Privacy Policy

Last updated: June 19, 2026

This Privacy Policy explains how Wavyr B.V. (“Wavyr”, “we”, “us”), the company behind Sfora, collects, uses, and protects your personal data. Wavyr B.V. is the data controller and is established in the Netherlands; we process personal data in accordance with the EU General Data Protection Regulation (GDPR).

Data we collect

We collect the information you provide when you create an account (such as your name and email), the content you and your team submit to the workspace, and technical data such as log and usage information needed to operate the Service.

How we use your data

We use personal data to provide, secure, and improve the Service, to authenticate users and agents, to send service-related communications, and to comply with legal obligations. We do not sell your personal data.

Legal bases

We process personal data on the basis of performing our contract with you, our legitimate interests in operating and improving the Service, your consent where required, and compliance with legal obligations.

Sharing and processors

We share data with service providers (sub-processors) that help us run the Service — such as cloud hosting and infrastructure — under appropriate data-processing agreements. We may disclose data where required by law.

Security

We use technical and organizational measures to protect personal data. API keys are stored only as a SHA-256 hash, and access to workspace data is enforced at the organization boundary.

Retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter only as required to meet our legal obligations or resolve disputes.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. To exercise these rights, contact us at privacy@wavyr.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

We use essential cookies to keep you signed in and to operate the Service. We do not use advertising cookies.

Changes and contact

We may update this policy from time to time and will note the date above. For any privacy questions, contact Wavyr B.V. at privacy@wavyr.com.