Privacy Policy

Who we are

Walling is operated by Walling Software Inc., a Delaware corporation. We provide a visual workspace for organizing ideas, content, tasks, and projects across web and mobile, with optional AI assistance and integrations.

Data we collect

Walling collects only what it needs to operate the service. Data falls into three categories:

How we use your data

We use your data to:

• Provide and operate Walling — sync content, render your workspace, and deliver collaboration features.
• Authenticate you and protect your account from unauthorized access.
• Power AI features you choose to use (chat, generation, organization, MCP).
• Support and improve the product — debug issues, measure feature usage in aggregate, plan improvements.
• Send service emails (account notices, billing, security) and, where you opt in, product updates.
• Comply with legal obligations and enforce our Terms.

Your workspace content

Content you create in Walling belongs to you. We process it on your behalf to provide the service — to store it, sync it across your devices, render it in the app, share it with people you invite, and (where you choose) pass relevant excerpts to the AI features you activate.

• Other members of a shared workspace can see content shared with them.
• Public links you create are accessible to anyone who has the link.
• You can delete content at any time; see Retention.

AI features and content processing

Walling integrates large language models (LLMs) and embedding models to power features like AI Chat, wall generation, the AI Wizard, inbox organization, and scheduled AI agents. When you use these features, relevant content from your workspace is sent to our model providers for processing.

• We use providers under enterprise-grade agreements that prohibit using your content to train their models.
• Content is sent only when you trigger an AI feature or when you authorize a scheduled agent to run on your behalf.
• For search and retrieval, we generate vector embeddings of your content and store them in our own infrastructure. Embeddings are not human-readable but represent your content and are protected with the same access controls as the source.
• You can see and revoke scheduled AI agents at any time from Settings → Agents.

Connecting external AI clients (MCP)

The Walling Model Context Protocol (MCP) server lets you connect external AI clients — such as Claude, Cursor, and ChatGPT — to your Walling workspace. This is an opt-in feature: nothing is sent until you authorize a connection. Here is what happens to your data once you do:

Service providers (sub-processors)

Walling relies on a small number of vetted service providers to operate. They process data only on our behalf and under contractual data-protection commitments.

We may also use email delivery providers for transactional and notification email. We update this list as our infrastructure evolves; material changes are reflected here with an updated effective date.

When we share data

We share your data only in the following limited circumstances:

• With service providers listed above, strictly to operate the service.
• With other members of a workspace, as required to power collaboration.
• With AI clients you authorize via MCP, scoped to the permissions you grant.
• When required by law, in response to valid legal process, or to protect rights and safety.
• In connection with a business transaction (merger, acquisition, etc.) — subject to commitments equivalent to this policy.

Security

We protect your data with industry-standard technical and organizational measures:

• Encryption in transit (TLS) and encryption at rest in our primary database.
• Scoped access controls, including row-level security on tenant data.
• Audited infrastructure and OAuth-based API access.
• Routine secret rotation and least-privilege service accounts.

No system is perfectly secure. We maintain an incident-response process and will notify affected users in line with applicable laws.

Retention

We keep your workspace content for as long as your account is active. When you delete content, it goes to a recycle bin you can restore from; items in the recycle bin are permanently deleted after a grace period. You can request deletion of your account at any time — see Your rights.

Operational logs (request metadata, errors, security events) are retained for a limited window for security, debugging, and abuse prevention. Aggregated, de-identified analytics may be kept for longer.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can exercise most of these directly in the app:

For anything you cannot do directly in the app, email privacy@walling.io and we will respond within the timeframe required by applicable law.

Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember your preferences, and measure product usage. We do not use third-party advertising cookies. Where required by law, we will ask for your consent before non-essential cookies are set.

Children

Walling is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can delete it.

International transfers

Walling is hosted and operated in the United States. If you access Walling from outside the United States, your data will be transferred to and processed in the United States and other jurisdictions where our service providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you in the app or by email. Continued use of Walling after the effective date constitutes acceptance of the revised policy.

Contact us