1. Who is responsible
WannaWare (Spokane Valley, Washington, USA) operates WannaPublish and is the "data controller" for the information described here. Privacy questions: info@wannaware.com.
2. What we collect
- Account details — your name, email address and a one-way hash of your password (we cannot read it). If you sign in with Google we receive your name, email, Google account ID and profile photo. Any avatar you upload and your chosen accent colour.
- Your content — publications and their pages, images and fonts you upload, templates you save, folders, the Trash, your activity feed (which publication you edited and when) and any share links you create.
- Billing status — your Stripe customer ID, which plan you are on, whether it is trialing, active or past due and the renewal date. Your card number, expiry and CVC are entered on Stripe's pages and never reach our servers.
- Referral information — your referral code, which account referred you (if any) and the rewards earned.
- Technical data — a session cookie so you stay signed in, and ordinary server logs (IP address, browser type, time and the pages or API calls requested) kept for security and troubleshooting.
- In your browser only — preferences such as light/dark mode, recently used fonts and colours, open tabs and unsaved drafts are stored in your browser's local storage so the editor can pick up where you left off. They are not sent to us except as part of saving a publication.
We do not use advertising trackers or analytics cookies.
3. How we use it
- To run the service: sign you in, store and open your publications, convert Publisher files, export PDFs and images, create share links.
- To bill you: start trials and subscriptions, apply discounts and referral credits, and keep your access in step with Stripe.
- To email you about your account: a one-time welcome note when you create it, password-reset links and billing notices (trial started, a reminder about three days before a free trial ends, payment failed, referral reward, subscription ended). These are transactional emails — we do not send marketing emails unless you separately opt in.
- To keep the service secure and working: detecting abuse, fixing faults, preventing fraud.
- To meet legal obligations such as tax and accounting records.
If you are in the EU/UK, our legal bases are: performing our contract with you (most of the above), our legitimate interests (security, troubleshooting, preventing abuse), legal obligation (tax records) and your consent where we ask for it.
5. How long we keep it
- Your account and content — for as long as your account exists. A lapsed subscription does not delete anything.
- Trash — publications you delete sit in the Trash for 30 days (you can restore them) and are then permanently removed.
- Account deletion — Profile settings ▸ Delete account immediately cancels any subscription and permanently deletes your publications, files, fonts, templates, folders, activity and sessions. Residual copies in backups are overwritten within about 30 days.
- Billing records — Stripe keeps invoices and payment records for as long as tax and accounting law requires, even after you delete your account.
- Server logs — typically 30 days.
6. Your rights and controls
You do not need to ask us for most things — they are built in:
- Access & portability — Profile settings ▸ Export my data downloads everything (publications, fonts, templates) as a ZIP you can keep or import again.
- Correction — change your name, email, avatar or password in Profile settings.
- Deletion — Profile settings ▸ Delete account.
- Billing — Account ▸ Billing & plan opens your Stripe billing page for invoices, card and cancellation.
You can also email info@wannaware.com to exercise any right under the law that applies to you (including objecting to or restricting processing, and withdrawing consent). If you are in the EU/UK you may complain to your local data-protection authority; if you are in California you have the right to know, delete and not be discriminated against for exercising your rights — we do not "sell" or "share" personal information as those terms are defined in California law.
7. Security
All traffic is encrypted (HTTPS). Passwords are stored only as salted hashes. Sign-in uses a secure, HTTP-only session cookie; signing out or changing your password ends sessions on other devices. Card data is handled entirely by Stripe. Access to production systems is restricted and keyed. No system is perfectly secure, so please use a strong, unique password and tell us at info@wannaware.com if you notice anything suspicious.
8. Where data is processed
Our servers and partners may be located in the United States and other countries. Where data about EU/UK residents is transferred abroad we rely on recognised safeguards such as standard contractual clauses or the partner's adequacy certification.
9. Children
WannaPublish is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, contact info@wannaware.com and we will remove it.
10. Changes to this policy
We will post any changes here and update the date at the top. For significant changes we will email you or show a notice in the app.
11. Contact
info@wannaware.com · WannaWare, Spokane Valley, Washington, USA. Related: Terms of Service.