Skip to content

The plain policy

Privacy.

We built a company on the idea that your data should stay on your soil. This site follows the same rule. Here is what we collect, why, and what you can ask us to do about it. Last updated: 13 August 2026

Who we are

This site, wagonworksai.com, is run by WagonWorks, a venture of The Lobbi (the "we" and "us" in this policy). If you want to reach a human about anything here, write to support@thelobbi.io.

What we collect

Not much, and only what the site needs to do its job:

  • Your email, if you give it. When you stake a claim on the waitlist, we keep the email address you enter so we can reach you about early access and launch.
  • Enrollment details. For the AI workspace we collect organization and contact names, billing email, country, selected products and seat quantities, and the terms version you accepted. The billing email is encrypted at rest and a keyed locator helps us prevent duplicate subscriptions.
  • Billing records. Stripe collects payment details on its hosted pages. We retain Stripe customer, Checkout, invoice, and subscription references plus payment status, but we do not receive or store your full card or bank credentials.
  • A recording of your visit. We use PostHog to record how this site is used, and that recording covers the whole site — not only the public pages. It captures the pages you open, where you move and click, what you type into ordinary form fields, and the text those pages display to you. On signed-in pages that includes whatever is on screen: your organization name, your name and email address, your plan, and your seat list.
  • Two things are never recorded. Password fields are always hidden, and the contents of the messages between your browser and our servers — including the token that keeps you signed in — are not captured. We do see that a request happened, to which address and how long it took, but not what was inside it. Microsoft's sign-in screens are on Microsoft's own site and are never recorded here, and your card details are entered on Stripe's pages, which we do not record either.
  • Usage events. Which page you viewed; when a checkout is started, with the plan and number of seats; what you click, including the text on the thing you clicked; clicks that did nothing, so we can find controls that look like buttons but are not; how fast pages load for you; and any error the site throws in your browser.

We do not ask for sensitive information on this site, and please do not send it to us here.

Why we collect it

  • To contact you about the waitlist, early deployments, and launch, if you asked us to.
  • To understand how the site is used so we can make it clearer and better.
  • To keep the site secure and working.

Who else touches it

Vercel hosts the site and functions, PostgreSQL stores protected enrollment records, Stripe handles checkout and billing, Resend delivers verification and claim emails, and The Lobbi Licensing service completes entitlement delivery. PostHog receives the session recordings and usage events described above, from every page of this site including the signed-in ones. Once you buy, we tell PostHog your account identifier so that your visits before and after the purchase are understood as one person; we do not send it your email address for that purpose. These providers process data only to provide their services. We do not sell or rent your information.

Cookies and analytics

PostHog sets a cookie and a browser-storage entry so that it can recognize the same browser across visits. Analytics traffic is sent through this site's own address rather than directly to PostHog, so it will not appear as a third-party request in your browser tools; it still goes to PostHog. The waitlist email is sent to our waitlist function but is not written to browser storage; its display counter lasts only for the current tab.

PostHog receives the IP address your browser connects from and may use it to work out an approximate location.

This site does not currently offer a way to turn analytics off. If you would like your sessions excluded, write to support@thelobbi.io and we will do it.

How long we keep it

We keep waitlist data until you ask us to remove it or it is no longer needed. Expired one-time secrets and rate-limit records are removed on a bounded schedule. Billing and transaction records are retained as required for accounting, fraud prevention, disputes, and law. Enrollment contact data is deleted or de-identified when it is no longer needed for service delivery or those obligations.

Your choices

  • You can ask us to show you what we hold about you, correct it, or delete it.
  • You can ask us to take your email off the waitlist at any time. Any email we send you will include a way to opt out.
  • You can ask us to stop recording your sessions, and to delete the recordings we already hold.
  • Depending on where you live, you may have additional rights over your data. Write to us and we will honor them.

To do any of these, write to support@thelobbi.io and tell us what you would like.

Children

This site is meant for businesses and the adults who run them. It is not directed at children, and we do not knowingly collect information from them.

Changes to this policy

If we change how we handle data, we will update this page and change the date at the top. If the change is a big one, we will do our best to tell the people it affects.

Contact

Questions about privacy? Write to support@thelobbi.io. We would rather you asked than wondered.

If any line here is unclear, that is on us, not you. Write and we will make it plainer.