Privacy Policy

Last updated October 21, 2026

Wand (wand.la) is an ambient task manager made by Automatique, Inc. (“we”). This page explains what we keep when you use Wand, who else processes it, how long it stays, and your choices. Questions or requests: support@wand.la.

What we keep

Your Google account basics. You sign in with Google. We keep your Google account id, email address, name, profile photo and whether Google has verified the email, to sign you in, show who did what, and control access. We never see your Google password or get access to your Gmail or Drive.
Your workspaces. Membership, roles and project access, saved board views and notification settings.
What you and your team put on the board. Task titles and bodies, labels, dates, links, assignees, activity, comments and attached files. Task bodies, comments, attachments and chat history are encrypted before we store them, with a key per workspace held in Google Cloud KMS.
Invites. The email address you invite and who invited them.
Connected AI tools. When you connect Claude, ChatGPT, Cursor or another AI tool, we keep which tool, when it was last used and when the connection expires. Its sign-in tokens are stored only as one-way hashes.
Telegram, if your workspace uses it. Your Telegram user and chat ids, name and username to link the chat to your workspace; the messages, voice notes and images you send the bot, to answer them (kept 30 days); and short summaries of past conversations so the bot remembers context.
Logs. Our host keeps standard request logs (IP address, page, browser, timing) for a limited time, to run and secure the service.

We don’t store passwords or payment details, and there are no tracking or advertising cookies. Wand keeps your sign-in session in your browser’s storage.

Email

We send invites, a welcome email, and notices about tasks you’re assigned or follow, including due dates, comments (up to 500 characters) and daily digests with task titles. You can turn email notices off in your notification settings.

Usage analytics

On wand.la we use PostHog to see which features and AI tools are used and where things go wrong: page views, clicks, page speed, errors, and session recordings that mask every input and all text inside the app. Addresses lose their query strings and workspace names. For AI tools we record which tool was used, how long it took and whether it worked, never what it read or wrote. You’re known to PostHog by an account id, not your name or email, and your IP address is used to estimate your country. Nothing about what your boards say is sent.

Who else processes it

Google Cloud and Firebase: sign-in, database, file storage and encryption keys (United States).
Heroku: hosting and logs.
Resend: sends our email.
PostHog: usage analytics (United States).
Cloudflare: DNS for wand.la and forwarding of mail to support@wand.la.
Telegram, OpenRouter and the AI model it routes to: only for workspaces that use the Telegram bot, to read and answer your messages. We ask OpenRouter to use only providers that don’t store or train on prompts.
The AI tools you connect: whatever you ask them to read from your boards goes to that tool, under its own terms. You choose them and can disconnect them any time.

We don’t sell personal information, show ads, or share data with advertisers, and we don’t use your boards to train AI models.

How long we keep it

Account and workspace data: while your account and workspace exist.
Tasks, comments and files: until they are permanently deleted (archiving keeps them). Deleting a project deletes all its tasks.
Telegram messages: processed messages are cleared and deleted within 7 days; conversation turns after 30 days.
Notification delivery records: 30 to 90 days.
Invites expire after 30 days. Disconnected AI tool records are kept for security auditing.
Backups of the database are kept for up to 8 weeks.

Your choices

See your data on the board; the same data is available to your connected tools and the Wand API.
Turn email notices off in your notification settings.
Disconnect AI tools in Settings → Connected tools; it takes effect at once.
Leave a workspace at any time; owners can remove members and delete projects.
Email support@wand.la to ask what we hold about you, for a copy, or to have your account and data deleted. Depending on where you live (for example California or the EU), you may have further rights; we’ll honor them.

Children

Wand isn’t meant for children under 13, and we don’t knowingly collect their data.

Changes

If we change this policy in a way that matters, we’ll update the date above and say so on the site before it takes effect.