Privacy Policy
Last updated: February 13, 2026
Wavesite is operated by CloudSurf Software LLC ("we", "us", or "our"). This Privacy Policy describes how we collect, use, and share your information when you use our website builder service at wave.site and our mobile applications.
Information We Collect
Account Information
When you create an account, we collect your email address and an encrypted password credential. We use the OPAQUE protocol for authentication — we never see or store your plaintext password.
Website Content
We store the content you create using Wavesite, including text, images, and SurfDoc source code for your websites.
Payment Information
If you subscribe to Wavesite Pro, payment is processed by Stripe (web) or Apple (iOS App Store). We store your Stripe customer ID but never your credit card number. Apple manages payment details for App Store purchases entirely.
Usage Data
We collect basic server logs (IP address, request timestamps, pages visited) for security and debugging purposes. We do not use third-party analytics or advertising trackers.
How We Use Your Information
- To provide and maintain the Wavesite service
- To process your subscription and payments
- To send transactional emails (account verification, password reset)
- To respond to support requests
- To generate website content when you use the AI chat feature (powered by Anthropic's Claude)
AI Features
When you use the AI chat feature to generate or modify website content, your messages and current site content are sent to Anthropic's Claude API. Anthropic does not use your data to train their models. See Anthropic's Privacy Policy.
Data Sharing
We do not sell your data. We share data only with the following service providers, solely to operate Wavesite:
- Stripe — payment processing
- Apple — App Store subscriptions and payments
- Anthropic — AI content generation (Claude API)
- Amazon Web Services — transactional email (SES)
- Fly.io — hosting infrastructure
Data Retention
We retain your data for as long as your account is active. When you delete your account, all personal data, websites, and associated content are permanently deleted from our servers.
Your Rights
- Access: View your data in your account settings.
- Deletion: Delete your account at any time from the app or website. All data is permanently removed.
- Export: Download your website source code from the editor.
Children
Wavesite is not intended for children under 13. We do not knowingly collect personal information from children under 13.
Changes
We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date.
Contact
For privacy questions, contact us at privacy@cloudsurf.dev.