Privacy Policy

1.Who is responsible

AskWendy LLC, a Virginia limited liability company, at 4726 16th Rd N, Arlington, VA 22207, is responsible for the service you use: everything you and Wendy make together. In the words of the European law, we are the controller for it.

If you use Wendy through a workspace your employer or another organization pays for, that organization is responsible for the roster (your name as entered, your work email, your seat) and for the profile you share into the workspace by joining, and we process those for it. Everything else stays ours to answer for, to you.

Write to support@askwendy.ai for anything about your data: a request, a correction, an objection, an appeal. Write to hello@askwendy.ai for anything else. A person reads both. We have not appointed a representative in the EU or the UK; if we do, we will name them here.

2.What we keep

That table is the whole promise. Here is the same thing by source.

• Your account: the email you sign in with, the provider you used, when you last signed in, and your settings.
• Your assessment: your answers, kept so we can re-score them if the method improves, and the profile scored from them. Under California law the profile is an inference we drew. Nobody sees your answers, including us in support.
• What you say to Wendy: your side of each conversation and hers.
• What Wendy remembers: memory lines written in your words, each one listed in Account, each one editable and deletable.
• Connected accounts (Microsoft 365, Slack and Intercom; Gmail for the team and, later, the public): who you talk to, subject lines, meeting titles, dates, a one-line note, and whether something is still waiting on someone. Never the message text. The whole of it is at What Wendy keeps, and section 5 says what each provider requires of us.
• Your device: the kind of browser and device, the pages you open, and errors, kept as counts under your account id, never with your words.
• Payment: Stripe keeps your card; we see the last four digits and your invoices.

3.Why we use it, and on what basis

We use what we keep for one thing: to coach you. The reasons the European and UK laws recognize, one per purpose:

• Running Wendy for you: your account, your report, your conversations and your memory. Basis: our contract with you. Kept as long as you keep the account, or as section 10 says.
• Health and family matters you bring up with Wendy at home. Basis: your explicit consent, asked for in the first coaching session at home and revocable in Account. Section 4 and the consumer health data section.
• Notes from a connected account. Basis: your consent at the connect screen, and the provider’s own permission screen. Kept 90 days, rolling.
• Rows about people who are not users. Basis: our and the user’s legitimate interest in the user understanding their own working and home life. Section 8.
• Payment, receipts and service notices. Basis: our contract with you, and the law on records.
• Security, abuse control and the safety response. Basis: our legitimate interest in running a service that is safe, and the law where it requires a response.
• Counting how Wendy is used, without your words. Basis: our legitimate interest in knowing that the product works; events carry no answers, scores, names or text.

4.Sensitive information and consumer health data

The assessment asks nothing about your health, your mood, your sleep or anything similar. Wendy never infers any of it. What Wendy can hold about your health is only what you choose to tell it at home, in your own words, and the memory lines it writes from that.

Wendy at home asks for your explicit consent in its first coaching session, and you can withdraw it in Account, which stops Wendy writing anything more there and offers to delete everything on your home side. Everything this covers, in the order the Washington law and its like require, is in the consumer health data section of this policy.

Under California law, the contents of messages Wendy reads from an account you connect are sensitive personal information. We use them for one thing, writing a one-line note for you, and never keep them. You may ask us to limit the use of sensitive information at any time; because we already use it only to provide what you asked for, the answer is that we do.

5.Connected accounts, provider by provider

When you connect an account, Wendy reads it to write one-line notes for you and keeps no message text. Each provider requires us to say some things in its own terms. Here they are, word for word. Today you can connect Gmail or Microsoft 365; the Slack and Intercom paragraphs are here because each platform’s terms require them before a connection exists, so what Wendy will do with that data is on record before it does.

6.How AI processing works

Wendy runs on Claude models from Anthropic. When you take the assessment, your answers are scored by fixed rules on our servers; the model writes sentences from the scores and never sees your answers. When you chat with Wendy, your message and the context Wendy needs are sent to Anthropic for a single response. When you connect an account, each message is read once into memory, sent to Anthropic once to write a one-line note, and discarded. Anthropic does not use anything we send to train its models; our contract with them says so. No Anthropic or Wendy employee reads your conversations. We do not train models on your data. How long Anthropic holds what we send depends on which model does the work; the table below is kept current.

7.Who we share with

We do not sell your data and we do not share it for advertising. We share it with the companies that run Wendy for us, each under a contract that limits them to that: hosting, the database, the AI provider, payments, email and cookieless analytics. The full list, with what each one holds and where, is at askwendy.ai/subprocessors. We email account holders 30 days before adding one.

We disclose data when the law requires it, after checking that the request is valid and as narrowly as the request allows. If we are sold or merge, your data goes with the service under this policy, we tell you first, and data from a Google account is transferred only with your prior consent.

8.People who are not Wendy users

People who are not our users can still appear in a notebook: colleagues, clients, contacts and family members a user mentions. This section is for them.

If you are not a Wendy user and a Wendy user mentions you, writes about you, or has messages with you in a connected account, Wendy may hold your name, your organization, your relationship to that user and a one-line note about an interaction the user had with you. It never holds the text of anything you wrote. We keep this for the user’s own coaching, on the basis of our and the user’s legitimate interest in the user understanding their own working and home life, and we delete it on the schedule at askwendy.ai/privacy#retention. We did not contact you directly because we have no relationship with you and doing so would mean processing more of your data, not less. You can object at support@askwendy.ai: we will verify that you control the email address in question and stop Wendy from holding a row about that address across every notebook.

