Privacy Policy

1. Who we are

Wellspun AI Platform (“Wellspun”, “we”, “us”) operates a software platform that helps agency operators (“Operators”, “you”) find local businesses without an adequate website, generate a preview website for them, and pitch it. This policy explains what personal data we collect, from whom, and how we use it. Our registered business address is [INSERT LEGAL ENTITY NAME & ADDRESS].

2. Data we collect

a. Operator account data. When you create a Wellspun account: your email address, hashed password, and license/subscription status.

b. Business (“Prospect”) data. To provide our core service, we collect publicly available business information (business name, category, address, phone number, public reviews, and public photos) via third-party sources such as Google Places. This data concerns businesses, and may incidentally include a business owner's publicly listed name or contact details. We use it solely to generate a preview website and outreach pitch on an Operator's behalf.

c. Payment data. Payments are processed by Stripe. We do not collect or store full card numbers; we retain only transaction metadata (amount, status, timestamps) needed for order records and support.

d. Cookies. We use strictly necessary cookies (e.g. session/auth) required for the site to function, and — only after you consent via our cookie banner — optional analytics cookies. See Section 5.

3. How we use data

To operate and secure the platform, generate and host preview websites, process payments, communicate with Operators about their account, and — for business/Prospect data — to power the outreach pitch feature Operators use to contact business owners. We do not sell personal data.

4. Contact forms & outreach

Wellspun's outreach features let Operators contact business owners about a generated preview website. Operators are solely responsible for ensuring any outreach they send complies with applicable law in their jurisdiction (e.g. CAN-SPAM, PECR, CASL) — including honoring opt-out/ suppression requests, which Wellspun supports via its suppression list feature.

5. Cookies & analytics

We use strictly necessary cookies to keep you signed in and the site functional; these do not require consent. Any non-essential analytics cookie or tracking pixel is loaded only after you explicitly accept via the cookie banner, and never before. You can withdraw consent at any time by clearing your browser's local storage for this site, which re-shows the banner.

6. Your rights

Depending on your jurisdiction (e.g. under GDPR or CCPA), you may have the right to access, correct, delete, or export personal data we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us at [INSERT PRIVACY CONTACT EMAIL].

7. Data retention & security

We retain personal data only as long as needed for the purposes above or as required by law, and apply reasonable technical and organizational safeguards (encryption in transit, access controls) to protect it. No system is perfectly secure, and we cannot guarantee absolute security.

8. Governing jurisdiction

This policy is governed by the laws of [INSERT STATE/COUNTRY], without regard to conflict-of-law principles.

9. Changes to this policy

We may update this policy from time to time; material changes will be reflected by updating the “Last updated” date above.

10. Contact

Questions about this policy: [INSERT CONTACT EMAIL].