Our Privacy Principles
The most fundamental privacy principle we follow is that by default, anything you post to the Wavity Service is private to you, your Company and your Group/Space/Team. That is, viewing the messages and files shared within a specific Group/Space/Team requires authentication as a member of your Company or Group/Space/Team.
Wavity is the custodian of data on behalf of the Companies and Groups/Spaces/Teams that use Wavity. We don’t own Company and Group/Space/Team data. Companies and Groups/Spaces/Teams own their data. This is how it should be.
At Wavity we believe in being as transparent as we can possibly be. We try to make our Service easy to use, with configurations and options that are easy to find and understand. This is good for privacy, good for the product, and good for Wavity Customers and Users. To foster greater transparency, we have published a User Data Request Policy explaining our policy regarding user data and content removal requests.
We think that having more information be easily accessible and searchable wherever you go, whatever device you have, is better than having less. So this is how we built Wavity.
Privacy goes hand in glove with security and confidentiality. We see these things being the three legs that keep the stool balanced and upright. Each is as important as the other and if one is missing the stool won’t stand. They are all very important to us and we take them very seriously.
Updated: March 9, 2021
This policy describes how Wavity treats your information, not how other organizations treat your information. If you are using Wavity in a workplace or on a device or account issued to you by your employer or another organization, that company or organization likely has its own policies regarding storage, access, modification, deletion, and retention of communications and content which may apply to your use of Wavity. Content that would otherwise be considered private to you or to a limited group of people may, in some cases, be accessible by your Administrative Users. Please check with your employer, or Administrative Users about the policies they have in place regarding your communications and related content on Wavity. More on this below.
In this policy we talk about various roles within the Wavity Service and the privileges that come with each. It’s helpful to understand these roles and the relationships between them. Here’s the breakdown: Buyer Administrator > Account Administrator > Group/Space/Team Administrator > Users. Buyer Administrators have the most control over the Wavity Service, followed by Account Administrators and then Group/Space/Team Administrators. The person who establishes the Wavity tenant is considered the Buyer Administrator with the most control over the Service (which is why it’s not a good idea for this person to be a contractor or temp employee). Groups/Spaces/Teams can have more than one Administrator, but only one can be the Buyer Administrator or Account Administrator. Buyer Administration can be transferred to another User after the tenant is created (see prior note about temp workers). Groups/Spaces/Teams can have multiple Administrators and by default they all belong to the Group/Space/Team.
Information we collect and receive
We collect different kinds of information. Some of it is personally identifiable and some is non-identifying or aggregated. Here are the types of information we collect or receive:
Tenant information.When you create a Tenant on Wavity, we collect your email address (as the Buyer Administrator), your Company name, Wavity domain (ex: tenant.Wavity.com), your user name that appears in your Wavity Service, and password.
User information. When the Tenant Administrator creates an Account Administrator or when an Administrative User invites other Users to the Wavity Service we collect the email addresses, user names and passwords for Users invited to the Wavity Service.
Group/Space/Team information.When you create a Group/Space/Team on Wavity, we collect your Group/Space/Team name, information about Group/Space/Team Administrators and Users in the Group/Space/Group/Space/. Account and profile information.The only information we require to create a Wavity account is an email address and password. Optional information you can enter into your profile includes information such as your first and last name, your Manager, your address, your phone number and your language and timezone preferences etc. Any information you add to your profile is visible to other Users .
Billing information.If you purchase a paid version of Wavity, our third party payment processors will collect and store your billing address and credit card information.
Log data.When you use the Wavity Service, our servers automatically record information, including information that your browser sends whenever you visit a website or your mobile app sends when you’re using it. This log data may include your Internet Protocol address, the address of the web page you visited before coming to Wavity, your browser type and settings, the date and time of your request, information about your browser configuration and plug-ins, language preferences, and cookie data. Log data does not contain message content and is not routinely deleted.
Device information.In addition to log data, we may also collect information about the device you’re using Wavity on, including what type of device it is, what operating system you’re using, device settings, unique device identifiers, and crash data. Whether we collect some or all of this information often depends on what type of device you’re using and its settings.
Wavity usage information.This is information about how you and your company use the Wavity Service.
Service integrations.If you integrate with an official Wavity integration we will connect that service to ours.
We do not receive or store your passwords for any of these services.
If you use an official Wavity integration, Wavity will not use, share or store any of your data provided by the third party provider. Wavity will access your data after you have authorized Wavity to access your data and provided credentials to access your data using Application Programming Interfaces (APIs) provided by the third party provider and industry standard protocols such as Oauth. Wavity accesses your data strictly for the purpose of displaying and making your data available for you to use on the Wavity Platform and Applications. Access to your data can only be granted by you and is valid only for the duration of your Wavity session. No one other than the user who has granted Wavity access to their data will be able to access the user’s data on the Wavity Platform.
If you add an official Wavity integration, the third party provider of the integration may share certain information about your account with Wavity. Wavity is not responsible for how Users may use and collect data through official Wavity integrations.
An official Wavity integration can be removed at any time. Removing an official Wavity integration unbinds that integration on a go-forward basis.
