Privacy Policy

Wakoo SRL (Rue de Tournai 30, 7604 Péruwelz (Callenelle), Belgique, company number BE 1041.520.672), represented by Andrew Willems, is the controller for the personal data described here (your account, billing, website and emails). Contact: hello@wakoo.ai.

Account and billing data (name, email, company, VAT number, billing address) to provide and invoice the service. Messages you send us (contact form, support) to answer them. Your email, if you subscribe to the Waypoint newsletter (with a confirmation link), to send it. On the website: cookie-free visit statistics, and IP addresses as needed to deliver and protect the site. We collect the minimum needed and never sell your data.

Member access: to read the end of some articles without an account, you give your email and click the link we send. We use that email only to give you access: a cookie on your device remembers it. Legal basis: providing the service you ask for (contract) and our legitimate interest in keeping these pages for readers. Reading never depends on the newsletter.

Waypoint newsletter: only if you choose it (a separate, unticked box, or the newsletter form), and only after you confirm by email. Legal basis: your consent. We keep a record of it (the wording you saw, the date and where you signed up). You can withdraw it at any time with the link in every email; this changes nothing to your access to articles.

Wakoo connects to your databases read-only and never writes to them. In the cloud, the Wakoo client runs at your site and sends only performance data: timings, statistics, query shapes with every value masked, and execution plans, also without values. Never your table rows or your customers' data. On-premise and air-gapped, nothing leaves your network. For this data, Wakoo acts as your processor; a data processing agreement (art. 28 GDPR) is provided on request to any customer, Free included.

Performance history and diagnoses, according to your plan:

• Free7 days
• Pro1 year
• Team2 years
• Enterpriseunlimited, or as agreed

A quick session keeps nothing. Account data stays until you delete your account; we then delete or anonymise it, except invoices, which are kept as long as Belgian accounting law requires. Newsletter: until you unsubscribe (a link in every email).

The Wakoo service is hosted in Switzerland. We rely on these sub-processors, each bound to process data only on our instructions (art. 28 GDPR). On-premise and air-gapped deployments use none of them.

• Infomaniak

  Switzerland
  Servers for the Wakoo service: accounts, performance data, diagnoses, and our CRM and invoicing (Odoo, self-hosted on the same servers).
• Cloudflare

  United States
  Website delivery and network protection (DNS, CDN, firewall), and the anti-bot check on our forms (Turnstile). Sees IP addresses, website requests and browser signals used by that check.
• Stripe

  Ireland and United States
  Payments and subscription billing. Card details go to Stripe directly, never to us.
• Mailjet

  France (EU)
  Emails: sign-in codes, receipts, and the Waypoint newsletter.

Switzerland is recognised by the EU as offering adequate data protection. Transfers to the United States (Cloudflare, Stripe) rely on the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

Same list, with the security detail: Security.

If you use a Wakoo referral link, we record that your sign-up came from it so the referrer gets their credit. The referrer only ever sees a partially masked version of your email (for example j***@example.com), never the full address.

We use only essential cookies (for example to keep you signed in). Our visit statistics work without cookies.

You can access, correct, export or delete your data, and object to or restrict its processing. Most of it is in your account page; for the rest, write to hello@wakoo.ai. We answer within one month. You can also lodge a complaint with the Belgian Data Protection Authority.

Under Profile & security in your account, "Export my data (JSON)" downloads a machine-readable copy of your data (profile, workspaces, access tokens without their secrets, sessions, tickets and invoices), as provided by Article 20 GDPR. The Emails switches on the same page let you withdraw your newsletter consent in one click, as easily as you gave it (Article 7(3) GDPR).