Privacy Policy

1. Scope

This Privacy Policy explains how WaveForm (Polaris EcoSystems) collects, uses, and shares personal data when you use our website, platform, and mobile applications.

2. Data we collect

• Account data — name, email, organization, authentication identifiers (via Cognito magic-link).
• Usage data — logs, device + browser metadata, and product telemetry used to operate and secure the Services.
• Capture data — imagery, LiDAR, pose, and location collected through WaveForm Field. This may include incidental personal data captured on site; you are the controller of that content.
• Billing data — processed by our payment provider (Stripe); we do not store full card numbers.

3. How we use data

To provide, secure, and improve the Services; to communicate with you; to meet legal obligations; and to enforce our terms. We do not sell personal data.

4. Sharing

We share data with subprocessors that help us run the Services (hosting, payments, email). The current list is at /legal/subprocessors. We may disclose data where required by law.

5. Security

We protect data with encryption in transit and at rest, per-customer access controls, and an append-only audit log. See the Security page for detail.

6. Retention

We retain personal data for as long as your account is active and as needed to meet legal obligations. Audit records are retained on a permanent basis; true deletion occurs only on documented regulatory request.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data. Exercise them via privacy@waveform.vision.

8. International transfers

We may process data in the United States and other regions where our subprocessors operate, with appropriate safeguards.

9. Contact

Privacy questions: privacy@waveform.vision.