1. Introduction

Wavon ("we", "our", or "us") operates the wavon.com website and note-taking application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Wavon is the data controller for the personal data processed through our service. For any privacy-related inquiries, please contact us at: privacy@wavon.com

3. Information We Collect

3.1 Information You Provide

• Account Information: Email address, display name, and password when you register
• Content: Notes, drawings, folders, tags, and attachments you create
• Communications: Any messages you send to us for support

3.2 Automatically Collected Information

• Usage Data: How you interact with our service (features used, actions taken)
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, pages viewed

3.3 Cookies and Local Storage

We use essential cookies and local storage for:

• Authentication (keeping you logged in)
• Preferences (theme settings)
• Offline functionality (caching your synced notes)

We do not use tracking cookies or third-party advertising cookies.

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract: To provide our note-taking service to you
• Legitimate Interests: To improve our service and ensure security
• Consent: For optional features like marketing communications
• Legal Obligation: To comply with applicable laws

5. How We Use Your Information

• To provide, maintain, and improve our service
• To authenticate you and secure your account
• To sync your notes across devices
• To provide customer support
• To send service-related communications
• To detect and prevent fraud or abuse

6. Data Sharing and Disclosure

We do not sell your personal data. We may share data only:

• With your consent
• With service providers who assist in operating our service (under strict data protection agreements)
• To comply with legal obligations or protect our rights
• In connection with a merger or acquisition (with notice to you)

7. Data Retention

• Active accounts: We retain your data while your account is active
• Deleted notes: Permanently deleted after 30 days in trash
• Closed accounts: Data deleted within 30 days of account closure
• Backups: Removed from backups within 90 days

8. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@wavon.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encrypted storage for sensitive data
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

10. International Data Transfers

If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our service. Continued use after changes constitutes acceptance.

13. Contact Us

For privacy inquiries or to exercise your rights:

• Email: privacy@wavon.com
• Website: wavon.com

You also have the right to lodge a complaint with a supervisory authority in your country of residence.