Wayfile collects only what's necessary to do its job: your email address, the trips you create or are added to, and the documents you upload for parsing. We do not read inboxes (Wayfile has no IMAP/OAuth mailbox access at any tier — ingest is limited to direct upload, photo capture, and forward-to-address).
What we store
- Account: email, display name, an avatar color, the personal tenant created on signup.
- Trips and segments you create or are granted access to.
- Source documents you upload (PDFs, images), encrypted at rest in Cloudflare R2.
- Audit log of admin-initiated account actions (support-assisted recovery only).
Third-party processors
- Postmark (transactional email, in/out)
- Cloudflare R2 (document storage)
- Google Gemini API (parsing) — by default; per-tenant override available
- Stripe (subscription billing)
- Neon (Postgres hosting)
Your rights
You can export every record we hold for your account from account settings at any time. Deletion of an account also deletes attached source documents from R2. Email us at hello@wayfile.app for any other request.