Privacy Policy
Last updated: May 31, 2026
wakeup.sh is operated by Above The Fold Pty. Ltd. (ABN to be confirmed), an Australian company trading as wakeup.sh. We are the data controller for personal information handled through the service and we handle it in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. What We Collect
We collect the minimum data needed to operate the service:
- Account data: Email address or GitHub profile used for authentication
- Event data: Events you dispatch through wakeup.sh, including type, source, and payload
- Usage data: Event counts, agent connection status, and delivery metrics
- Billing data: Plan, subscription status, and a customer reference. Card details are collected and stored by our payment processor, Stripe, and are never stored on our servers.
2. Data Isolation
All data is stored in PostgreSQL with Row Level Security (RLS) enforced at the database level. This means:
- Every query is scoped to your authenticated user ID by database policy, not application code
- One user cannot access another user's events, agents, or configuration, even if application-level bugs exist
- RLS policies are applied on every SELECT, INSERT, UPDATE, and DELETE operation
3. Data in Transit
All data is encrypted in transit:
- HTTPS/TLS for all API communication
- WSS (WebSocket Secure) for real-time event delivery to the CLI daemon
- HMAC-SHA256 signatures on all event payloads so you can verify authenticity
4. Data Retention
Event data is retained for the period defined by your plan (3 days on Free; longer on the Pro and Team plans). After this period, event payloads are permanently deleted. Delivery metadata (timestamps, status) may be retained longer for operational purposes.
5. Cookies
We use the following cookies:
- Essential: Authentication session tokens. Required for the service to function.
- Analytics: Anonymous usage analytics to help improve the service. Can be disabled via cookie preferences.
You can manage your cookie preferences at any time using the "Cookies" link in the footer.
6. Third Parties
We use the following third-party services:
- Supabase: Database, authentication, and real-time infrastructure
- Vercel: Web application hosting
- Stripe: Payment processing and subscription billing
Some of these providers may store or process data outside Australia. We do not sell your data to third parties, and we do not share your event payloads with anyone.
7. Your Rights
You can request deletion of your account and all associated data at any time by emailing hello@wakeup.sh. We will process deletion requests within 30 days.
8. Contact
Questions about privacy? Email us at hello@wakeup.sh.