Communication content that you send and receive within Wavity.This includes:
The message content itself. This content can include messages, pictures, files and video among other types of files.
When messages or files were sent and by whom, when or if they were seen by you, and where you received them (in a Group/Space/Team or Notification, for example).
Cookies are small text files sent by us to your computer and from your computer to us, each time you visit the Wavity Service. They are unique to your Wavity account or your browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire.
If you access Wavity through your browser, you can manage your cookie settings there but if you disable all cookies you may not be able to use Wavity.
Wavity sets and accesses our own cookies on our company-owned domains. In addition, we use 3rd parties like Google Analytics and Mixpanel for website analytics. You may opt-out of third party cookies from Google Analytics and Mixpanel on their respective websites. We do not currently recognize or respond to browser-initiated Do Not Track signals as there is no consistent industry standard for compliance.
How we use your information
We use your information for the following:
Providing the Wavity Service.We use information you provide to authenticate you and deliver message content to you and from you
Understanding and improving our products.To make the product better we have to understand how users are using it. We have a fair bit of data about usage and we intend to use it many different ways to improve our products, including research. This policy is not intended to place any limits on what we do with usage data that is aggregated or de-identified so it is no longer tied to a Wavity user.
Investigating and preventing bad stuff from happening.We work hard to keep Wavity secure and to prevent abuse and fraud.
Communicating with you Solving your problems and responding to your requests.If you contact us with a problem or question, we will use your information to respond to that request and address your problems or concerns.
When you use Wavity, you have control over a number of things with respect to your own privacy and choices about how your content is visible to others or not. If you are a Wavity Administrative User, you have additional choices that impact your Groups/Spaces/Teams privacy. Users will not have access to all of the same choices that Administrative Users do. That is because Wavity is set up to provide Administrative Users the maximum ability to control their Groups/Spaces/Teams.
Choices for Users
While you cannot completely delete a profile once it is created, you can update your profile information at any time and modify your settings.
When you upload a document or a file on Wavity, you can decide where to share it and with whom. You can also share documents with your Group/Space/Team or with another User..
Choices for Administrative Users
Administrative Users have the ability to manage and make changes to Groups/Spaces/Teams membership or when Users can edit or delete data and . Administrators can also deactivate member accounts for their Groups/Spaces/Teams.
Only an Administrative User can deactivate or delete a Group/Space/Team.
For more about these privileges, choices, and permissions, see our FAQ.
Other Choices The browser you use may provide you with the ability to control cookies or other types of local data storage.
Your mobile device may provide you with choices around how and whether location or other data is shared with us.
Wavity does not control these choices, or default settings, which are offered by makers of your browser or mobile device.
Sharing and Disclosure
There are times when communications and related content and other user information may be shared by Wavity. This section discusses only how Wavity may share user information. Organizations that use Wavity may have their own policies for sharing and disclosure of information they can access through Wavity. Wavity may share information:
With consent, to comply with legal process, or to protect Wavity and our users.When we have your consent or if we believe that disclosure is reasonably necessary to comply with a law, regulation or legal request; to protect the safety, rights, or property of the public, any person, or Wavity; or to detect, prevent, or otherwise address fraud, security or technical issues. If we receive a law enforcement or other third party request for information we will provide prior notice to the subject of the request where we are legally permitted to do so. For more information on Wavity’s policies for responding to requests for user data, please see our User Data Request Policy.
If you add an official Wavity integration, Wavity may share information about you with the provider of the integration. Wavity is not responsible for how the provider of the integration may collect and use your data.
About you and your organization.
In addition, there may be times when you contact Wavity to help resolve an issue specific to you. In order to help resolve the issue, we may need to share your concern with your Administrator or your Company..
We may also share aggregated or de-identified information with our partners or others for business or research purposes. For example, we may tell a prospective Wavity customer the average number of users using the Wavity Service in a day or may partner with research firm or academics to explore interesting questions about applications and workplace communications. This policy is not intended to prohibit the disclosure and use of aggregated or de-identified data.
Wavity takes reasonable steps to protect information you provide to us as part of your use of the Wavity service from loss, misuse, and unauthorized access or disclosure. These steps take into account the sensitivity of the information we collect, process and store and the current state of technology. When you enter sensitive information (such as sign-in credentials) we encrypt the transmission of that information using secure socket layer technology (SSL). We follow generally accepted standards to protect the personal data submitted to us, both during transmission and once we receive it. However, no electronic or email transmission or digital storage mechanism is ever fully secure or error free.
To learn more about current practices and policies regarding security and confidentiality, please see our Security Practices; we keep that document updated as these practices evolve over time.
Wavity is not directed to children under 13. If you learn that a minor child has provided us with personal information without your consent, please contact us.
We may change this policy from time to time, and if we do we’ll post any changes on this page. If you continue to use Wavity after those changes are in effect, you agree to the revised policy. If the changes are material, we may provide more prominent notice or seek your consent to the new policy.
Wavity, Inc. 1900 McCarthy Blvd, Suite 100, Milpitas, CA 95035