Professional workspace
Waffle
“

I showed our CEO the before-and-after. Went from a messy Google Doc to a polished scorecard, built live in front of him. Instant buy-in.

Lauren F. — Head of People & Culture|Professional Services

Privacy Policy

Last updated: February 8, 2026

1. Introduction

Waffle ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our interview scorecard generation service.

2. Information We Collect

2.1 Information You Provide

  • Account information (name, email address, organization details)
  • Job descriptions and interview scorecards you create
  • Payment information (processed securely through Stripe)
  • Communications with our support team

2.2 Automatically Collected Information

  • Usage data and analytics (via PostHog and Google Analytics)
  • Device information and IP addresses
  • Cookies and similar tracking technologies
  • Error logs and debugging information (via Sentry)

3. How We Use Your Information

  • To provide and maintain our scorecard generation service
  • To process your AI-powered scorecard requests
  • To manage your account and billing
  • To improve our service through analytics and feedback
  • To send important service updates and notifications
  • To comply with legal obligations

4. AI Processing

We use Anthropic's Claude AI to generate interview scorecards from your job descriptions. Your job descriptions and generated scorecards are processed through Anthropic's API. Anthropic's data processing practices are governed by their privacy policy.

5. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Stripe (payments), Clerk (authentication), Vercel (hosting), Anthropic (AI processing), Neon (database)
  • Transcript Platform Integrations: If you connect a transcript platform, we share data necessary for integration
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), encrypted database storage, rate limiting via Arcjet, and regular security audits. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us at privacy@waffle.cards.

8. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Opt-out of marketing communications
  • Object to processing of your data

9. Cookies and Tracking

We use essential cookies for authentication and session management. We also use analytics cookies (Google Analytics, PostHog) to understand how you use our service. You can control cookies through your browser settings.

10. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@waffle.cards
Website: https://waffle.cards