it's your data. we don't sell it. period.

privacy policy

Effective Date: February 23, 2026 · waccamole LLC, a Wyoming limited liability company

waccamole LLC ("waccamole," "we," "us," or "our") operates the website waccamole.ai and all associated applications and services (the "Platform"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit or use the Platform.

We are committed to protecting your privacy. We designed the Platform with data minimization as a core principle — we collect only what we need to operate the service and we do not sell your personal data.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Platform.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide when you create an account, subscribe to a paid plan, or interact with the Platform:

• Account Registration: Email address and display name or username (you may use a pseudonym). We do not require your real name. Authentication (including password storage and verification) is handled entirely by our third-party authentication provider, Clerk. waccamole never sees, stores, or has access to your passwords.
• Billing Information: When you subscribe to a paid plan, our third-party payment processor (currently Stripe, Inc.) collects your payment card number, expiration date, CVC, and billing address. waccamole does not store your full payment card number on our servers. We receive from our payment processor a truncated card number (last four digits), card type, billing address, and transaction history for recordkeeping purposes.
• User Content: If you share WACC configurations to the community library, we collect and store that content. Any content you choose to share publicly will be visible to other users.
• Communications: If you contact us at support@waccamole.ai or support@waccamole.ai, we collect the content of your communications and any information you choose to provide.
• Preferences and Settings: Your saved comp sets, notification preferences, and other account settings.

1.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical information:

• Log Data: IP address, browser type and version, operating system, referring URL, pages viewed, date and time of access, and duration of visit.
• Device Information: Device type, screen resolution, and unique device identifiers.
• Cookies and Similar Technologies: We use cookies and local storage as described in Section 6 below.

1.3 Information We Do NOT Collect

We want to be explicit about what we do not collect:

• We do not require or collect your real name (you may register with a pseudonym or initials).
• We do not collect Social Security numbers, government-issued ID numbers, or financial account numbers (other than payment information processed through Stripe).
• We do not collect information about your clients, their valuations, or the specific transactions in which you use our Outputs.
• We do not track which companies you search for or analyze in a manner tied to your identity for purposes of selling that data to third parties.
• We do not currently use any analytics tracking tools on the Platform.

2. How We Use Your Information

We use the information we collect for the following purposes:

3. How We Share Your Information

WE DO NOT SELL YOUR PERSONAL DATA. We have never sold personal data and have no plans to do so.

We may share your information only in the following limited circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf, subject to contractual obligations to protect your data and use it only as directed by us:

3.2 Community Library

If you choose to share a configuration to the community library, the following information will be publicly visible to all Platform users:

• Your display name or username (not your email address).
• Your shared WACC configurations, including comp set selections and input parameters.

You are never required to share to the community library. Sharing is entirely voluntary. You can delete your own shared configurations at any time.

3.3 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, including but not limited to:

• Response to a valid subpoena, court order, or similar legal process.
• Cooperation with law enforcement or regulatory authorities.
• Protection of waccamole's rights, property, or safety, or the rights, property, or safety of our users or others.

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will provide notice of any such transfer and any choices you may have regarding your information.

3.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. Such data is not considered personal information under applicable law.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected:

When personal information is no longer needed, we will securely delete or anonymize it.

5. Data Security

We implement reasonable technical and organizational measures to protect your personal information:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS).
• Encryption at Rest: Personal information and account data stored in our databases is encrypted at rest using AES-256 or equivalent encryption.
• Access Controls: Access to personal information is limited to authorized personnel on a need-to-know basis. Administrative access requires multi-factor authentication.
• Payment Security: Payment card data is processed exclusively by Stripe, which is PCI DSS Level 1 certified. We never store full card numbers on our servers.
• Password Security: All password storage and verification is handled by Clerk, our authentication provider. waccamole never sees, stores, or has access to your passwords.
• Infrastructure: The Platform is hosted on Vercel with data processing on Google Cloud Platform, both providing SOC 2 certified infrastructure with automated backups and redundancy.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files that are stored on your device when you visit a website. They help the website remember your preferences and understand how you interact with the site.

