Privacy policy

Who we are

Wireframe is operated by Wireframe Ltd, which is the data controller for the personal data described on this page. You can reach us at hello@wireframe.test with any question about how your data is handled.

This policy covers the Wireframe website and application. It does not cover third-party sites we link to, which have policies of their own.

What we collect

We collect what is needed to run an account and a team, and very little else.

• Account details: your name, email address, password hash, and an avatar colour. If you sign in with Google we store the identifier Google gives us, never your Google password.
• Team details: team names, membership, invitations, and the role of each member.
• Content: the canvases, pages, blocks, copy, variants, comments and snapshots your team creates.
• Billing details: your Stripe customer and subscription identifiers, the plan, the billing contact address if you set one, and the last four digits and brand of the card. Card numbers are entered on Stripe and never reach our servers.
• Usage records: AI actions with their credit cost and token counts, sign-in events, and server logs that include IP addresses and browser information.
• Trial records: keyed hashes of the identifiers described under "Free trials" below, never the identifiers themselves.

How we use it

We use your data to provide the service: to sign you in, show your team its canvases, broadcast live edits to collaborators, send transactional email such as invitations, trial reminders, credit warnings and receipts, and bill the workspace.

During and shortly after the trial we may also send a couple of product tips. Every one carries an unsubscribe link, and you can turn them off from your profile settings. Billing, security and account emails still arrive, because they are about your account.

AI features send the relevant canvas content and your instruction to our model provider to produce a result. We do not use your content to train models, and our providers are contractually prevented from doing so.

We do not sell personal data, and we do not run advertising.

Who else sees it

A small number of processors handle data on our behalf, each under a written agreement.

• Hosting and database providers, which store the application and its data.
• Stripe, which processes payments and stores card details.
• Our AI model provider, which receives canvas content only when an AI feature is used.
• An email delivery provider, which sends transactional mail.

Free trials

Each person gets one free trial. To enforce that, we set a cookie called wf_device that holds a random identifier and a fingerprint computed from technical characteristics of your browser. When a trial starts, and when a card is added, we record keyed hashes of that identifier, the fingerprint, a normalised form of your email address and the fingerprint Stripe gives the card. A keyed hash cannot be turned back into the original value, and we store nothing else.

These records are used solely to decide whether someone has already had a trial. They are not used for analytics, advertising or tracking you across sites, and they are not shared. They are kept after an account is deleted, because otherwise deleting an account would be a way to start a second trial.

Share links

When a team enables a share link, the canvas content becomes readable by anyone who has the URL. Links carry no personal data beyond the names that appear in the copy itself. Disabling the link stops access immediately, and re-enabling it issues a new URL.

How long we keep it

Account and team data is kept while the account exists. Deleted canvases are kept for thirty days in case of mistakes and then removed. When you delete your account we remove your personal data within thirty days, except for invoices and the records we must keep for tax and accounting purposes.

Server logs are kept for ninety days. Trial records, which hold only keyed hashes, are kept for as long as we offer free trials.

Your rights

You can access, correct, export or delete your data from the settings pages, or by writing to hello@wireframe.test. Depending on where you live you may also have the right to object to or restrict certain processing, and to complain to a supervisory authority. We answer requests within thirty days.

Cookies

We use a session cookie to keep you signed in, a token to protect forms against cross-site requests, and the wf_device cookie described under "Free trials". None of them is used for tracking. We do not set analytics or advertising cookies.

Changes

When this policy changes in a way that matters, we will email account owners before the change takes effect. The date at the top of this page tells you when it was last revised.