Privacy Policy
Last updated: June 7, 2026
This Policy explains what data we collect when you use WELFLUX, why we collect it, who we share it with, and the rights you have over it. We've kept the language plain and the document short.
1. Scope
This Privacy Policy explains how WELFLUX ("WELFLUX", "we", "us") collects, uses, and shares information when you visit our website, create a WELFLUX account, or use the AI Marketing Intelligence Engine and Sales Kit Generator (together, the "Service").
2. Information We Collect
Account data. When you create an account, we collect your name, email address, password (hashed), and the plan you choose. Authentication is handled by Supabase Auth.
Generation data. When you create a Sales Kit, we store the inputs you provide (product name, audience description, platform, and goal) along with the generated output and timestamps, so you can review your history.
Billing data. Payments are processed by Stripe. Stripe collects card and billing details on our behalf. We store a Stripe customer identifier, subscription status, and billing period end date. We do not store full card numbers.
Support data. When you contact us through the contact form or by email, we store your message and the email address you used so we can reply.
Technical data. Like most websites, we collect basic technical data such as IP address, browser type, and request timestamps to operate and secure the Service.
3. How We Use Information
We use the data above to:
- Provide, operate, and improve the Service.
- Generate Sales Kits and persist your generation history.
- Process payments and manage subscriptions.
- Reply to support enquiries and to the contact form submissions.
- Detect, prevent, and respond to fraud or abuse of the Service.
- Comply with legal obligations.
4. AI Model Providers
Generation requests are sent to AI model providers (such as OpenAI) so we can return a Sales Kit. We share the inputs you provide and our system prompt with the provider for the duration of the request. WELFLUX configures these providers under their standard API terms; we do not opt in to AI training on your data. The provider may retain the request briefly for abuse monitoring as described in its own terms.
6. Retention
We retain account, generation, and billing data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations and resolve disputes. You can request deletion of your account at any time by emailing hello@welflux.com.
7. Your Rights
Depending on where you live, you may have rights to access, correct, export, restrict, or delete the personal data we hold about you, and to object to certain processing. To exercise these rights, email hello@welflux.com. We aim to respond within 30 days.
8. Security
We implement reasonable technical and organisational measures to protect your information, including encrypted transit (HTTPS), Row Level Security on our database, scoped API keys, and signature-verified webhooks. No system is perfectly secure, so we encourage you to use a strong, unique password and to contact hello@welflux.com immediately if you suspect an issue.
10. International Transfers
WELFLUX is hosted on infrastructure operated by providers based in the United States and Europe. By using the Service, you understand that your information may be processed in those jurisdictions.
11. Children
WELFLUX is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, email hello@welflux.com and we will delete it.
12. Updates to This Policy
We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page and, for material changes, will provide a more prominent notice (such as by email).
13. Contact
For privacy questions or requests, email hello@welflux.com.
Questions about this document? Email hello@welflux.com.