9.Workspaces

A workspace your employer pays for can see the roster, the seats, and your workspace profile: the card you wrote, your code, pattern and rose, your scores as bands, what you need from people, how you and any colleague fit, where any group you're in sits, and, as you use Wendy, the working habits it has noticed from your own use: your working-style patterns and preferences, how quickly you tend to reply, how many meetings you tend to have, and which colleagues you work with most, as bands. Colleagues can tell from this that you've connected an inbox or calendar; they never see what's in it. When you join a workspace, you see this list first, and you can take any line out of your workspace profile at any time. It cannot see your answers, your conversations, your notes, your memory, anything else from an inbox or a chat tool, how much you use Wendy, or whether you use the personal side of Wendy at all. Managers and admins see the same profiles the team sees.

Never for hiring, reviews or pay. Our terms and our agreement with your employer forbid it, and we can ask your employer to show us that this is still true. The whole of what a workspace can and cannot see is at askwendy.ai/trust/workspaces.

When you leave, or your seat ends, your profile in the workspace is deleted the same day and your account stays yours. Your name and work email are cleared from the roster 30 days later.

10.How long we keep things, and deletion

Everything you made with Wendy can be deleted by you, in the app: a memory line, a person, a connected account, your report, a notebook, or the whole account. Deleting the account revokes your sessions at once, cancels any plan, removes your profile from every workspace, and then a job deletes everything within 30 days of your request; there is a 72-hour grace period in which you can change your mind. You can download everything first from Account.

The numbers in the table come from the same list our nightly job checks the database against, so the schedule you read is the schedule that runs.

11.Your rights, and how to use them

Wherever you live, you can see everything Wendy holds about you, download it, correct it, and delete it, from Account. Nothing you ask for changes how Wendy treats you.

For anything Account does not cover, write to support@askwendy.ai. Before we act on a request that arrives by email, we check that you are the account holder: we send a six-digit code to the account’s email address, the same way you sign in, and act once you type it back. A signed-in action needs no further check. Someone acting for you must show your signed permission, and we confirm with you by code.

Or use the form at askwendy.ai/privacy/request; it sends the code and logs the request for you.

If you live in the EU or the UK: you may ask for access, a copy you can take with you (Account gives you one as a file), correction, erasure, restriction, and you may object, including to the legitimate-interest processing described in sections 3 and 8, and withdraw a consent at any time. We answer within one month, which the law lets us extend by two for a complex request; we will tell you if we do. You may complain to the supervisory authority where you live.

If you live in California: you may ask what we collect and why, ask for it to be deleted or corrected, take a copy with you, limit our use of sensitive personal information, and opt out of sale or sharing. We do neither, so there is nothing to opt out of and no link for it. We answer within 45 days, which the law lets us extend by 45. We never treat you differently for asking.

If you live in another US state with a privacy law: the same rights, and if we refuse a request you may appeal by writing to the same address; a second person reviews it and answers in writing within 45 days, and if we still refuse, the answer names your state attorney general’s complaint channel.

If you live in Washington or a state with a consumer health data law: the rights in the consumer health data section, on the same 45-day clock.

12.Where your data is

Wendy runs in the United States: our database in the nam5 region of the United States, our servers in the US East region, and our providers there too. If you use Wendy from the EU, the UK or elsewhere, your data is transferred to the United States to run the service. Where the law requires a transfer mechanism, we rely on the standard contractual clauses approved by the European Commission, with the UK addendum to them where the UK law applies. Our Data Processing Agreement says the same thing to a workspace.

13.Security

Everything travels encrypted and is stored encrypted. The keys that let Wendy read a connected account are encrypted a second time, with a key we rotate. The database refuses every write from a browser and every read of one person’s data by another; only our servers write, and only after checking who is asking. Nobody at Wendy reads your conversations: there is no screen and no route in Wendy that shows one person’s conversation to anyone else, including to us in support. If we ever learn of a breach that puts you at risk, we tell you without undue delay, and the authorities on the clocks the law sets.

14.Children

Wendy is for adults. We do not knowingly collect personal information from anyone under 18, and we do not offer accounts to them. If we learn that a user may be under 18, we end the session and pause the account, and we write to the account holder. A person at Wendy decides what happens next; software never does that on its own. If the person tells us they are under 18, or a person at Wendy confirms it, we close the account and delete its data. If we hear nothing, the account stays paused, not deleted. The account holder can reply to our email or write to hello@askwendy.ai at any time to say they are 18 or older, to appeal, or to ask us to explain a decision. If you believe a person under 18 has used Wendy, write to support@askwendy.ai; we will ask the account holder, not act on the report alone.

15.Cookies and storage

Wendy sets no cookie on any marketing page, uses no advertising cookies and no third-party tracking, and shows no banner because nothing it stores needs your consent. Every cookie and every key kept on your device is listed, with its lifetime and purpose, in our cookie and storage notice.

16.Changes to this policy

When a change reduces a right you have or adds a purpose, we email account holders 30 days before it takes effect; it is a service notice, so it is sent even if you have switched other email off. A copy edit that changes no meaning moves the date under the title and nothing else. Previous versions stay readable at the link under the title.