Privacy policy

Wirebook (wirebook.app) is operated by [TODO: legal name of the operator / company], [TODO: postal address], who is the data controller for the personal data described here. Questions or requests: privacy@wirebook.app.

• Account details — when you sign in with Google we receive your email address, name and a Google account identifier. We don't receive your Google password.
• Your content — the maps and diagrams you create: node names, tags, links, icons, layout, code snippets and notes, folder structure, and changes proposed by agents you connect.
• API keys — if you create an MCP key we store a one-way hash of it, its first few characters, an optional label and the creation date. We never store the key itself.
• Usage counts — how many agent writes your account made each month. These are counts, not contents.
• Technical logs — our hosting provider records request metadata (such as IP address, time and endpoint) and application errors, which can contain fragments of the request.

We don't use advertising or tracking cookies, and we don't sell or rent personal data.

• To provide the service you signed up for — storing, showing and syncing your maps (contract).
• To keep it secure and working — preventing abuse, fixing faults, limiting runaway usage (legitimate interests).

Agents you connect yourself through MCP (for example Claude Code) are your own tools: what they do with a map they read is governed by that tool's provider, not by us.

• Amazon Web Services — hosting, database, sign-in and logs. Data is stored in the AWS London (eu-west-2) region.
• Google — sign-in only.
• Cloudflare — domain name services.

Where data leaves the UK/EEA (any processing by the US-based providers above), transfers rely on the providers' Standard Contractual Clauses / UK International Data Transfer Addendum.

• Your content and account details: until you delete them or your account.
• The code and notes of a node you delete from a wirebook: kept for 30 days so undo can bring them back, then removed.
• Monthly agent-write counts: about 13 months.
• Application logs: 30 days.
• Database backups: our database keeps point-in-time recovery for 35 days, so deleted data can persist in backups for up to 35 days before it's gone for good.

The app keeps your sign-in session and interface preferences (color mode, open tabs, folded branches and similar) in your browser's local storage, and maps you make while signed out in its IndexedDB (their folders in local storage). These are needed for the app to work and never leave your device except as part of normal use. We set no cookies of our own.

You can, at any time:

• Download everything — Menu → Plan & usage → “Download all maps”, or save a single map from the File menu.
• Delete your account — Menu → Plan & usage → “Delete account”. This removes your maps, content, proposals, API keys and sign-in immediately (backups age out within 35 days).
• Revoke API keys, and edit or delete any map.

You also have the right to access, correct, restrict or object to our use of your data. Email privacy@wirebook.app and we'll respond within one month. If you're unhappy with our response you can complain to your data protection authority — in the UK, the ICO.

Wirebook is not intended for anyone under 16, and we don't knowingly collect their data.

If we change this policy in a way that matters, we'll update the date above and tell signed-in users in the app before the change takes effect.