Privacy
Privacy Policy
How Wellence collects, uses, shares and protects personal data, and how you stay in control of it.
Effective 9 October 2026
Who we are
Wellence Ltd ("Wellence", "we", "us") is a company registered in England and Wales (company number 15287383), at 167-169 Great Portland Street, 5th Floor, London W1W 5PF, and registered with the UK Information Commissioner's Office (ZC084891). Our data protection contact is legal@wellence.me.
This policy covers the Wellence app at app.wellence.ai, our websites, and how we deal with customers, prospects and people who contact us.
Our role
Inside the Wellence app, your company is the controller of the personal data it puts in, and we are its processor: we process that data only to provide the service, on your company's instructions, under our Data Processing Agreement. If you use Wellence through your employer, your employer's privacy notice also applies.
We are the controller for the data we use to run our own business: website visits, early-access requests, accounts and sign-in, sales conversations, billing, support and product analytics.
What we collect
- Early-access requests: your name, work email, company, job title, role, department, company size and any promo code.
- Your account: name, work email, role and team, and the records that let you sign in.
- What your company puts into the app (as processor): goals, tasks, messages, files, workflows, what agents produce, ratings and feedback, answers to the AI diagnostic, and usage and cost records.
- Help and support: your Get help conversations, and anything you send our team.
- Sales: business contact details and professional information, including a LinkedIn profile you share with us, which we may use to prepare a tailored demo. When you open a demo link we sent you, we record that it was opened and how the demo was used.
- Product analytics: which pages and features are used, with an internal id but no names, emails or content. Signed-out visitors are counted without cookies, using a daily hash that changes every day. We respect Global Privacy Control and Do Not Track.
How and why we use it
| Purpose | Legal basis |
|---|---|
| Providing the Wellence service to your company | Performance of our contract with your company |
| Signing you in and keeping your account secure | Contract, and our legitimate interest in security |
| Answering early-access requests and setting up workspaces | Legitimate interests (and steps before a contract) |
| Answering help and support requests | Legitimate interests, and contract |
| Sales outreach and tailored demos to businesses | Legitimate interests (you can object at any time) |
| Improving the product with analytics that hold no names or content | Legitimate interests |
| Billing, record keeping and legal compliance | Legal obligation, and contract |
We don't sell personal data, and we don't use it for advertising.
How AI is used
Agents, the agent builder and Get help run on Anthropic's Claude, through Anthropic's API. To do their work, agents receive the context your company has set up and the task in hand, which can include people's names and work content. Anthropic doesn't use data sent through its API to train its models, and neither do we.
No decision with legal or similarly significant effects is made about anyone by AI alone. Agents ask a named person before anything is sent, posted or changed, and every agent has an owner who is accountable for it.
Sensitive data
Wellence isn't designed to collect special category data (such as health, ethnicity, religion or sexual orientation). Some HR work can touch it, for example a parental leave question. Your company decides which agents run and what they can see, and is responsible for having a lawful basis for that data. We don't use it for analytics or product improvement.
Who we share it with
We use these subprocessors to run the service, each under a written agreement that protects your data:
| Subprocessor | What for | Where |
|---|---|---|
| Anthropic | AI models that run agents, the agent builder and Get help | United States |
| Supabase | Database, sign-in and file storage | European Union (Ireland) |
| Vercel | Hosting and running the application | United States |
| Resend | Sending email (sign-in links, notifications) | United States |
We may also share data when the law requires it, to protect our rights or people's safety, or with a buyer if Wellence is sold or merged, in which case we'll tell you first. If you connect your own Claude or use your own Anthropic key, that provider handles the data under its own terms.
International transfers
Your company's database is stored in the European Union. Where data goes outside the UK or the EEA, for example to the United States, the transfer is covered by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, or by the EU-US Data Privacy Framework and its UK Extension where the provider is certified.
Cookies
The app uses only the cookies it needs: two secure sign-in cookies that keep you signed in, a cookie that remembers whether the sidebar is open, and, when you open a demo link we sent you, a cookie that connects what you do in that demo to the link. There are no advertising or third-party analytics cookies in the app.
How long we keep it
- Your company's data in the app: while its account is active. It's deleted straight away when an admin deletes the company, and within 30 days of the contract ending.
- Early-access requests that don't become a customer: up to 12 months.
- Help and support conversations: up to 24 months.
- Sales and demo records: up to 12 months after our last contact.
- Product analytics: up to 24 months.
Backups roll off on our database provider's schedule.
Keeping it safe
Each company's data is kept separate, people see their own team and what's shared with them, sign-in is by single-use expiring links with no passwords, files are private, and data is encrypted in transit and at rest. More on our security page. If a breach affects your data, we tell the right people without undue delay.
Your rights
You can ask to access, correct, delete, restrict or port your personal data, and object to how we use it, including to sales outreach at any time. For data your company put into Wellence, ask your company first, as the controller; we'll help it respond. Otherwise, email legal@wellence.me or ask in the app's Get help. We reply within one month.
You can complain to the UK Information Commissioner's Office at ico.org.uk or to your local data protection authority.
Children
Wellence is for businesses and isn't meant for anyone under 18.
Changes
When we change this policy, we update this page and its date. For significant changes, we tell customers by email or in the app first.
Contact
Wellence Ltd, 167-169 Great Portland Street, 5th Floor, London W1W 5PF. Email legal@wellence.me.