Privacy

Who operates the service

BlueLine Technologies LLC operates WayPoint. Independent Groups manage their own community activities within the platform.

Information used by the platform

Account information includes your authentication identity and verified email address. Authentication is handled by Supabase. Passwords are not stored in the application database. Profiles may include a display name, biography, avatar, optional home state, interests, vehicle details, and optional public business contact information.

We store uploaded photos and videos; posts, discussions, and chat messages; Group memberships, follows, application answers, roles and designations; event RSVPs and contributions; reports, verification submissions, moderation records, and deletion requests. Vehicle details and home state are optional for enthusiast accounts. Avoid uploading home addresses, credentials, or other unnecessary sensitive information.

Visibility and access

Profiles, Garages, ordinary posts, public event listings, and Group leadership rosters are public. Group settings can restrict membership rosters. Membership answers are available to the Group’s authorized managers and platform staff. Internal events and chat rooms use audience checks. Public RSVP names require the attendee’s opt-in.

Platform staff can review reports and moderation records. Group administrators cannot access platform audit logs. Private leadership plans require that Group’s membership or leadership designation; platform administration alone does not grant access to those plans.

Infrastructure and browser storage

Cloudflare hosts the application database and media infrastructure. Supabase manages sign-in sessions, email verification, and password recovery. The browser stores session information and may cache static application assets for offline fallback. Product analytics, security logs, and Group activity serve separate purposes; this transition does not add a third-party analytics tracker.

Deletion and retention

Use the account-deletion page to submit and track a request. Requests require manual processing at this stage. The team must remove or anonymize linked content and media, handle Group leadership continuity, and delete the authentication account. Limited records may need retention for a documented safety or legal reason; final retention periods, backup expiry, legal bases, and regional disclosures have not yet been finalized.

Account deletion → · Contact →