Privacy policy

Wado helps applicants ask for recommendation letters and other outside materials, share files, and track what happens. Doing that requires handling some of your information. This page explains what we collect, why, and what we do with it, in plain language. If anything here is unclear, email support@request.usewado.com and we’ll explain it.

What we collect

If you’re an applicant

• Account details: your name, email address, and password (your password is stored only as a secure hash, never saved in plain text).
• Application details you enter: program or opportunity names, organizations, deadlines.
• Request details: your recommender’s name, email, and relationship to you, your message, and submission instructions.
• Files you upload to share with recommenders, such as a resume, transcript, or personal statement.

If you’re a recommender

• Your name and email address, provided by the applicant who sent you a request.
• Your responses to that request: accepting, declining, or marking it completed.
• Any file you upload to complete a request, if the applicant chose the upload-back method.

Recommenders do not create accounts. We hold your contact details only as part of the request the applicant created.

Automatically

• Product analytics (via PostHog) and performance data (via Vercel Analytics): pages visited, features used, and technical information like browser type. We use this to understand what’s working and fix what isn’t.
• Cookies needed to keep you logged in. Session cookies expire after one hour; refresh cookies after seven days.

What we use it for

• Running the product: creating requests, sending request and notification emails, storing files, showing statuses.
• Sending transactional email only: request links, status notifications, and reminders. We don’t send marketing email without separate, explicit consent.
• Keeping the product safe: rate limiting, abuse prevention, debugging.
• Improving the product, using aggregated analytics.

We do not sell your information. We do not show ads.

Who can see what

• Your recommender sees only the request you sent them: the application name, organization, deadline, your message, instructions, and files you attached to that request. Never your dashboard or other applications.
• You see your recommender’s responses and, for upload-back requests, the file they uploaded.
• Files are private by default. They’re accessible only through authorized, time-limited access tied to your account or the recommender’s request link. We never attach your files to emails.

Who helps us run Wado

We use a small set of service providers, each handling only what their job requires:

• Supabase: database and file storage.
• Resend: sending transactional email.
• Vercel and Render: hosting.
• PostHog: product analytics.

How long we keep things

We keep your data while your account is active. If you delete your account, your applications, requests, and files are deleted. Recommenders can ask us to remove their contact information from requests by emailing support@request.usewado.com.

Your choices

• You can view and edit your account details in settings.
• You can delete your account, which deletes your data as described above.
• You can ask us what we hold about you, or ask us to correct or delete it, by emailing support@request.usewado.com.

Security

Your data is encrypted while it travels to and from us. Passwords are stored only as a secure hash, never in plain text. We check who you are before showing any file, and each recommender link opens only one request. No system is perfectly secure, but we treat your application materials as carefully as we’d want ours treated.

Children

Wado is not intended for children under 13. If you believe a child has created an account, contact us and we’ll remove it.

Changes

If we change this policy in a way that matters, we’ll update the date at the top and say what changed. We won’t quietly weaken it.

Questions? support@request.usewado.com. See also our terms of service.