Privacy Policy
wallie · onewallie.com · last updated September 15, 2026
Who we are
wallie is operated by Eames (trading as 1YC), the Netherlands — the same company behind the products at 1yc.dev. Contact: hello@onewallie.com.
Postal address: Eames, Biesbosch 273, 1181 JC, Amstelveen, The Netherlands.
What we collect
- Waitlist & early-access signups: your email address, stored as a customer record with Stripe (Ireland/US). Nothing else.
- Purchases: if you subscribe to Wallie Cloud via our Stripe payment link, Stripe processes the payment and shares your name, email and billing country with us. We never see or store card numbers.
- Server logs: our host (Vercel Inc.) records standard request logs for security and reliability.
- Open-source usage: Local ledgers remain on your machine. When you enable Cloud or another notification channel, the runtime sends the configured events and heartbeats to that service.
What Wallie Cloud stores from your agents
When you connect an agent, Cloud stores its name, network, runtime mode and version, liveness timestamps, and the decision events it sends. Events can include their type and timestamp, destination host, amount, policy rule, transaction hash, approval identifier, notification text, and event details. We also store workspace and billing identifiers, contact information, hashed workspace keys, sign-in records, alert destinations, and delivery status. Welcome emails awaiting delivery are stored encrypted and cleared after the email provider accepts them.
The official runtime keeps wallet private keys and payment-signing credentials in your infrastructure. Cloud receives a separate workspace key to authenticate requests and stores its hash. URL fields are sanitized, but custom event text is not a secrets filter: do not include credentials or personal information in agent names or event text.
Why we process it (legal bases, GDPR)
- Email for waitlist invites & product updates: consent (withdraw any time by emailing us).
- Billing data, connected-agent events, account access, and alert delivery: contract performance.
- Request logs: legitimate interest in operating a secure service.
Retention
Waitlist emails are kept until you ask us to delete them. Billing records follow Dutch statutory retention periods (typically 7 years). Server logs are rotated automatically by our host.
Event records and their associated delivery records expire 90 days after receipt. After cancellation takes effect, the workspace’s event and delivery records are deleted after 30 days, or earlier when their normal retention period expires. The scheduled cleanup runs every minute and processes records in batches. You can also request deletion by contacting us.
Your rights
You may request access, correction, deletion, restriction or portability of your data, and object to processing, at any time via hello@onewallie.com. You also have the right to lodge a complaint with the Dutch DPA (Autoriteit Persoonsgegevens).
Processors we use
- Vercel Inc. — hosting, serverless functions, logs
- Neon Inc. — managed Postgres database storing Wallie Cloud workspaces and event data
- Stripe Payments Europe — payments & customer records
- Resend — transactional & alert email delivery
- Twilio — SMS alert delivery (only if you enable SMS alerts)
- GitHub Inc. — open-source repository hosting
- Google LLC (Google Fonts) — serves the typefaces used on this site; your browser requests the font files directly, which discloses your IP address to Google. No cookies are set.
Cookies
We use no tracking cookies. We use Vercel Web Analytics for aggregate visits to the public website and Cloud sign-in and welcome pages. It does not use analytics cookies. We remove query strings and fragments, exclude private account pages and custom events, and respect Do Not Track and Global Privacy Control. Vercel processes approximate location, device and browser information and a short lived visitor hash that is discarded after 24 hours. We do not send wallet data, email addresses or sign-in tokens as analytics properties. The account app uses an essential session cookie to keep you signed in for up to 30 days. Signing out clears it. The marketing website stores your theme preference and tutorial progress locally in your browser.