WaveRay Hangzhou Xishang Technology Co., Ltd.

Legal

WaveRay Privacy Policy

How WaveRay processes account, device, licensing, diagnostic, and support information, and the choices available to users.

Effective date: August 9, 2026

Xishang Technology ("we", "us", or "our") provides the WaveRay desktop application. This Privacy Policy explains what information WaveRay processes, why it is processed, and the choices available to you.

1. Information We Collect

Account information. When you create or use a WaveRay account, we collect your email address and authentication-related account identifiers. We do not store your plaintext password. Authentication is provided by Supabase.

Device information. To enforce the limit of three activated computers per account, WaveRay creates and stores a one-way hash derived from limited device characteristics, together with an optional device name, activation status, and last-seen time. We do not intentionally collect your files, contacts, precise location, or advertising identifiers for this purpose.

License information. We process your WaveRay plan, entitlement status, Microsoft Store product identifier, activation and verification times, and whether a license has been refunded, revoked, blocked, or expired for verification purposes.

Diagnostic information. If you contact support, we may process the information and diagnostic details you choose to provide. WaveRay does not send optical project contents or analysis data to us unless you deliberately use a cloud or support feature that clearly indicates an upload.

2. How We Use Information

We use this information to create and secure accounts; verify email addresses; authenticate users; provide free and Pro features; enforce the three-device limit; maintain a 30-day offline license cache following a successful online verification; detect abuse; process account, device, refund, revocation, and support requests; and comply with legal obligations.

3. Service Providers and Payments

Supabase provides account authentication and stores account, device, and entitlement records on our behalf. Microsoft Store processes purchases and payments. We do not receive or store your full payment-card information. Microsoft handles payment data under its own privacy terms.

4. Free and Pro Licensing

The free version may be used permanently with feature limits. A WaveRay Pro durable license is associated with the applicable Microsoft Store purchase and the WaveRay account used for activation. Up to three computers may be active on one account. You may remove an old device from the account page. After a successful online verification, Pro can remain available offline for up to 30 days. The next online verification may disable Pro if a purchase was refunded or revoked, or if the account was blocked.

5. Data Retention

We keep account and active entitlement records while your account remains open and as reasonably necessary to provide the service, resolve disputes, prevent fraud, and meet legal obligations. Revoked device records may be retained for security and abuse-prevention purposes. Support correspondence is retained only as reasonably necessary for support and legal purposes.

6. Data Security

We use reasonable technical and organizational safeguards. Authentication tokens are stored using Windows-provided credential storage where available, and device identifiers are stored as hashes. No system is completely secure, and we cannot guarantee absolute security.

7. Your Choices and Rights

You may view and remove activated devices in WaveRay. You may request access to, correction of, or deletion of your WaveRay account and associated personal data, subject to legal, fraud-prevention, and transaction-record retention requirements. Deleting an account does not automatically cancel, refund, or transfer a Microsoft Store purchase.

8. Account and Data Deletion Requests

To request account or personal-data deletion, email [email protected] from the email address associated with your WaveRay account. Use the subject "WaveRay Data Deletion Request". We may ask you to verify account ownership before completing the request.

9. International Processing

Supabase and Microsoft may process information in countries or regions other than your own. Where required, we use appropriate safeguards for international transfers through our service providers.

10. Children

WaveRay is intended for engineering, educational, and professional use and is not directed to children. We do not knowingly collect personal information from children where parental consent is required.

11. Changes to This Policy

We may update this Privacy Policy when WaveRay or applicable legal requirements change. We will publish the revised policy and update its effective date.

12. Contact

Xishang Technology

Website: https://xishangsoftware.com/

Support and privacy contact: [email protected]

Terms of Use: https://xishangsoftware.com/waveray/terms/