Waffle procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Depending on your location, you may have the following rights regarding your personal data: The right to access, update or delete the information we have on you” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ To exercise any of these rights, please contact us at the email below.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Deleting your Waffle account or uninstalling the app does not cancel your Apple subscription. Cancel separately with Apple to stop renewal. Account deletion removes your Waffle data and requests deletion of your RevenueCat customer profile; it does not erase Apple's purchase records. If you later create another Waffle account, you can explicitly restore a still-valid Apple purchase. Subscription access is verified with Apple through RevenueCat. A network connection is needed to purchase, restore or refresh access. Previously verified playback access may remain available briefly while offline, but is not guaranteed indefinitely. Paid controls are enforced within Waffle's player; they do not provide digital rights management for direct audio URLs.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Brief messages, call transcripts, generation records and audio are retained to operate your account and requests until removed through deletion. Account deletion removes your briefs, generated audio, including public audio, and associated interactions. Operator-managed People, Sources and cloned voices are separate from listener accounts and are not removed when a listener deletes their account. We will retain and use your data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Use Delete account in Waffle Account to request deletion, or contact us at the email below. We remove stored subscription snapshots and account links during account deletion and request erasure of the corresponding RevenueCat customer profile. Failed provider cleanup is retried before deletion completes. RevenueCat processes erasure asynchronously. Completed billing notification records keep event identifiers, timing and processing results for 30 days to handle duplicate delivery; account identifiers are removed when processing completes or during account deletion. Account deletion does not cancel Apple billing. Apple and RevenueCat may retain records under their own applicable obligations. If you restore a purchase after creating a new Waffle account, store transactions can be synchronized again to provide that account with access.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Waffle operators manage each Person's profile and Sources. Sources include video titles, links and transcripts used to ground generated scripts. Source references are visible in the app. We store cloned-voice identifiers and evidence of permission to use those voices. Voice providers process voice samples and generated scripts to produce synthetic speech.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ AI providers process the information needed to prepare your brief, retrieve relevant Sources, write an audio script and synthesize speech. OpenAI processes briefs and selected Source excerpts for script generation and embeddings. Groq processes brief-call transcripts to generate interview responses. Inworld transcribes speech during brief calls. Cartesia processes generated scripts and voice references to produce cloned-voice audio and spoken brief-call responses. LiveKit carries live brief-call audio between the app and the voice service. Use account deletion or contact us to request removal of previous briefs or audio.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ PostHog — Product analytics and session recording. Collects usage events, device information, and anonymized session replays to help us improve the Service.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Apple and RevenueCat process iOS purchases and subscription history. RevenueCat validates purchases, supplies access status and provides subscription analytics and customer support tools. See RevenueCat's Privacy Policy .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Better Auth — Manages user authentication. Receives your email address, name, and profile photo from your OAuth provider (Google, Apple, etc.).” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. Our third-party providers may also process data in their respective locations.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ All third-party service providers listed above are contractually obligated to protect your data and use it only for the purposes described in this policy. We select providers that maintain industry-standard security practices including encryption in transit and at rest, access controls, and regular security audits. Providers process data under their applicable service terms and privacy policies. We send brief content, Source excerpts, scripts and speech only to the providers used for the requested processing step.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ For iOS subscriptions, Apple processes payment. RevenueCat receives store transaction and purchase history, product and subscription status, trial and renewal information, and an identifier linked to your Waffle account. Its SDK also processes app, device and store information needed to operate purchases. We store your verified access status, product, expiration, renewal status and verification time to enable playback controls, restore purchases, resolve billing problems and monitor subscription activity. We do not receive your payment card details or Apple Account password. The identifier sent to RevenueCat contains your Waffle account ID and service environment, not your email or name. It can be linked to your account by us. This billing integration does not send advertising identifiers or use purchase history for advertising across other companies' apps or websites.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Convex — Serverless backend and database. Stores account data, briefs, audio metadata and application data. AWS and Trigger.dev store Source and audio files and run background generation jobs. Chroma supports Source retrieval; Typesense supports public discovery. Vercel — Web application hosting and serverless functions.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Where available in the iOS app, Waffle Plus is an optional monthly subscription for playback controls: choosing Episodes out of order, manually moving between Episodes, seeking and changing playback speed. Free listening includes sequential Episode playback and resuming your saved place. Android does not offer this subscription in this release. The app and Apple purchase sheet show the price, currency, billing period and any eligible introductory offer before you confirm. Apple determines trial eligibility. A trial converts to the displayed paid subscription unless canceled. Payment is charged to your Apple Account, and the subscription renews automatically unless canceled. We do not promise a trial to every account or send trial-end reminders. Manage or cancel your subscription in your Apple Account settings under Subscriptions, or use Manage subscription in Waffle Account. To avoid a trial renewal, Apple advises canceling at least 24 hours before the trial ends. Apple shows your cancellation and access end dates. Refund requests for Apple purchases are handled by Apple at reportaproblem.apple.com . These terms do not limit any mandatory consumer rights. Restore purchases in Waffle Account using the Apple Account that made the purchase. Restoring can transfer subscription access to the Waffle account you are currently signed into, removing access from a previously linked Waffle account. Signing in with the same email alone does not restore a purchase. ” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.