Privacy Policy

numericalsAI Inc. · Version 1.0 · Effective 31 July 2026

1Who we are

Wave_ is operated by numericalsAI Inc., a Delaware corporation. This policy explains what personal information we collect through the Wave_ app and wave.deal, why we collect it, who else sees it, and what you can do about it.

2What we collect

We do not ask for, and do not want, more than this. We do not collect precise location, contacts, photos or health data.

3Bot activity data

A Wave_ bot keeps running after you close the app, which means it produces data while you are not using the Service. We record what a bot queried, when, what it found, and what it decided — including the times it decided not to act, because that is what lets you understand why a bot stayed quiet.

We use this to run the bot, to show you its history, to investigate problems, and to improve how matching works. We keep it for 12 months, then delete it.

4How we use it

• To operate the Service and run your bots
• To complete transactions you authorized, and to establish what was authorized if a charge is disputed
• To keep the Service safe: fraud prevention, abuse handling, content moderation
• To provide support when you contact us
• To meet legal, tax and accounting obligations
• To improve the Service, using aggregated and de-identified statistics

We do not use your personal information to train machine learning models.

5Payment information

Payments are processed by a third-party payment processor certified to PCI-DSS. We do not store full card numbers. We store a payment token, the last four digits, the card brand and the expiry date, so that you can recognise and manage your payment methods.

Because a bot can pay while you are not present, we retain a record of the authorization you gave: its limits, its scope, and the moment you granted or revoked it. That record exists to protect both sides if a charge is ever disputed.

6Who we share it with

We do not give merchants your bot configurations, your search history, or anything about your other bots.

7Sale and sharing

Under California law, “sale” and “sharing” are defined broadly and can cover disclosures made for advertising purposes even when no money changes hands.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined in the CCPA/CPRA. We have not done so in the preceding 12 months. Because we do not, there is no “Do Not Sell or Share My Personal Information” process to run — but you can still exercise every other right listed in section 9.

8How long we keep it

9Your rights

Depending on where you live, you have the right to know what personal information we hold about you, to receive a copy in a portable format, to correct it, to delete it, to limit the use of sensitive information, and not to be discriminated against for exercising any of these rights.

To make a request, email privacy@wave.deal. We will verify your identity before acting, and respond within 45 days, extendable once by a further 45 days where a request is complex — we will tell you if that happens. An authorized agent may act for you with written proof of authority. Requests are free unless they are manifestly unfounded or excessive.

10Deleting your account

You can delete your account from within the app, under Settings → Account → Delete account. You do not need to email us and you do not need to ask.

Deletion stops all running bots immediately, and removes your profile, your bots and your published configurations. Two things survive: records of completed transactions and their authorizations, which we are legally required to keep for 7 years, and any content already copied by other users. Backups containing deleted data are purged within 30 days.

11Security

We encrypt data in transit and at rest, restrict internal access to the people who need it, log administrative access, and review those controls periodically. No system is perfectly secure. Because an account here can spend money, choose a strong and unique password, and enable two-factor authentication where the app offers it.

If a breach affects your personal information, we will notify you and the relevant authorities as required by law.

12Children

Wave_ is for adults. You must be 18 or older to use it, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email privacy@wave.deal and we will delete it.

13Tracking and advertising

We do not track you across other companies' apps and websites, and we do not show advertising in the Service. We do not use third-party advertising identifiers, and we do not build advertising profiles. Because we do not track you in this sense, the app does not present Apple's App Tracking Transparency prompt.

14Users outside the United States

The Service is operated from the United States and is currently intended for users in the United States. If you access it from elsewhere, your information is processed in the United States under United States law, which may offer protections different from those in your own country.

15Changes

We will post any change on this page and update the version and effective date at the top. If a change is material we will notify you in the app or by email at least 14 days before it takes effect, and we will say what changed.

16Contact