Last updated October 3, 2026
Wandamark processes two kinds of data: account data about the people who use the dashboard (name, email, workspace membership) and telemetry that your apps send us (opaque user identifiers, events, bug reports and user reports).
Account data, the events and reports your apps submit, aggregated daily metrics, and an audit log of actions taken in the dashboard. API keys and access tokens are stored only as SHA-256 hashes.
You control what identifiers you send. We recommend opaque user IDs rather than emails. Report content is visible only to Admins and Moderators of your workspace.
If you test apps or share referral links through Wandamark Earn, we store your earner profile (display name, country, devices), your consent, the tests you join and the feedback you submit. While a test is running, the app records the pages you visit, what you click, errors, active time and authenticated backend receipts for test task outcomes; automatic capture omits keystrokes and input values. Click positions are recorded as fractions of the page to build heatmaps. Notes, bug reports, screener answers and feedback you explicitly submit are recorded, as are screenshots you choose to attach (you can black out parts first). If a test offers screen and voice recording and you opt in, we store the recording of the screen you share and your microphone. App teams see your display name, country and this test data, never your email. Identity and bank details for payouts are collected and held by our payment partner. Raw test activity, backend receipts, notes, screenshots and recordings are deleted 180 days after the session ends; payout records are kept as long as tax law requires.
We store developer applications, business and app ownership information, review decisions, Stripe customer and verification references, verification status, payment-method references and a Stripe card fingerprint used to flag duplicate billing accounts. Stripe hosts document and selfie verification; our application does not retrieve or store ID images, biometric outputs or full card numbers. Authorized reviewers see applications and verification status. Billing, consent and review records are retained for dispute handling and applicable financial obligations.
Daily metrics are kept for your plan's history window (minimum 62 days for month-over-month comparisons). Per-user activity rows are deleted after 62 days. App deletion is subject to financial retention and unresolved-obligation checks; required billing and payout history is retained.
We use a small set of service providers to run Wandamark: our cloud database and hosting providers store and serve your data, our payment partner processes payments and earner payouts (we never see or store full card or bank numbers), an AI provider classifies the written feedback in user tests when an app team asks for a report, and our messaging partners deliver email and SMS notifications you turn on. Each provider processes data only to provide its service to us.
Workspace admins can delete an app, from Integrations → Manage. For other questions, data requests or deletion requests, email privacy@wandamark.com.