Privacy Policy

Effective September 1, 2026 · Last updated September 1, 2026

This Privacy Policy explains how Waystead collects, uses, discloses, retains, and protects personal information when you use the Waystead website, browser extensions, accounts, bookmark synchronization features, and related services. It also explains the privacy rights and choices that may be available to you.

1. Scope and Responsibility

Waystead is responsible for the personal information described in this Privacy Policy. This policy applies to the Waystead website, browser extensions, Account services, synchronization features, support channels, and related services. It does not apply to third-party browsers, extension stores, authentication providers, payment providers, or websites saved in your bookmarks, which operate under their own privacy policies.

You can contact Waystead about this policy or a privacy request through the Contact Us page.

2. Information We Collect

The information we collect depends on how you use the Service. It may include:

Account and authentication information, such as your name, email address, profile image, email-verification status, authentication provider, and Account creation and update timestamps
Bookmark Data, including bookmark and folder titles, URLs, folder structure, order, versions, changes, merge information, conflicts, and recovery data
Connected-browser and device information, such as a device identifier, display name, browser family, connection status, credential hashes, pairing or session-grant records, synchronization timestamps, and revocation status
Service and security information, such as session identifiers, IP address, user agent, request timestamps, error and diagnostic information, and records used to prevent abuse and protect Accounts
Communications, including your email address, selected topic, message, and related correspondence when you contact us
Transaction information if paid services become available, such as plan, billing period, payment status, currency, tax information, and transaction identifiers. Payment card details will be handled by the payment provider rather than stored directly by Waystead

3. Sources of Information

We collect information directly from you, from the Waystead extension installed in a Browser you connect, automatically when you interact with the Service, and from service providers you choose to use, such as an authentication or payment provider. We do not collect bookmarks outside the bookmark bar or other browser areas unless the product interface expressly identifies an additional scope and you authorize it.

4. How We Use Information

We use personal information to:

create and secure Accounts, authenticate users, and maintain sessions
connect Browsers and provide backup, comparison, synchronization, merge, conflict-resolution, version, recovery, export, and deletion features
operate, maintain, troubleshoot, and improve the reliability and security of the Service
provide support and respond to questions, complaints, and legal requests
administer paid plans, billing, cancellation, and refunds if paid services become available
prevent fraud, abuse, unauthorized access, and violations of the Terms of Service
comply with legal obligations and establish, exercise, or defend legal claims

5. Legal Bases for Processing

We process personal information as necessary to provide the Service, comply with legal obligations, and pursue legitimate interests such as securing, maintaining, and improving the Service. We use consent where applicable law requires it, and you may withdraw consent at any time without affecting processing that occurred before withdrawal.

We will not rely on consent when another legal basis applies merely because you use the Service or acknowledge this Privacy Policy.

6. How We Disclose Information

We may disclose personal information to vendors that provide hosting, database, email delivery, authentication, security, customer support, payment, and professional services. They may process information only for the services they provide to Waystead and subject to appropriate contractual restrictions.

We may also disclose information when reasonably necessary to comply with law, protect users or the Service, investigate fraud or security incidents, enforce our agreements, or complete a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets. Where required, we will provide notice and protect your rights before information is transferred to a successor.

Waystead does not sell personal information for money and does not share personal information for cross-context behavioral advertising. Waystead does not use Bookmark Data to build advertising profiles or serve targeted advertising. If these practices change, we will update this policy and provide any notice and opt-out rights required by law before the change applies.

8. International Data Transfers

Your personal information may be processed in locations where Waystead and its service providers operate. When applicable law restricts a transfer, we use safeguards required for that transfer.

9. Data Retention

We retain Account information, Bookmark Data, connected-browser records, and synchronization history while your Account remains active and as needed to provide the Service. Short-lived authentication, pairing, initialization, and security records expire according to their operational purpose. Support and transaction records are retained for the period reasonably necessary to resolve the matter and meet legal, accounting, tax, fraud-prevention, and recordkeeping obligations.

When you delete cloud data or your Account, we delete or de-identify covered information from active systems within a reasonable period, subject to any information we must retain for security, fraud prevention, legal compliance, dispute resolution, or backup-cycle completion. Backup copies are isolated from ordinary use and removed according to the applicable backup schedule.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These include Account-scoped access controls, hashed browser credentials, limited extension permissions, private response and cache controls for authenticated data, and procedures for export and deletion. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights and Choices

Depending on where you live, you may have the right to access, obtain a copy of, correct, delete, restrict, or object to processing of personal information, or request portability. You may also have the right to withdraw consent and appeal a decision concerning a privacy request.

Available Account tools allow you to export Bookmark Data, delete cloud Bookmark Data, and remove a connected Browser. Deleting cloud Bookmark Data keeps your Account and subscription. You may also submit a request through the Contact Us page. We may need to verify your identity and authority before completing a request. We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right.

12. Children's Privacy

The Service is not directed to children. You must meet the minimum legal age required to use the Service or have permission from a parent or legal guardian where applicable law permits it. If we learn that we collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes to the Service, law, or our data practices. We will post the updated policy and revise the Last updated date. If a change materially affects your privacy rights, we will provide any additional notice or obtain consent required by law before the change takes effect.

14. Contact Us

For privacy questions, requests, or complaints, contact Waystead through the Contact Us page.