6.2 Cookies We Use

In addition to cookies, the Platform uses browser localStorage to store your preferences (such as theme, font, and recent configurations). localStorage data is stored only on your device, is never transmitted to our servers, and can be cleared through your browser settings.

We do not currently use analytics cookies, functional cookies, or marketing/advertising cookies.

6.3 Managing Cookies

You can manage cookie preferences through the cookie settings accessible from the Platform sidebar, and at any time through your browser settings. Because we only use strictly necessary cookies for authentication, disabling cookies will prevent you from signing in.

6.4 Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. We do not currently respond to DNT signals because we do not perform any cross-site tracking or use analytics tracking tools.

7. Your Rights and Choices

7.1 All Users

Regardless of your location, you have the following rights:

• Access: You can access and review the personal information associated with your account through your account settings.
• Correction: You can update or correct your account information at any time through your account settings.
• Deletion: You can request deletion of your account and associated personal information by contacting us at support@waccamole.ai. We will process deletion requests within 30 days.
• Data Export: You can request a copy of your personal data in a portable format by contacting support@waccamole.ai.
• Marketing Opt-Out: You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any marketing email.
• Cookie Preferences: You can manage cookie settings through the Platform's cookie preferences interface or your browser settings.

7.2 European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you have additional rights under the GDPR or equivalent legislation:

• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Object: You may object to the processing of your personal data based on legitimate interests.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@waccamole.ai. We will respond within 30 days.

7.3 California Residents

If you are a California resident, the CCPA and CPRA provide you with additional rights:

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell (we do not sell personal information).
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell personal information.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

7.4 Other Jurisdictions

If you are located in a jurisdiction with data protection laws that grant additional rights (such as Brazil's LGPD, Canada's PIPEDA, or Australia's Privacy Act), we will comply with applicable requirements. Contact us at support@waccamole.ai to exercise any rights available under your local law.

8. International Data Transfers

waccamole is based in the United States. If you access the Platform from outside the United States, your personal information will be transferred to and processed in the United States, where data protection laws may differ from those of your country.

For transfers from the EEA, UK, or Switzerland to the United States, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission, as incorporated into our data processing agreements with service providers (Clerk, Vercel, Google Cloud, Supabase).
• Your explicit consent, where other mechanisms are not available.

By using the Platform, you consent to the transfer of your information to the United States as described in this Privacy Policy.

9. Children's Privacy

The Platform is designed for use by financial professionals and is not directed to children under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.

10. Third-Party Links and Services

The Platform may contain links to third-party websites, including SEC EDGAR, financial data providers, payment processors, and other external resources. This Privacy Policy applies only to the waccamole Platform. We are not responsible for the privacy practices of third-party websites.

11. How We Use Usage and Search Data

Because waccamole is a financial data platform, we want to be particularly transparent about how we use data about your searches and analyses:

• We do NOT build profiles of your investment interests. We do not analyze which companies you search for to infer your investment strategy, portfolio composition, or trading intentions.
• We do NOT sell search or usage data. Your searches, WACC calculations, and company lookups are never sold to, shared with, or made available to any third party in identifiable form.
• We DO use your saved preferences to personalize your experience. For example, your saved comp sets and recently viewed companies are stored to make the Platform more useful for you. This data is associated with your account and is not shared.

If we ever wish to use usage data in a manner materially different from what is described above, we will notify you and obtain your consent before doing so.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users via email within 72 hours of becoming aware of the breach, where feasible and required by applicable law.
• Notify the relevant data protection authority where required by GDPR or other applicable law.
• Provide a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to mitigate the breach.
• Take all reasonable steps to contain and remediate the breach.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify registered users via email of material changes.
• Post a prominent notice on the Platform.

Your continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, you can contact us at:

waccamole LLC
Email: support@waccamole.ai
For data protection inquiries (GDPR): support@waccamole.ai