub are handled by those platforms under their own privacy policies; we do not receive personal data about your downloads beyond the aggregate counts those platforms publish.

4. Waykeep Team: what we process when you subscribe

When Waykeep Team launches and you create a team, we process the following, strictly to provide the service:

Account data. Your email address, display name, and authentication identifiers, used to create and secure your account, deliver seat invitations, and send service notices (for example billing and security emails).

Billing data. Your subscription plan, seat count, billing history, and invoicing details. Card payments are processed by our payment processor; we do not store full card numbers on our systems.

Synced team memory. Only memory content you explicitly place in a team-synced project is uploaded. Project memory you keep local, and projects you mark private, never enter the hosted path. Synced content is stored so your teammates' sessions can retrieve it — that is the product.

Service and security logs. Connection metadata (IP address, timestamps, request identifiers) used for authentication, rate limiting, abuse prevention, and diagnosing faults.

We use this data to operate, secure, bill, and support the service. We do not sell personal data, we do not share it for cross-context behavioral advertising, and we do not use your synced memory content to train machine-learning models.

5. Security, and an honest limit

Team data is encrypted in transit (TLS) and encrypted at rest with managed keys. Access to production systems is restricted to authorized operators, and the service is engineered fail-closed: when entitlement or billing state cannot be verified, access is suspended rather than opened.

Honest limit: at launch, Waykeep Team is not end-to-end encrypted. Authorized VEDTECH operators can technically access hosted team data where necessary to operate, secure, or support the service, and will only do so for those purposes. Do not sync content into a team project that you are not prepared to store on a managed service. End-to-end encryption tiers are on the public roadmap.

6. Processors and international transfers

We use a small set of service providers to run Waykeep Team: cloud hosting and database infrastructure, an authentication provider, an email delivery provider, and a payment processor. Each acts under contract, only on our instructions, and only to provide their function. A current list of subprocessors is available on request through the contact form.

Our infrastructure may be located outside your country. Where data protection law requires safeguards for international transfers (for example, transfers of EU or UK personal data), we rely on appropriate safeguards such as the applicable standard contractual clauses.

7. Retention

Account and synced team data are kept while your subscription is active. After a subscription ends, you have a 30-day window to export your team data, after which hosted copies are deleted from production systems, with residual copies leaving encrypted backups on their fixed rotation schedule. Billing records are kept as long as tax and accounting law requires. Security logs are kept for a short, fixed period appropriate to abuse prevention.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to the processing of, or delete your personal data, and to complain to a supervisory authority. This includes rights under the EU and UK GDPR, under US state privacy laws such as the California Consumer Privacy Act (we do not sell or share personal data as those terms are defined there), and under Jamaica's Data Protection Act, 2020. To exercise any right, contact us through the website contact form; we will verify the request and respond within the time the applicable law sets. We do not discriminate against you for exercising privacy rights.

9. Children

Waykeep is a professional developer tool. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.

10. Breach notification and changes

If a personal data breach affects you, we will notify you and the relevant authorities as the applicable law requires. When we change this policy, we will update the date above; for material changes affecting Waykeep Team subscribers, we will give notice by email or in-service message before the change takes effect.