Privacy Policy

This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it.

1. Who We Are

Wayfield is operated by Wayfield, Inc., a company incorporated in Minnesota, United States. Wayfield, Inc. is the data controller for all personal data processed through the Wayfield platform.

Our registered address is: 638 Bates Ave., St. Paul, MN 55106. For all privacy-related inquiries, please contact us at privacy@wayfieldapp.com.

2. What Data We Collect

We collect personal data in the following categories:

Account Data

• Name, email address, and password (hashed).
• Profile information: biography, profile photo, location, role (organizer, leader, participant).
• Account preferences and notification settings.

Workshop and Session Data

• Workshops you have created, led, or attended.
• Enrollment records and attendance history.
• Reviews, ratings, and feedback you submit.
• Messages and communications within the platform.

Payment Data

• Transaction records including amounts, dates, and workshop references.
• Billing address and payout information for organizers.
• Payment card details are processed and stored exclusively by Stripe — Wayfield does not store full card numbers.

Usage and Analytics Data

• Pages and features you access, search queries, and interaction patterns.
• Time and duration of sessions, clicks, and navigation paths.
• Error logs and diagnostic information to improve platform reliability.

Device and Technical Data

• IP address, browser type, operating system, and device identifiers.
• Approximate geographic location derived from IP address.
• Cookie identifiers and session tokens (see our Cookie Policy).

3. How We Use Your Data

We use the personal data we collect to:

• Create and manage your account and authenticate your identity.
• Enable organizers to create workshops and leaders to facilitate sessions.
• Process enrollments and payments between participants and organizers.
• Send transactional communications (booking confirmations, reminders, receipts).
• Provide customer support and respond to inquiries.
• Personalize the discovery experience and surface relevant workshops.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations including tax reporting and financial record-keeping.
• Improve the platform through aggregated analytics and product development.
• Send marketing communications where you have given consent or where we have a legitimate interest.

4. Legal Basis for Processing

Where applicable law requires a legal basis for processing your personal data, we rely on the following:

• Contract performance: Processing necessary to provide the services you have requested, including account management, enrollments, and payments.
• Legitimate interests: Processing for fraud prevention, platform security, product improvement, and direct marketing to existing users, where these interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable laws, including tax, financial reporting, and law enforcement requests.
• Consent: Where we send marketing emails to new contacts or deploy non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

5. Data Sharing

We do not sell your personal data. We share it only in the following circumstances:

Service Providers (Subprocessors)

• Stripe, Inc. — Payment processing. Your payment data is subject to Stripe’s Privacy Policy.
• Loops — Transactional and marketing email delivery.
• Amazon Web Services (AWS) — Infrastructure for storing and serving platform data.
• Vercel — Frontend hosting and edge delivery.
• PostHog — Product analytics and session recording. All form inputs are masked; no sensitive data is captured in session recordings. PostHog processes data on EU Cloud infrastructure.

Between Platform Users

When you enroll in a workshop, your name and contact details are shared with the organizer of that workshop. Organizers and leaders may also see information necessary to manage their sessions.

Legal and Safety Disclosures

We may disclose personal data to law enforcement, regulators, or courts where required by applicable law, or where necessary to protect the safety of our users or the public.

6. Retention Periods

We retain your personal data for as long as necessary to provide the service and fulfill our legal obligations:

• Account data: Retained for the duration of your account plus up to 3 years after closure for legal and dispute resolution purposes.
• Transaction records: Retained for 7 years to comply with financial record-keeping obligations.
• Usage and analytics data: Retained in aggregated form; identifiable logs retained for up to 12 months.
• Marketing consent records: Retained for as long as the consent is active plus 3 years.

7. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where it is no longer necessary for the purpose it was collected, subject to legal retention requirements.
• Right to data portability: Receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to restriction: Request that we restrict processing of your data in certain circumstances.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@wayfieldapp.com. We will respond within 30 days.

8. International Transfers

We primarily store and process your personal data within the United States. Where data is transferred to other countries, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms where required.

9. Cookies

We use cookies and similar tracking technologies to operate the platform and improve your experience. For full details on what cookies we use and how to manage them, please see our Cookie Policy.

10. Children

Wayfield is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us at privacy@wayfieldapp.com and we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a prominent notice on the platform. The updated policy will display the new effective date at the top. We encourage you to review this policy periodically.

12. Contact and Complaints

For all privacy-related inquiries, please contact our privacy team at privacy@wayfieldapp.com.

Wayfield, Inc.
638 Bates Ave., St. Paul, MN 55106