Privacy Policy

Last updated: June 24, 2026

This Privacy Policy explains how Internet Technology Services LLC ("we", "us", "our") collects, uses, and shares information when you use the Wayfern platform. It is a companion to our Terms of Service.

1. Information We Collect

We collect only what we need to run the service. When the Wayfern browser is used locally, we do not collect any information from your personal computer. For the cloud platform we collect:

  • Account information: your email address (used as your sign-in identity), and an optional display name and avatar URL if you provide one.
  • Authentication data: one-time login codes (stored only as a hash, briefly) and session/refresh tokens that keep you signed in.
  • Billing information: your subscription status, billing period, and a customer reference held by our payment processors. We never see or store full card numbers. Card data is handled directly by Stripe.
  • Usage and metering data: counts of browser session-time, search requests, captcha solves, and proxy bandwidth, plus an append-only credit ledger. This drives billing and your usage dashboard.
  • Projects and API tokens: the projects, link tokens, and API tokens you create. API token secrets are stored only as a hash and shown to you once.

Content you fetch through the platform. Interactive browser sessions are not recorded. The Web Data and Search APIs, however, necessarily process the pages you request, and we retain that content only as long as it takes to serve and bill your request: page captures are cached for up to one hour so a repeated fetch is not billed twice, and artifacts you explicitly ask us to produce — screenshots, PDFs, and crawl results — are stored for up to 7 days so you can download them. You direct what is fetched; we process it on your instructions and do not use it to build any product of our own.

2. How We Use Information

  • To provide, operate, and maintain the platform and your browser sessions.
  • To authenticate you and keep your account secure.
  • To meter usage, process payments, and prevent fraud and abuse.
  • To send you transactional messages, such as login codes and billing notices.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Service Providers

We share information with a small set of processors strictly to operate the service:

  • Payment processors: Stripe (card payments and invoices) and NOWPayments (cryptocurrency payments).
  • Email delivery: to send one-time login codes and account notifications.
  • Cloud infrastructure and CDN: to host the platform and run browser sessions.
  • A residential proxy provider: when a session requests a specific geographic exit, its traffic is routed through our proxy partner.
  • A captcha-solving provider: when you use the captcha or search APIs, the captcha challenge is forwarded to our solving partner.

We may also disclose information if required by law, or to protect our rights, users, and the integrity of the service.

4. Cookies & Analytics

Wayfern does not use advertising or cross-site tracking cookies. To keep you signed in, the dashboard stores your session tokens in your browser's local storage on your device. For aggregate traffic statistics we use Simple Analytics, a privacy-first, cookieless analytics service that does not collect personal data or build user profiles.

5. Data Retention

We keep account and usage data for as long as your account is active. Beyond that:

  • Browser sessions are disposable. The container running a session is destroyed when it ends, and nothing from inside it is kept.
  • Projects and API tokens stay until you delete them, or until you delete your account. We do not remove them on a schedule.
  • Sign-in and security logs, which include the IP address and browser you signed in from, are deleted after 90 days. Login codes expire within minutes and are cleared within a day.
  • Billing and tax records, including invoices, are kept for as long as tax law requires — see section 6.

6. Your Rights & Account Deletion

These are self-serve from your account page — you do not need to email anyone or wait for us:

  • Get a copy of your data: download everything we hold about your account as a JSON file, including your profile, sign-in history, usage, payments, invoices and links to any screenshots, PDFs or crawl results you have stored. If two-factor authentication is on, we ask for a code first.
  • Correct your details: change your display name, or move the account to a different email address. We send a code to the new address first and tell the old one once it has changed.

You may also delete your account:

  • Users without an active subscription can delete their account at any time from the account page. Personal information (email, name) and associated data are deleted immediately.
  • Users with an active subscription must cancel it first, then delete the account from the same page. Cancelling on its own does not delete anything — nothing is removed until you ask for it.
  • Invoices are kept: tax law requires us to retain invoices and credit notes for several years, so those survive deletion. They are detached from your account and hold only what an invoice must — the billing name, address and amounts as they stood when it was issued — and are not used for anything else.
  • Records retained by our payment processors for legal and tax compliance are governed by their respective privacy policies.

Depending on where you live you may have further rights — for example to object to or restrict how we process your information. We do not sell or share personal information, so there is nothing to opt out of. For anything the account page does not cover, contact us at the address below and we will respond within the time your local law allows.

7. Security

We protect your data with industry-standard measures: encrypted transport, hashed secrets (login codes and API tokens are never stored in plaintext), and scoped access controls. No method of transmission or storage is completely secure, but we work to safeguard your information.

8. Children's Privacy

Wayfern is not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a minor has provided us data, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Substantial changes will be communicated to you, and the "Last updated" date above will reflect the revision.

10. Contact

For privacy questions or requests, contact us at:

Internet Technology Services LLC
Email: contact@wayfern.com