Privacy Policy

1. Information We Collect

This privacy policy ("Privacy Policy") describes how Waveye, Inc. ("Waveye", "we", "us", "our") collects, uses, and protects information when you use the Sheepdoc file-sharing service ("Sheepdoc", "Service"): when you have an account and share files ("account holders"), and when you open files shared with you ("viewers").

1.1. Account Holders

• Account Information: Name, email address, password (stored hashed), team and company name, and preferences such as time zone
• Your Content: Files you upload or create, the versions we render from them for viewing, and the folders, share links, contacts and accounts you set up
• Billing Information: Your plan and billing details. Payments are handled by our payment processor; we do not store card numbers
• Technical Information: Sign-in times, IP address, browser and device information, and error reports

1.2. Viewers

• Email Address: When the person who shared a file requires it to verify access. If they turn on watermarking, it is also marked on the copy you view
• Access Logs: Date, time, and file accessed, IP address and the approximate location derived from it, browser type, and device information
• Viewing Activity: Which pages or slides you view and for how long, videos you play, and links you click

2. How We Use Your Information

We use your information to:

• Provide the Service: store, render, and deliver files, and run your account
• Show account holders how the files they share are viewed, including who viewed them, when, from roughly where, and which pages they spent time on
• Maintain security and prevent unauthorized access
• Create audit logs for content sharing
• Process payments
• Diagnose errors and keep the Service reliable
• Communicate about service-related matters

3. Information Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties except:

• With the account holder who shared a file with you: as a viewer, your email address, access logs, approximate location, and viewing activity for that file are visible to them and their team
• When required by law or legal process
• To protect our rights, property, or safety
• With service providers who assist in our operations (under strict confidentiality)
• With an AI assistant you connect to your account, at your direction (see Connected AI Assistants)

4. Data Storage and Security

We implement appropriate security measures to protect your information:

• Data is stored securely with encryption in transit and at rest
• Access logs are retained for security and compliance purposes
• We regularly review and update our security practices

5. Your Rights and Choices

5.1. For California Residents (CCPA)

You have the right to:

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

5.2. For European Residents (GDPR)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Access – Request access to the personal data we hold about you.
• Rectification – Request correction of inaccurate or incomplete personal data.
• Erasure – Request deletion of your personal data, subject to certain legal obligations.
• Restriction – Request restriction of processing in certain circumstances.
• Portability – Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
• Objection – Object to processing when it is based on our legitimate interests.

Additional Notes on Processing

We use technical information such as IP addresses for security, fraud prevention, and troubleshooting, and to show account holders the approximate location of their viewers. We do not use this information for advertising or marketing.

Legal Bases for Processing

• Performance of a contract – To provide you with access to shared files and related services.
• Compliance with legal obligations – To meet regulatory or legal requirements.
• Legitimate interests – To ensure the security and proper functioning of our Service, and to let account holders see how the files they share are viewed.

Exercising Your Rights

To exercise any of these rights, please refer to the Contact Us section below. We may need to verify your identity before processing your request. We will respond within the timeframes required under law.

6. Cookies and Tracking

We use cookies and local storage to:

• Keep account holders signed in
• Remember your email address for convenient future access
• Improve user experience by reducing repeated email entry
• You can clear this data through your browser settings

7. Data Retention

In accordance with and as permitted by applicable law and regulations, we will retain your information as long as necessary to serve you, to maintain your account for as long as your account is active, or as otherwise needed to operate our business.

If you wish to delete your account or request that we stop using your information to provide the Service, please contact us as described in the Contact Us section below.

We may continue to retain, use, or share your information (including personal data) when required by law or when retention is advisable in light of our legal position — for example, in connection with enforcing our agreements, resolving disputes, or complying with applicable statutes of limitations, litigation requirements, or regulatory investigations.

8. Connected AI Assistants

You can connect an AI assistant, such as Claude or ChatGPT, to your Sheepdoc account. Once you sign in and approve it, the assistant acts on your behalf with the same access you have, and the information it reads or sends at your request is shared with its provider under that provider's privacy policy.

We keep a record of each connection (the assistant's name, when you connected it and when it was last used) and changes it makes, as we do for changes you make yourself. We do not receive or store your conversations with the assistant. You can disconnect an assistant at any time in Settings, Connected Apps, and your team's administrators can also remove connections.

9. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this privacy policy periodically. We will notify users of material changes by updating the "Last Updated" date above.

11. Contact Us

For questions about this privacy policy or to exercise your rights, contact us at: