WELFLUX
Privacy Policy

Privacy Policy

Last updated: June 7, 2026

This Policy explains what data we collect when you use WELFLUX, why we collect it, who we share it with, and the rights you have over it. We've kept the language plain and the document short.

1. Scope

This Privacy Policy explains how WELFLUX ("WELFLUX", "we", "us") collects, uses, and shares information when you visit our website, create a WELFLUX account, or use the AI Marketing Intelligence Engine and Sales Kit Generator (together, the "Service").

2. Information We Collect

Account data. When you create an account, we collect your name, email address, password (hashed), and the plan you choose. Authentication is handled by Supabase Auth.

Generation data. When you create a Sales Kit, we store the inputs you provide (product name, audience description, platform, and goal) along with the generated output and timestamps, so you can review your history.

Billing data. Payments are processed by Stripe. Stripe collects card and billing details on our behalf. We store a Stripe customer identifier, subscription status, and billing period end date. We do not store full card numbers.

Support data. When you contact us through the contact form or by email, we store your message and the email address you used so we can reply.

Technical data. Like most websites, we collect basic technical data such as IP address, browser type, and request timestamps to operate and secure the Service.

3. How We Use Information

We use the data above to:

  • Provide, operate, and improve the Service.
  • Generate Sales Kits and persist your generation history.
  • Process payments and manage subscriptions.
  • Reply to support enquiries and to the contact form submissions.
  • Detect, prevent, and respond to fraud or abuse of the Service.
  • Comply with legal obligations.

4. AI Model Providers

Generation requests are sent to AI model providers (such as OpenAI) so we can return a Sales Kit. We share the inputs you provide and our system prompt with the provider for the duration of the request. WELFLUX configures these providers under their standard API terms; we do not opt in to AI training on your data. The provider may retain the request briefly for abuse monitoring as described in its own terms.

5. Sharing of Information

We share data only with the following categories of recipients:

  • Service providers who help us operate WELFLUX (Supabase for database + authentication, Stripe for payments, Vercel for hosting, OpenAI for model inference).
  • Authorities when required by law or to protect the rights, property, or safety of WELFLUX, our users, or the public.
  • Successors in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality obligations.

We do not sell personal information.

6. Retention

We retain account, generation, and billing data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations and resolve disputes. You can request deletion of your account at any time by emailing hello@welflux.com.

7. Your Rights

Depending on where you live, you may have rights to access, correct, export, restrict, or delete the personal data we hold about you, and to object to certain processing. To exercise these rights, email hello@welflux.com. We aim to respond within 30 days.

8. Security

We implement reasonable technical and organisational measures to protect your information, including encrypted transit (HTTPS), Row Level Security on our database, scoped API keys, and signature-verified webhooks. No system is perfectly secure, so we encourage you to use a strong, unique password and to contact hello@welflux.com immediately if you suspect an issue.

9. Cookies

We use cookies that are strictly necessary to keep you signed in and to operate Stripe checkout. We do not use cross-site advertising cookies. You can clear cookies from your browser at any time, but some parts of the Service will not function without them.

10. International Transfers

WELFLUX is hosted on infrastructure operated by providers based in the United States and Europe. By using the Service, you understand that your information may be processed in those jurisdictions.

11. Children

WELFLUX is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, email hello@welflux.com and we will delete it.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page and, for material changes, will provide a more prominent notice (such as by email).

13. Contact

For privacy questions or requests, email hello@welflux.com.

Questions about this document? Email hello@welflux.com.