Privacy policy
Privacy policy
This is what WOOL collects, why, and what you can do about it. Each section starts with a one-line summary; the full text is what applies.
Who this covers
Developers who build on WOOL, the users who connect their accounts, and visitors to our websites.
This policy explains what Studio Eastgate, LLC collects when you use WOOL, how we use and share it, how long we keep it, and what you can do about it. It covers three groups of people: developers, who create accounts on the console and build products on the API; users, who connect an account on another website to a developer’s product through our connect page; and visitors to trywool.com.
If you are a user of a product built on WOOL, that product’s developer decides what prompts to run on your connected account and what to do with the results. Their privacy notice covers that. This policy covers what WOOL itself does.
What we collect
Account and billing details from developers; a connection, an encrypted sign-in, prompts, and results for each user; and ordinary server logs.
From developers: your email address, your name if you sign in with Google, the sign-in code we email you (used once and then discarded), your session, the applications you create, your billing account, your purchase history, and a record of what each run and each connection cost. Your card is saved by our payment provider; we receive a reference to it, never the card number.
For each user who connects an account: the website they connected, the identifier the developer’s product uses for them, the signed-in session for that website, which we encrypt and keep so later runs can start already signed in, the prompts the developer’s product sends, the results those runs produce, and operational logs of each run for support.
Passwords and one-time codes are typed on our connect page and go into the isolated sign-in and nowhere else. We do not store them, log them, or show them to the developer.
Across the service, we keep a shared record of how to reach a website’s sign-in flow, such as its entry page and the route to its sign-in form. It contains no credentials, sessions, prompts, or results, and it helps later users connect faster.
From visitors: the ordinary server logs any website keeps, such as IP address, browser type, the pages requested, and when. We do not use advertising cookies or tracking pixels.
How we use it
To run the service, bill for it, keep it secure, support you, and improve it. Nothing else.
We use the information above to sign users in to the websites they connect, to run agents from developers’ prompts and return results, to keep saved sign-ins available for later runs until a connection is revoked, and to show developers what happened on each run.
We use it to charge for credits, to send receipts and billing emails, and to detect and prevent fraud and abuse.
We use it to send the emails the service needs: sign-in codes, low-balance and payment notices, and notices about changes that affect you. We do not send marketing email.
We use it to keep the service secure, to support developers when a run goes wrong, and to improve WOOL, including by measuring how runs perform across the service in aggregate.
AI models and service providers
Runs use AI models from other companies, and we rely on hosting, payment, email, and sign-in providers.
WOOL runs agents using AI models operated by third-party model providers. To complete a run, the prompt, the content of the pages the agent reads on the connected website, and the agent’s own working notes are sent to those providers. They process this data to provide the model to us, under contracts that restrict them to that purpose.
We also use providers for cloud hosting and storage, for payment processing, for sending email, and for Google sign-in. Each receives only what it needs to do its job for us.
We do not sell personal information, and we do not share it with advertisers.
When we share it
With the developer whose product you connected, with the providers above, and when the law requires it.
A developer sees the connections made to their applications, the prompts they sent, and the results, along with each run’s status and cost. A developer never sees a user’s password, one-time code, or saved sign-in.
We share information with the service providers described above, with professional advisers under confidentiality, and when we believe in good faith that the law requires it or that sharing is needed to protect the rights, safety, or property of our users, the websites they connect, the public, or WOOL.
If Studio Eastgate, LLC is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. We will tell affected developers before their information becomes subject to a different privacy policy.
How long we keep it
Saved sign-ins go when a connection is revoked. Run data goes when an application is deleted. Billing records stay as long as accounting rules require.
A saved sign-in is kept while its connection is active and deleted when the connection is revoked, whether the user revokes it from the developer’s product or from WOOL, or the developer revokes it from the console.
Prompts, results, and run logs are kept while the application they belong to exists, so developers can review what happened. Deleting an application removes its connections, saved sign-ins, executions, and results.
Billing records, including purchases and usage records, are kept for as long as tax and accounting rules require. Operational logs are kept for a limited period for security and support and then deleted.
When a developer asks us to close their account, we delete the account and its applications, connections, and run data, and keep only what the law requires us to keep.
How we protect it
Encryption in transit and at rest for saved sign-ins, isolated runs, and access limited to what the service needs.
All connections to WOOL use HTTPS. Saved sign-ins are encrypted at rest and bound to the connection they belong to, so a run on another connection, or a developer who does not own the connection, cannot use them. Every authorization and every run happens in its own isolated session, created for that request and discarded afterwards.
No method of storage or transmission is completely secure, so we cannot promise absolute security. If you believe you have found a security problem, email support@trywool.com and we will respond quickly.
Your choices
Users can revoke a connection. Developers can delete applications or close their account. Either can email us.
If you connected an account to a developer’s product, you can revoke that connection at any time from the product, or from the WOOL page the product links to. Revoking deletes the saved sign-in and stops every run on that connection. For questions about what the product did with your account or with results, contact the developer first; we will help them answer.
If you are a developer, you can revoke connections and delete applications from the console, and you can ask us to close your account, correct your details, or send you a copy of the information we hold about you by emailing support@trywool.com.
Depending on where you live, you may have legal rights to access, correct, delete, or restrict the use of your personal information. We honor those rights as the law requires. We do not discriminate against anyone for exercising them.
Children
WOOL is for adults. We do not knowingly collect information from children.
Developers must be at least 18. Products built on WOOL may not be aimed at children, and accounts belonging to children may not be connected. If you believe a child’s information has reached us, email support@trywool.com and we will delete it.
Where it is processed
In the United States.
Studio Eastgate, LLC is based in Washington, United States, and WOOL is operated from there. If you use WOOL from elsewhere, your information is transferred to and processed in the United States.
Changes to this policy
We will post updates here with a new date and tell developers when a change matters.
We may update this policy as WOOL changes. The current version is always at trywool.com/privacy with its effective date. If a change materially affects how we handle your information, we will email developers at the address on their account before it takes effect.
Contact
Privacy questions and requests go to support@trywool.com.
Studio Eastgate, LLC, Washington, United States. Email support@trywool.com and we will answer.