Privacy Policy

1. Scope

This Privacy Policy applies to information processed by WeliAI in connection with the Service. It does not apply to third-party websites, services, or tools that may be linked from or integrated with the Service.

2. Information We Collect

We may collect the following categories of information:

Information you provide directly

• Account and profile information, such as your name, email address, organization, and role
• Content you submit to the Service, including uploaded documents, prompts, questionnaire responses, configuration selections, comments, and feedback
• Communications you send to us, including support, legal, privacy, or policy inquiries

Information collected automatically

• Device and browser information
• IP address and approximate geolocation derived from IP
• Session and usage information, such as pages viewed, timestamps, clickstream events, and interaction history
• Log, diagnostic, and performance data used to operate, secure, and improve the Service

Research artifacts and generated outputs

• Scenario outputs, figures, summaries, reports, metadata, and run history generated from the inputs you provide
• System metadata associated with analysis runs, including timing, parameters, status, and artifact references

3. Sensitive Data and PHI

Unless WeliAI has expressly agreed in writing to process regulated health data under an applicable enterprise agreement and, where relevant, a Business Associate Agreement, you must not submit protected health information, patient-identifying data, or other regulated personal health data to the Service.

If you believe sensitive or regulated data has been submitted in error, contact us promptly using the contact details below.

4. How We Use Information

We may use information to:

• Provide, operate, maintain, and secure the Service
• Authenticate users and administer accounts
• Process uploads, run analyses, generate outputs, and present results
• Respond to support requests and communicate with users
• Detect, prevent, and investigate misuse, abuse, and security incidents
• Improve platform performance, reliability, safety, and usability
• Comply with legal obligations and enforce our policies and agreements

5. How We Disclose Information

We do not sell personal information.

We may disclose information:

• To service providers and subprocessors that support hosting, storage, analytics, security, and customer support, subject to appropriate obligations
• To comply with applicable law, regulation, legal process, or government request
• To protect the rights, safety, security, and integrity of WeliAI, our users, or others
• In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards

6. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain security, comply with legal obligations, resolve disputes, and enforce agreements.

Operational retention periods should be finalized before production release. Suggested placeholders:

• Account information: retained while the account remains active and for [X] days thereafter, subject to legal holds
• Research content and outputs: retained while projects remain active and for [X] days after deletion or closure, subject to legal, security, and audit requirements
• Audit and security logs: retained for [X months/years]

We may retain de-identified or aggregated information for longer periods where permitted by law.

7. Security

We maintain administrative, technical, and organizational measures designed to protect information against unauthorized access, misuse, loss, alteration, and disclosure. No system, however, can guarantee absolute security.

8. International Transfers

Your information may be processed in jurisdictions other than your own. Where required, we will implement appropriate safeguards for cross-border transfers.

9. Privacy Rights and Choices

Depending on your location and applicable law, you may have rights relating to your personal information, including rights of access, correction, deletion, objection, or restriction. We may require reasonable verification before acting on a request.

10. Children

The Service is not directed to children and should not be used where prohibited by applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above.

12. Contact

Privacy: contact@weli.ai

Support: contact@weli.ai