Privacy Policy
Plain-English on what we collect, why, and the control you have over it.
Last updated: 9 July 2026
Wavense helps you see which known vulnerabilities affect the software you run. To do that we hold a small amount of data about you and your stack. This policy explains exactly what, and how you stay in control. We collect the minimum we need to run the product — we don’t sell your data and we don’t run ads.
What we collect
- Account details — your email address, used to sign you in (passwordless) and, if you opt in, to send exposure alerts.
- Your stack — the vendors, products, versions, network maps, and pasted inventories you add so we can match them to CVEs. This is yours; it’s tied to your account.
- Feedback — anything you submit through the feedback form (name, email, message).
- Basic usage — standard request logs and aggregate analytics to keep the service reliable.
How we use it
- To provide the core service — filtering and ranking the CVEs that affect your stack.
- To send the exposure alerts you opt into, and to reply to feedback that needs a response.
- To operate, secure, and improve Wavense.
Who we share it with
We use a short list of trusted providers to run the product, and only share what they need to do their job:
- Supabase — authentication and database (your account + stack are stored here, in the Sydney region).
- Vercel — application hosting.
- Google (Gemini) — powers optional AI features (e.g. identifying a product from a name). Only the text you ask it to analyse is sent.
- Email provider — to deliver sign-in links and alert digests you’ve opted into.
We do not sell, rent, or trade your personal data to anyone.
Retention & deletion
We keep your data while your account is active. You can remove products from your stack at any time, and you can ask us to delete your account and associated data entirely — email us and we’ll action it.
Security
Data is encrypted in transit, access to user data is row-level protected, and we follow least-privilege practices. No system is perfectly secure, but protecting your data is core to what we do.
Cookies
We use only the cookies required to keep you signed in. No advertising or cross-site tracking cookies.
Your rights
You can access, correct, export, or delete your data. To exercise any of these, or if you have a privacy question, contact us at privacy@wavense.com.