Privacy Policy

The short version

Free tools run entirely on your device. When you use a free tool in the browser or via the CLI / MCP, Wyreup is not involved at runtime — your files, parameters, and outputs never reach our infrastructure. No accounts, no cookies, no analytics, no telemetry.

PRO tools forward your input to a third-party hosted-AI model when you invoke them. When you choose a PRO tool and submit an input, the input is routed through Wyreup's edge to the model provider (Cloudflare Workers AI or our image-model provider) that runs against it. The model — not Wyreup — acts on your data. Wyreup is the conduit: we route the request, deduct the credit, and return the model's response to you. We do not retain the input or output beyond the request. We do log metadata (which tool ran, when, file name) for your run history.

You decide what gets sent. You choose which tools to invoke and which inputs to submit. You are responsible for confirming you have the right to submit the input and for whatever you do with the output. See section 5 of the Terms of Service.

What we collect

For free tools

Nothing. Free tools never reach our backend.

For PRO accounts

• Email address. Used to deliver your API key and account notices.
• SHA-256 hash of each API key. The raw key is never stored — it's delivered once via email and shown once at creation.
• Run history metadata. Tool ID, credits consumed, timestamp, and the file name you submitted (not the file content). We use this only to show you your own history.
• Credit ledger. Purchases, spends, refunds — for billing transparency and to compute your balance.
• Connection IP for the /api/account/create endpoint, retained for 24 hours to enforce rate limits. Never linked to your account thereafter.

What we never store

• File contents — your files are forwarded through Wyreup to the model provider and discarded on our side immediately after the request returns.
• Output contents — the model's response is returned to you and not retained on our side.
• Card numbers — handled by Lemon Squeezy, never by Wyreup.
• Plain-text API keys.
• Analytics, fingerprints, third-party tracking, or advertising cookies.

Cookies

We set a single cookie, __Host-wyreup_session, after you activate your API key in the browser. It's HttpOnly, Secure, SameSite=Lax, and expires after 24 hours. It is strictly necessary for sign-in and is exempt from consent requirements under most regimes (including the GDPR ePrivacy Directive). We set no other cookies.

Subprocessors

When you invoke a PRO tool, your input is forwarded through the providers listed below. Under GDPR/CCPA we are required to disclose categories of recipients; we name them specifically here for transparency where we can. If we change a provider, we will update this list promptly. The actual processing of your input is performed by the third-party model provider, not by Wyreup.

When you invoke a PRO tool, your input is forwarded through:

• Cloudflare — site hosting, edge compute (Pages Functions), database (D1, in the Eastern North America region), and AI inference (Workers AI). See Cloudflare's privacy policy.
• An external image-model provider — hosts the models that power the image PRO tools (background removal, upscaling). The provider receives the image you submit but, under our agreement with them, does not retain inputs or outputs beyond the request. We may change providers from time to time; the current provider's name and privacy policy are available on request at hello@wyreup.com.
• Lemon Squeezy — merchant of record for credit purchases. Receives your billing info (name, billing address, payment instrument). Never sees your tool inputs or API keys. See Lemon Squeezy's privacy policy.
• Zoho (ZeptoMail) — transactional email delivery. Receives your email address and the message body (welcome key, account notices). See Zoho's privacy policy.

Your rights

You can, at any time:

• Access: view your run history and account at wyreup.com/account.
• Export: email hello@wyreup.com for a JSON export of everything we have on you.
• Delete: email hello@wyreup.com to close your account; unused credits are refunded per the refund policy.
• Rectify: change your email by emailing hello@wyreup.com from the address on file.

If you are in the EU/UK, you also have the right to lodge a complaint with your local supervisory authority.

Children

Wyreup is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect their information.

Data transfers and edge routing

Wyreup is operated from Indiana, United States, but Wyreup itself runs as an edge-compute application on Cloudflare's global network. Your data does not see Wyreup-owned servers in any meaningful sense — when you invoke a PRO tool, the request is handled by whichever Cloudflare data center is nearest to you (or to the routing path), forwarded to the model provider (Cloudflare Workers AI or our image-model provider), and the response is returned to you. The model provider in turn may operate in any region where it has infrastructure, including but not limited to regions outside the United States.

Wyreup does not select the region for any individual request, and we do not guarantee which country a given request will pass through. If your data is subject to data-residency, cross-border-transfer, or sovereignty requirements — GDPR Chapter V transfer rules, UK data-residency requirements, healthcare or government sectoral regimes, financial-services egress restrictions, or any equivalent — it is your responsibility to independently verify whether routing through Cloudflare's network and the relevant model provider is permitted under the rules that apply to you. See section 6 of the Terms of Service.

Free tools are not affected — they run entirely on your device and never touch Cloudflare's network or any third-party model.

Changes

We may update this policy. Material changes will be noted by updating the "Last updated" date and by emailing your account address where appropriate.

Contact

Privacy questions or rights requests: hello@wyreup.com.
Security disclosures (vulnerability reports, suspected key compromise): security@wyreup.com.