Privacy Policy

Walden (“Walden,” “we,” “us”) is a product development platform built for Shape Up, available at walden.so. This policy explains what personal information we collect, how we use it, and the choices you have. If you have any questions, write to us at hello@walden.so.

Walden is a workspace tool used by teams. When your organization uses Walden, your organization controls the workspace and its content; we process that content to provide the service.

Account information. When you sign up or are invited to a workspace, we collect your name and email address through our authentication provider, WorkOS, along with your role and workspace membership.

Workspace content. The pitches, scopes, tasks, updates, documents, sketches, messages, and other content you and your team create in Walden.

Billing information. Payments are processed by Stripe. We receive and store subscription status and billing identifiers; we never see or store your full card details.

Newsletter signups. If you subscribe to our journal newsletter, we collect your email address.

Usage and log data. Standard server logs (such as IP address, browser type, and pages requested) generated when you use the site.

Cookies. We use a session cookie to keep you signed in and a preference cookie to remember your theme (light or dark). We do not use advertising or cross-site tracking cookies.

• To provide, maintain, and improve Walden.
• To authenticate you and secure your workspace.
• To process subscription payments and manage your plan.
• To send transactional email — invitations, account notices, and, if you subscribed, the journal newsletter. You can unsubscribe from the newsletter at any time.
• To prevent abuse, enforce our terms, and comply with law.

We do not sell your personal information, and we do not use it for advertising.

Walden includes an AI assistant. When you use it, the relevant workspace content and your messages are sent to Anthropic, our AI provider, to generate a response. Per Anthropic’s commercial API terms, this data is not used to train Anthropic’s models. Don’t include information in AI conversations that you wouldn’t put elsewhere in your workspace.

We share information only with the providers we rely on to run Walden, each bound by their own data protection commitments:

• WorkOS — authentication and user management
• Stripe — payment processing
• Convex — application database and backend
• Anthropic — AI assistant responses
• Resend — transactional and newsletter email
• Vercel — website hosting
• LaunchDarkly — feature flag management
• Sanity — content management for our public site

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to your information).

We keep your information for as long as your account or your organization’s workspace is active, and as needed for legal, billing, and security purposes afterward. When a workspace is deleted, its content is removed from our production systems, with residual copies purged from backups on a rolling basis.

To request deletion of your personal information, contact us at hello@walden.so. If your account belongs to an organization’s workspace, we may direct your request to your organization’s administrator.

Depending on where you live (including the EU/EEA, UK, and certain US states), you may have the right to access, correct, export, restrict, object to the processing of, or delete your personal information. Where we rely on consent, you may withdraw it at any time. To exercise any of these rights, email hello@walden.so; you may also lodge a complaint with your local supervisory authority.

For users in the EU/EEA and UK: we process personal information on the legal bases of contract performance (providing the service), legitimate interests (securing and improving the service), consent (newsletter), and legal obligation. Our services are hosted in the United States; where required, transfers are protected by standard contractual clauses or equivalent safeguards maintained by our providers.

We protect your information with industry-standard measures, including encryption in transit, authenticated access to all workspace data, and payment handling delegated entirely to Stripe. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you as required by law.

Walden is a workplace tool and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this policy from time to time. If we make material changes, we will notify you by email or a notice in the product before they take effect. The effective date above always reflects the current version.

See also our Terms of Service.