How Waterline handles your information.
Last updated 14 August 2026
The short version. Waterline is a desktop application. Your Meta and Shopify credentials are encrypted and stored on your own computer, and your advertising and order data travels directly from those services to your machine — it does not pass through our servers or get stored by us.
The one exception is the Waterline Assistant when you use it on our included allowance rather than your own API key. In that case the specific figures your question is about are relayed through our server to our AI provider so the answer can be generated. They are not stored. This is described in full in section 4.
Waterline (“Waterline”, “we”, “us”) provides the Waterline desktop application and this website.
Registered address: 5 Gull Ln, Edgartown, MA 02539, United States
Contact: ohhvanish@gmail.com
For users in the UK, EU and EEA, we act as the data controller for the account information described in section 2, and as a data processor for any advertising or store data processed on your behalf as described in section 4.
We collect as little as we can while still being able to sell you a licence and support it.
| What | Why | Where it is held |
|---|---|---|
| Email address | Delivering your licence key, receipts and support replies | Our licensing database; our payment provider |
| Licence key and subscription status | Confirming your plan is active and enforcing plan limits | Our licensing database |
| Installation identifier | A random value generated by the app about itself, used to count device seats and any free-trial usage. It is not derived from your hardware and does not identify you personally. | Your computer and our licensing database |
| Assistant usage counts | Applying the monthly message allowance included in your plan | Our licensing database |
| Server and download logs | Delivering application updates and diagnosing faults. Includes IP address and timestamp. | Our hosting provider, retained for a short period |
We do not sell your information, share it with advertisers or data brokers, or use it to train artificial-intelligence models.
Our lawful bases under UK and EU data protection law are performance of a contract (providing the software you bought), legitimate interests (securing the service and preventing abuse), and legal obligation (retaining transaction records).
The Assistant answers questions about your advertising. How your data travels depends on which of two ways you use it, and you choose.
If you enter your own Anthropic API key in Settings, the application communicates with Anthropic directly from your computer. Nothing passes through our servers, and we have no visibility of your questions, the figures involved, or the answers.
If you do not supply a key, the Assistant runs on our arrangement with our AI provider. Your question, and the specific advertising figures needed to answer it, are relayed through our server to Anthropic PBC, which generates the response.
If you would prefer that no advertising figures ever leave your machine through us, supply your own API key, or do not use the Assistant.
| Provider | Purpose | What it receives |
|---|---|---|
| Lemon Squeezy | Payments and subscriptions. Acts as merchant of record for your purchase. | Your name, email and payment details. We never receive or store your card number. |
| Cloudflare | Website, licensing service and update delivery | IP address and request metadata |
| Anthropic PBC | Generating Assistant responses, when used on your plan’s allowance | The question and figures described in section 4 |
| Meta Platforms | Your advertising data, at your instruction | Requests made by the application from your computer |
| Shopify | Your store data, at your instruction and only if you connect it | Requests made by the application from your computer |
Some of these providers operate outside the UK and EEA. Where personal data is transferred internationally, it is protected by the standard contractual clauses or equivalent safeguards in each provider’s terms.
Depending on where you live, you may have the right to request a copy of the personal data we hold about you, to have it corrected or erased, to object to or restrict how we use it, to receive it in a portable form, and to withdraw consent where we rely on it.
Write to ohhvanish@gmail.com and we will respond within thirty days. You may also complain to your local supervisory authority — in the UK, the Information Commissioner’s Office.
You can remove everything held on your own computer at any time from Settings → General → Reset, or by uninstalling the application and deleting its data folder.
Credentials on your computer are encrypted using your operating system’s own key store. Traffic between the application, our servers and the services you connect is encrypted in transit. Our licensing database holds no advertising data, no payment details and no access tokens — so the information exposed by a breach of our systems would be limited to email addresses and subscription states.
No system is perfectly secure. If a breach affects your personal data and is likely to present a risk to you, we will tell you and the relevant regulator without undue delay.
Waterline is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16.
If we change this policy we will update the date at the top of this page. Where a change materially affects how we handle your information, we will tell you by email before it takes effect.
ohhvanish@gmail.com
Waterline, 5 Gull Ln, Edgartown, MA 02539, United States