Privacy policy

Last updated 29 September 2026

Wunel is a shared markdown workspace where people and the AI assistants they connect edit the same pages. This policy explains what personal data we handle when you use Wunel, why, who helps us, how long we keep it, and what you can ask of us.

1. Who we are

Upnorth AI AB is the controller for the personal data described here. This policy covers the Wunel web app at app.wunel.com, the agent server at mcp.wunel.com that your AI assistants connect to, the Wunel iOS app (through TestFlight and the App Store), and this website.

When you put other people’s personal data into your pages (a meeting note that names a colleague, say), you decide what goes in and who can see it. We store and serve that content for you so that the service works.

2. What we collect

Your account

• Your email address and display name.
• The workspaces you belong to and your role in each (owner, editor or viewer), invitations you send or receive, and pages shared with you.

What you and your assistants write

• Pages, folders, comments and replies.
• Provenance: for every block of text, who wrote it (a person, or which assistant on whose behalf) and when. This is a core feature. It is what lets your team see and review who changed what.
• A history of changes to each page, so edits can be reviewed and reverted.

Files and images

• Files and images you or your assistants upload, with their file name, type, size and who uploaded them.
• Files are stored exactly as uploaded, with one exception: a photo you attach in the iOS app is re-encoded on your phone first, which drops EXIF data such as the camera, the time and the GPS location. Everything else, including photos uploaded in the web app, keeps its metadata, so remove it before uploading if you do not want it stored and shown to people who can open the file.
• We extract text from some files so that you and your assistants can search and read them.

Searches

• The searches you and your assistants run in Wunel: the search text (up to 200 characters), when, in which workspace, whether a person or an assistant searched, how many results came back and how long it took. Never the content of the results. We use this to improve search, and keep it for 30 days.

Sharing

• Share links you create and the access level you choose (view, comment or edit).
• People who open a share link without an account (“guests”) can give a display name. We store that name, what they write, and a guest cookie that recognises them on that browser (see cookies).
• Requests to access a page: who asked, for which page, and whether the request was approved or declined.

Connected assistants

• A record for each assistant you connect (its name and whose behalf it acts on) and the access keys issued to it. Keys are stored as hashes, with when they were created, when they were last used and when they expire.

Security and account activity

• Security-relevant events on your account, such as sign-ins, sign-in codes and links being sent, keys created or revoked, “sign out everywhere”, access requests and account deletion. For these we store the time, the IP address and the browser or app identifier (user agent). You can see this log yourself under Settings → Security.
• Our web server logs each request, including IP address, user agent, the address requested and the time. We use these logs to run and secure the service.

Product analytics

• How Wunel is used, in the web app and by AI assistants you connect, without page content. See product analytics below for exactly what that includes.

3. Your AI assistants

Wunel does not run AI models on your content, and we do not send your content to AI providers.

You choose to connect an assistant, such as Claude or ChatGPT, over MCP. That assistant then reads and writes the pages and files you give it access to, on your behalf. What the assistant’s provider does with that content is governed by your agreement with that provider, not by this policy. You can see every connected assistant, and revoke its access, under Settings → Security.

4. Why we use data, and on what legal basis

We do not sell personal data, and we do not use your content for advertising.

Nobody at Upnorth AI reads your pages, and nothing scans them for what they say. Your pages are processed automatically only to make the product work: a search index of your own workspaces, link suggestions, and a preview card for a page you share publicly. We look at a page only if someone reports it to us, or if the law requires it, and then only at the page that was reported. See the terms for what is not allowed and what we do about a report.

5. Product analytics

We use PostHog, hosted in PostHog’s EU cloud, to learn which features are used, where people get stuck and when something breaks. It is set up so that the content of your pages never reaches it:

• Events. Page views, clicks (without the text of what you clicked) and a small set of named events, such as “signed in”, “page created”, “agent connected” or “change kept”. For AI assistants we record which tool was used and how many blocks were written, never the text, file names, titles or search queries.
• Identity. When you are signed in, events are linked to your account ID only. Your email address and name are not sent.
• Session recordings, fully masked. For signed-in members we record how the app is used, with every piece of text replaced by placeholders, form input masked, and the editor, images and files blocked out entirely. Recordings never run on shared pages, guest views or pairing pages. They are kept by PostHog for 30 days.
• Errors. When something breaks we send a short, scrubbed error message and where in the code it happened, never the data involved.
• Heatmaps. Where on a screen people click and how far they scroll, without the text of what they clicked.
• Where you came from. If you arrive through a link that names a campaign (for example an ad, with utm_source or a Google Ads click ID in the address), we keep those campaign details with your account when you sign up, so we can see which campaigns bring people who stay. They never include your email address or name.
• Not collected. Console messages, network traffic and performance data are switched off. Share-link tokens and pairing codes are stripped from addresses, IP addresses are discarded, and “Do Not Track” is respected: with it on, the browser sends nothing to PostHog.

Whether any of this uses a cookie is your choice in the cookie banner; see cookies. If you prefer not to be tracked at all, content blockers that block PostHog stop the browser part of analytics from loading. Wunel works normally without it. You can also object to this processing; see your rights.

