Legal
Privacy Policy
Last updated: 25 September 2026
Privacy Policy
Last updated: 25 September 2026
Waysflow is building AI that adapts as you learn. That work depends on trust, so this policy is written to be read. It explains what personal data we collect through this website, why, how long we keep it, and the rights you have.
This policy covers the website at waysflow.com, the waitlist ("Join the flow") and any email you send us. The Waysflow product is not yet available. When it launches, it will come with its own privacy notice explaining what learning data it uses and why. We will not use anything you give us on this website for the product without telling you first.
1. Who we are
Waysflow is being established in the Kingdom of Saudi Arabia. Until its registration is complete, this website is operated by the Waysflow founders, who are responsible for your personal data as its controller. Our team works remotely, including from the United Kingdom.
- Contact for anything in this policy: team@waysflow.com
A person reads every message.
2. The short version
- We collect very little: your email address if you join the waitlist, and whatever you choose to tell us if you write to us.
- We use it to send you Waysflow updates and to reply to you. Nothing else.
- We never sell your data, and we never share it for advertising.
- You can stop our emails at any time, and ask us to delete your data whenever you like, by writing to team@waysflow.com.
3. The laws we follow
Because Waysflow is based in Saudi Arabia, we follow the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and its Implementing Regulations. If you are in the United Kingdom or the European Union, you also have the rights given to you by the UK GDPR or the EU GDPR, and we respect them.
4. What we collect
What you give us
- Waitlist. Your email address and the date and time you joined.
- Emails to us. Your name, your email address and anything you include in your message, such as a CV.
What is collected automatically
- Technical data. Like almost every website, our hosting provider records basic technical data when you visit, such as your IP address, browser type and the pages you requested. It is used only to keep the site secure and working.
Our hosting provider also gives us aggregated traffic statistics, such as how many requests a page received, which do not identify you. We do not use advertising cookies, tracking pixels or cross-site tracking.
What we do not collect
We do not ask for, and ask you not to send us, sensitive data such as health information, identity numbers or financial details.
5. Why we use it, and on what basis
| What we do | Data used | Basis |
|---|---|---|
| Send you Waysflow updates: early access, research notes and launch news | Email address | Your consent, given when you join the flow. You can withdraw it at any time. |
| Reply to your emails | Name, email address, message | Legitimate interest in answering you |
| Consider job applications | Name, contact details, CV | Legitimate interest, and steps you ask us to take before any contract |
| Keep the website secure and working | Technical data | Legitimate interest in running a safe website |
| Meet legal obligations | Any of the above, where needed | Legal obligation |
We do not use your data for automated decisions that affect you.
6. Who we share it with
We use a small number of trusted service providers. They process data only on our instructions.
| Provider | What they do for us | Where |
|---|---|---|
| Cloudflare | Hosts the website, stores waitlist sign-ups, and forwards emails sent to waysflow.com | Global network; waitlist data stored in Western Europe |
| Email inbox where messages to waysflow.com are received | Global |
We may also disclose data if the law requires it, or as part of a merger or sale of our business, in which case your data would stay protected by this policy or one at least as protective.
We never sell your personal data.
7. Transfers outside Saudi Arabia
Our providers store some data outside the Kingdom, including in Europe, and our team works remotely from other countries, including the United Kingdom. We transfer only the minimum data needed, only to providers with strong protections, and in line with the PDPL's rules on transfers outside the Kingdom and, where they apply, UK and EU transfer safeguards.
8. How long we keep it
| Data | How long |
|---|---|
| Waitlist email address | Until you unsubscribe or ask us to delete it |
| Emails and enquiries | Up to 24 months after our last contact |
| Job applications | Up to 12 months after the role is filled, unless you agree to longer |
| Technical logs | Usually no more than 90 days |
9. How we protect it
We use reputable providers, encrypted connections (HTTPS) across the whole website, and access limited to the people at Waysflow who need it. If a breach ever put your data at risk, we would act quickly and notify you and the relevant authority as the law requires.
10. Your rights
You have the right to:
- Be informed about how your data is used, which is what this policy does
- Access your data and receive a copy
- Correct data that is inaccurate or incomplete
- Delete your data when it is no longer needed
- Withdraw consent at any time, for example by asking us to stop sending updates
- Object to or restrict some uses, and receive your data in a portable format, where the law allows
To use any right, email team@waysflow.com with the subject "Privacy request". We will reply within 30 days. If a request is complex, we may need up to 30 more days, and we will tell you before the first 30 days end. There is no charge. We may need to confirm your identity first.
11. Complaints
Please tell us first at team@waysflow.com so we can put it right.
You can also complain to a data protection authority:
- Saudi Arabia: the Saudi Data and Artificial Intelligence Authority (SDAIA), sdaia.gov.sa
- United Kingdom: the Information Commissioner's Office (ICO), ico.org.uk
- European Union: the data protection authority in your country
12. Age
This website's waitlist is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has given us their data, tell us and we will delete it.
13. Cookies
We do not set cookies for advertising or tracking. Our hosting provider may use strictly necessary cookies to keep the website secure. If this changes, we will update this policy and ask for your consent first.
14. The Waysflow product
The Waysflow learning product is not yet available, and this policy does not cover it. Before it launches, we will publish a separate privacy notice explaining what learning data it uses, why, where it is stored and how you can delete it.
Some commitments are already fixed. Waysflow will not be used to infer health or mental-health conditions, IQ, personality types or learning styles, and it is not designed for hiring, admissions or grading decisions.
15. Changes to this policy
We will update this policy as Waysflow grows, for example when our company registration is complete or our product launches. We will change the date at the top, and tell waitlist members by email about significant changes.