About Waven
Waven is a Swiss company. We developed Waven Access and we are responsible for this service, including how your data is stored and protected.
What data we collect
We collect only what is necessary to provide the remote VR control service. Here is exactly what we store:
- Access information
- Your tenant ID, hashed session identifiers, and login timestamps. We verify access tokens but do not store them in readable form.
- Device information
- Headset ID, device name, model, app version, connection times, player state, screen size, and online status.
- Session and usage information
- When you start and end sessions, their duration, timestamps, video URLs and labels, playback details, and usage statistics.
- Your settings
- Language preference, saved video URLs and categories, survey URL, and your last selected device.
- Security and technical logs
- Authentication events, rate-limiting information, and system events needed to protect and operate the service securely.
How we use your data
We use your data to:
- Authenticate you and your devices securely
- Send and receive remote control commands
- Restore your device state between sessions
- Display your session history and usage statistics
- Enable you to export or delete your data
- Prevent abuse and diagnose technical issues
- Maintain service security
We process your data based on legitimate interest to provide the service and maintain its security.
How long we keep your data
Your session history and usage statistics are automatically deleted after 2 years. This is a rolling period: we remove expired records every day and at service startup.
You can also delete your session history at any time from the My Data page—no need to wait.
Login sessions expire automatically. Security logs may be kept for operational purposes for a separate period. Backups are purged according to the same retention rules.
Your data rights
You are in control of your data. Depending on your local laws, you may have the right to access, correct, export, restrict, object to, or delete your personal data, and to file a complaint with a data protection authority.
With Waven Access, you can directly:
- View all your data on the My Data page
- Export your session history and usage statistics as a JSON file
- Delete your session history at any time
Security
We take security seriously. Waven Access uses:
- Tenant-scoped authorization to isolate your data
- Hashed server-side sessions
- CSRF and WebSocket origin protection
- Login throttling and input validation
- Encrypted HTTPS transport in production
- Unprivileged application container
While we implement strong security measures, no system can guarantee absolute security.
Contact us
If you have any questions about this privacy notice or how we handle your data, contact us at:
Changes to this notice
This notice may be updated when the service or its data practices change. The effective date above identifies the current version.