How we handle your data.

You sign up. You reflect each week. We help you turn that into a plan and a record of progress. The reflection is yours.

We collect what we need to run the service, keep your account secure, and let you cancel or take your data with you.

We don’t sell your data, and we don’t let our AI providers train their models on it.

We collect three kinds of information.

Account information. Your name and email address when you sign up, handled through our auth provider (Clerk). If you sign in with a third-party identity provider, we receive the basic profile fields they share.

Membership and payment information. When you buy a membership, our payment processor (Stripe) handles the card data. We never see or store full card numbers. We do receive a record of your purchase, billing country, and the last four digits of your card so we can show your billing history.

Product information. Your weekly reflections, plans, goals, commitments, and notes; the text and voice messages you exchange with Wednesday; transcripts of voice sessions; and the records we keep so you can see your progress over time. This is the part that’s most personal to you.

iPhone app and notifications. If you use the iPhone app, we collect a notification token so we can deliver session reminders and check-in nudges, plus basic device information (iOS version, app version, device model) for support and debugging.

Connected services. If you choose to connect Slack, your calendar, or another integration, we receive the access tokens and scopes you grant, and the limited information needed to deliver the integration. For example, the Slack channels we’re allowed to suggest, or the calendar entries that fall in the window you’ve shared. We only ask for the scopes the feature needs, and you can disconnect at any time.

We also collect basic technical information you’d expect any website to log: device type, browser, IP address, time of visit, and the pages you viewed. We use this to keep the service running and spot abuse.

We use your information to:

• Run the service: your account, the weekly ritual, your saved history.
• Generate your weekly plans and Wednesday’s responses.
• Process your purchases and send receipts.
• Send you account and service emails (sign-in links, receipts, important changes).
• Keep the service safe by detecting fraud, abuse, and security issues.
• Improve the product. We look at aggregate usage patterns, not individual reflections.

We don’t use your reflections to advertise to you, and we don’t share them with anyone outside the providers we need to run the service.

Wednesday is an AI guide. Your text messages, voice recordings, and reflections are processed by AI models to transcribe what you say, generate your weekly plan, surface patterns over time, and answer questions you ask Wednesday.

We use a third-party AI provider to run those models: Anthropic. We have an agreement with our model provider that prohibits it from using your inputs or outputs to train its general-purpose models.

AI outputs are AI outputs. They’re generated, not authoritative. We tell you when content was AI-generated, and we don’t treat AI outputs as professional advice. If something matters legally, financially, or medically, talk to a real professional.

We share information only with the providers we need to run the service, and only what they need to do their job. The current list:

• Clerk: sign-in and account management. Their privacy policy.
• Stripe: payment processing. Their privacy policy.
• Anthropic: the AI model provider for Wednesday and the weekly plan.
• Slack: the members-only community workspace. Joining is optional.
• Hosting and infrastructure: the providers that run our website, backend, and database. Currently Vercel (hosting) and Turso (database).
• Apple Push Notification service: to deliver iPhone notifications you’ve opted into.
• Email and analytics: transactional email and basic product analytics, configured to collect as little as possible.

We also share information when the law requires it, when we need to enforce our terms, or when we’re ever part of a business transaction (acquisition, merger). If that ever happens, we’ll tell you before your data moves.

We don’t sell your data. Full stop.

We keep your account and your reflections while your membership is active and for a short period afterward in case you want to come back.

If you delete your account or ask us to delete your data, we’ll remove your reflections and personal information from our active systems within 30 days. Some records may live a little longer in backups before they’re cycled out.

Billing records and other information we’re legally required to keep (taxes, fraud, legal claims) we retain for as long as the law requires.

Wednesday gets more useful when she remembers what matters to you. Your goals, your commitments, the patterns in your work. We make that controllable.

From the iPhone app you can:

• See what Wednesday remembers about you.
• Edit or delete specific memory items.
• Pause memory entirely so nothing new gets saved.
• Forget a specific week and drop everything tied to that session.
• Turn off categories like calendar context, community recommendations, or pattern learning. Wednesday will stop using anything you turn off.

You can:

• See what we have about you.
• Correct anything that’s wrong.
• Pause, edit, or delete what Wednesday remembers about you, anytime, from inside the app.
• Export your reflections and plans.
• Delete your account and your data.
• Cancel your membership anytime.
• Tell us to stop emailing you (other than essential service emails).

Email privacy [at] virtualwednesday.com and we’ll handle it. We aim to respond within a few business days and complete most requests within 30 days.

Down the road, we may offer programs where members can opt in to share specific workflows, patterns, or insights, and earn a share if those contributions create value. We’re not running one today.

If we launch one, it’ll be opt-in. We’ll show you the specific terms (what’s shared, how value is calculated, how you’d be paid) before you decide whether to participate. Settings already in your account are scaffolding for that future; turning a toggle there does nothing until a real program goes live.

We’re based in the United States and we process information there. If you’re in the EU, the UK, or another region with additional data-protection rights, we honor the rights you have under your local law (access, correction, deletion, objection, portability).

If you transfer information to us from a region with cross-border rules, we rely on the safeguards those rules provide (for example, EU Standard Contractual Clauses) when they apply.

The Tennessee Information Protection Act (TIPA) gives Tennessee consumers specific rights over their personal information. As a Tennessee-based business, we honor those rights.

You can:

• Confirm whether we’re processing your information.
• Access a copy of the information we hold.
• Correct inaccurate information.
• Delete information you’ve provided to us or that we’ve collected about you.
• Get a portable copy of your information.
• Opt out of any future targeted advertising, sale of personal data, or significant profiling decisions. We don’t do those today.

To exercise these rights, email privacy [at] virtualwednesday.com. We won’t treat you any differently for asking.

California residents have specific rights under the California Consumer Privacy Act (as amended). You can ask us what categories of information we’ve collected about you, ask us to delete it, and ask us not to share it with anyone for cross-context advertising. We don’t do cross-context advertising and we don’t sell your data, so the third right is already covered.

To exercise these rights, email privacy [at] virtualwednesday.com. We won’t treat you any differently for asking.

We use the smallest set of cookies needed to keep you signed in, run checkout, and understand how the site is being used in aggregate. We don’t use cookies for advertising.

You can control cookies in your browser. Turning off the ones we use may make sign-in or checkout stop working.