Privacy policy — draft
Draft for legal review. This text is not approved for a public commercial launch.
Data used by the service
Wallito stores account email, name, password hashes managed by Better Auth, session records, organization memberships, agent configuration, payment metadata, audit events, and billing identifiers. API keys are stored as cryptographic hashes.
Purpose and retention
Data supports authentication, policy enforcement, approvals, audit history, and subscription access. The owner must define retention periods, deletion handling for financial audit records, and account export procedures before launch.
Service providers
Configured deployments may use a hosting provider, PostgreSQL service, Stripe for SaaS subscriptions, and Resend for transactional email. The local default does not send email or payment data to those providers.
Cookies and analytics
Session cookies support authentication. Workspace and theme preferences use browser local storage. No advertising trackers or third-party analytics scripts are loaded. Development activity is labeled in the audit trail.
Before publication
The owner must add the legal entity, contact address, applicable jurisdictions, lawful bases, data-subject request process, retention schedule, and signed processor agreements.