In the iOS app PostHog records the same kind of events (screens opened, pages opened and edited, sync and offline periods, all without page text), linked to your account ID only. When something goes wrong it records the error type, which request failed and how, and, after a crash or a freeze, Apple’s crash report for it (MetricKit), never the data involved. There is no session recording in the app. To group events, the app keeps a random installation ID and a small event queue in its own storage on your device.

On this website (wunel.com) PostHog counts page views, clicks (with the text of what was clicked, since the site is public), how far pages are scrolled and heatmaps. If you press Accept in the cookie banner, it also records how the site is used, with anything typed into a form masked. Some events, such as signing in or an assistant writing to a page, are recorded by our servers, so they are counted whichever app you use.

6. Cookies and similar technologies

This website and the web app show a cookie banner the first time you visit. It asks one thing: may we use cookies to count visits and measure our ads? Accept and Reject count the same, and your answer applies to both wunel.com and app.wunel.com.

Always

• wunel_session: keeps you signed in to the web app. It lasts up to one year, is marked HttpOnly (page scripts cannot read it) and is only sent over HTTPS. Strictly necessary.
• wunel_guest: recognises a guest who opened a share link, so their name and their edits stay theirs. It lasts up to 90 days. Strictly necessary for guest editing.
• wunel_consent: remembers your answer to the cookie banner, on wunel.com and app.wunel.com. It lasts six months, then we ask again. Strictly necessary.
• The web app also keeps some preferences in your browser’s local storage. They stay on your device.

Only if you press Accept

• ph_…_posthog (PostHog): a random ID, so that your visits over time, and from this website into the app, count as one visitor. When you are signed in to the app it holds your account ID. It lasts six months. While a tab is open, PostHog also keeps the current visit in the browser’s session storage.
• Google Ads (_gcl_au and similar, set by Google), only while we advertise with Google: to see whether a visit that came from one of our ads led to a sign-up. They last up to 90 days.

If you press Reject, or don’t answer

• No analytics or advertising cookies are set, and Google’s code is not loaded.
• PostHog still counts visits, without storing anything in your browser. On this website it uses an anonymous code that PostHog works out on its servers and changes every day. In the web app the ID lives only in the page’s memory and is gone when you close the tab; when you are signed in, events are linked to your account ID, as described under product analytics.

Changing your mind

Use Cookie settings at the bottom of every page on this website, or Cookie settings… in the web app’s ⋯ menu, to see the banner again. If you choose Reject after accepting, the analytics and advertising cookies are removed.

The iOS app has no cookies. It keeps a random installation ID in its own storage; see product analytics.

7. Who processes data for us

We use these providers (sub-processors) to run Wunel. Each handles data only on our instructions and only for the purpose listed.

8. Transfers outside the EU

Your pages, files and account data are stored in the EU. Some providers above are based in the USA (WorkOS for sign-in, Apple for TestFlight and the App Store) or may process data there (Google, for our ads, only if you accept cookies). Where personal data is transferred outside the EU/EEA, we rely on a recognised safeguard, such as the EU–US Data Privacy Framework where the recipient participates in it, or the European Commission’s standard contractual clauses. You can ask us for more information about these safeguards.

9. How long we keep data

• Account data and content: as long as your account exists, or until you delete it. Pages and files in a workspace stay until they are deleted or the workspace is deleted.
• Backups: we take nightly backups and keep them for up to 30 days (14 days on the server, 30 days in separate Hetzner storage in the EU). Deleted data disappears from backups as they roll off.
• Assistant keys expire one year after they are issued, unless you revoke them sooner.
• Searches (the search text and how many results it found, never page content) are kept for 30 days to improve search, then deleted automatically.
• Session recordings are kept by PostHog for 30 days.
• Server logs are kept for a limited period for operations and security.

10. Deleting your account

You can delete your account yourself in the web app under Settings → Security → Delete account. To protect you, we email you a one-time code first, and deletion only goes ahead with that code. Deleting your account permanently removes:

• your account and your sign-in identity at WorkOS;
• the workspaces you own, with their pages, folders, comments, page history and share links, and the other members’ access to them;
• your comments, and the authorship records linking blocks to you, everywhere;
• your connected assistants and all their keys;
• the searches you and your assistants ran;
• your memberships in other people’s workspaces, your access requests, and your account activity log.

Text you wrote in pages that belong to other people’s workspaces stays in those pages, because it is part of their document, but it is no longer linked to your account. We keep a record that the account was deleted (the time, IP address and user agent) for security. Deleted data stays in backups until they roll off, after 30 days at most. If you want written confirmation that files you uploaded have been erased from storage, email us.

11. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you, and get a copy.
• Rectification: have inaccurate data corrected. You can also edit your pages directly.
• Erasure: have your data deleted. You can do most of this yourself (see deleting your account).
• Portability: get your content in a usable format. Any page can be downloaded as Markdown (.md) or exported as Word (.docx) or PDF from the page menu in the web app.
• Object to processing based on legitimate interests, including product analytics.
• Restriction of processing in certain situations.
• Complain to a supervisory authority. In Sweden that is Integritetsskyddsmyndigheten (IMY), imy.se.

To use any of these rights, email support@wunel.com from the address on your account. We will answer within one month.

12. Changes and contact

If we change this policy, we will update the date at the top. For significant changes we will also tell account holders by email.

Questions about privacy: support@wunel.com, or write to Upnorth AI AB, Klippvägen 19, 135 61 Tyresö, Sweden.

How we protect your data is described on our security page.