This Privacy Policy explains how WellStreak AI collects, uses, stores, and protects information when customers access the WellStreak platform, website, integrations, and support channels. It applies to workspace owners, team members, referral participants, and authorized users of connected channels.

By using WellStreak services, you acknowledge that data processing occurs as described in this policy and related legal pages, including Terms of Service, Data Processing Agreement (DPA), and Cookie Policy.

We collect account and identity details such as name, email address, workspace role, authentication metadata, and session context required for secure platform access.

We also collect organization and operational data including company profile details, AI training inputs, knowledge documents, channel integration metadata, subscription records, invoices, referral activity, support messages, and audit logs.

Information is used to provide and secure core services: user authentication, workspace setup, AI employee training and execution, conversation routing, usage analytics, billing operations, and customer support.

Data may also be used for service reliability improvements, abuse prevention, legal compliance, and communication of critical product updates or policy notices.

WellStreak is a structured AI workforce platform. AI responses are generated from model providers combined with training context configured by each workspace. We design the system to prioritize bounded instructions, company-scoped behavior, and operational reliability.

We do not intentionally merge private business training data across separate customer organizations for shared autonomous learning.

WellStreak may use third-party providers for infrastructure and service delivery, including Supabase, OpenAI, Anthropic, Google Gemini, Groq, Meta platforms, and Razorpay. These processors are used only as required to deliver platform functionality.

Where applicable, we apply contractual and technical safeguards appropriate to the service and data category involved.

We retain customer data for as long as needed to provide services, maintain security records, resolve disputes, enforce agreements, and satisfy legal obligations.

Retention periods may vary by data type (for example, billing records, audit events, and support history) and by jurisdictional requirements.

WellStreak applies technical and organizational controls designed to protect data confidentiality, integrity, and availability, including authentication controls, tenant-scoped access patterns, encryption practices, rate limiting, and webhook validation.

No security program can guarantee absolute protection, but we continuously improve controls to reduce risk and respond quickly to security concerns.

Depending on applicable law, users may request access, correction, deletion, portability, restriction, or objection for certain personal data processing. Workspace-level requests should be initiated by an authorized owner or admin.

You may submit requests through support@wellstreak.io or supported product endpoints for data deletion workflows.

If data is transferred across regions through processors or infrastructure providers, WellStreak applies safeguards aligned with contractual and legal requirements where applicable.

Customers are responsible for assessing their own regulatory obligations in jurisdictions where they operate.

We may update this policy to reflect platform, legal, or operational changes. Material updates will be reflected by revising the last-updated date and may be communicated through product notices or support channels.

For privacy questions or requests, contact support@wellstreak.io.