Legal

Privacy Policy

Effective date: March 18, 2026

This Privacy Policy explains how Wello Partners LLC ("Wello," "we," "our," "us") collects, uses, discloses, and retains information when you use our website, mobile applications, and related services (collectively, the "Service").

1. Scope and Controller

Wello Partners LLC is the controller of personal information processed under this policy for the Service.

Contact for privacy matters: support@wellopartners.com

2. Required Disclosure Summary

This policy includes the following required disclosure categories:

Categories of personal information we collect.
Sources of personal information.
Business and commercial purposes for processing.
Categories of third parties with whom information is disclosed.
Retention and security practices.
Consumer privacy rights and request methods.
Children's privacy disclosures.
How to contact us and how policy changes are communicated.

3. Information We Collect

Identifiers and account information: name, email, account ID, role, login/session metadata, third-party auth provider metadata where used, and support identifiers.
Business profile and offer information: business name, business address, phone, offer content, and moderation metadata.
Redemption and receipt information: redemptions, receipt uploads, review outcomes, business review feedback or dispute reasons for certain trade reviews, fraud-prevention logs, and audit events.
Financial and payout metadata: payout method metadata, linked bank-account metadata, masked account details, routing and account information you provide or authorize for bank-transfer withdrawals, payout status, claim-link metadata, and provider references.
Plaid verification metadata: linked-item/account metadata and transaction-matching metadata used for purchase verification.
Images and uploaded content: receipt images, offer images, and other images or files you choose to submit through the Service.
Device and technical data: app version, device/platform data, diagnostics, and push token data.
Location data: approximate or precise location only when needed for map and nearby-offer features.
Communications: support messages and related records.

4. Sources of Information

Directly from you (account creation, sign-in, profile updates, support requests).
Automatically from app and website usage.
From businesses and administrators using Service tooling.
From identity or sign-in providers you choose to use.
From service providers used to operate verification and payout features.

5. How We Use Information

Operate and secure user accounts, sign-in methods, and Service functionality.
Process offers, redemptions, verification, and cashback workflows.
Process gift card cashouts and bank-transfer withdrawal requests.
Prevent fraud, abuse, and policy violations.
Support customer service, diagnostics, and incident response.
Send operational notifications and account-related updates.
Meet legal obligations, enforce agreements, and protect rights/safety.

7. Key Third-Party Providers

Supabase: backend, auth, data, storage.
Google: optional Google sign-in and identity flows.
Stripe: business billing and invoicing flows.
Plaid: bank-link and purchase-verification support.
Checkbook: bank-transfer payout operations.
Reloadly: gift card payout and claim fulfillment.
Brevo: website contact and support-form email delivery.
Resend: operational and transactional email delivery.
Cloudflare: abuse prevention and object storage flows.
Expo Push: push notification delivery.
Apple Maps / Google Maps APIs: maps and place lookup features.

See Third-Party Notices for additional details.

8. Retention and Security

We retain information only as long as needed for operations, legal compliance, dispute resolution, fraud prevention, and enforcement.

Active account data is retained while your account is active.
Operational and audit records may be retained longer where required for security, accounting, legal, tax, or regulatory reasons.
When financial-link access is revoked or unlinked, active token references are cleared and related records are moved to inactive status where applicable.

We implement administrative, technical, and organizational safeguards. No system is guaranteed to be 100% secure.

9. U.S. Privacy Rights (Including California)

Depending on your state, you may have rights to request access, correction, deletion, or portability of personal information, and to opt out of certain processing activities where applicable.

Right to know/access categories and specific data (where required).
Right to correct inaccurate personal information.
Right to delete personal information, subject to legal exceptions.
Right to data portability where applicable.
Right to opt out of sale, sharing, targeted advertising, or certain profiling, where those activities apply under law.
Right to limit use/disclosure of sensitive personal information (California).
Right to non-discrimination for exercising privacy rights.
Right to appeal a denied request where required by applicable law.

To submit a request, email support@wellopartners.com with subject "Privacy Request" and include enough information for verification.

10. Accessing and Updating Your Information

You can review and update certain profile information directly in your account. You may also request correction through support@wellopartners.com.

You can request account deletion in-app through the Profile area, including the Help & Support section. If your account has a remaining cashback balance, you are shown a forfeiture confirmation before submitting the deletion request. You may also contact support for assistance.

11. Account and Data Deletion Requests

You can request deletion of your app account and associated user data by either:

Using the in-app account deletion flow available from the Profile area / Help & Support section, or
Emailing support@wellopartners.com with subject "Account Deletion Request".

For security, we may verify ownership before completing a deletion request. Some records may be retained when required for security, fraud prevention, tax, accounting, or legal compliance.

12. Do Not Track and Similar Signals

Some browsers provide "Do Not Track" (DNT) signals. Because there is no universally accepted DNT standard, our Service does not currently respond to all DNT browser signals in the same way.

Where required by law, we process applicable opt-out preference signals (such as Global Privacy Control signals) for the activities covered by those laws.

We do not permit third-party advertising networks to collect personally identifiable information through our Service for cross-site behavioral advertising.

13. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If we learn we collected personal information from a child under 13 without appropriate authorization, we will take steps to delete it.

14. International Transfers

Our services are operated primarily in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. or other countries where our service providers operate.

15. Changes to this Policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date and publishing the revised policy on this page.

16. Contact

Privacy questions or requests: support@wellopartners.com