Privacy Policy

Mauro Carrera (CUIT 20-35043486-1) runs WelcomeAI, a service that answers questions from a customer's own documents. This policy describes two different relationships, and it matters which one you are in.

• Customers. People and organisations with a WelcomeAI account. We are the controller of their account data.
• Visitors. People who talk to a chat widget on a customer's website. For that conversation the customer is the controller and we are their processor: they decide what the assistant knows and what a form asks. If you are a visitor and want your data removed, the fastest route is the site you were using; you can also write to us and we will pass it on.

• Account. Name, email address, and a profile picture if you upload one or sign in with Google. A password is stored only as a scrypt hash; we never hold the password itself.
• Workspace. Its name, the plan, members and their roles, and settings such as language and time zone.
• Content you add. Documents, pages and text you upload or connect, the passages they are split into, and the numeric embeddings that make them searchable.
• Usage. Counts of messages, documents and storage, so limits can be enforced and shown to you.
• Audit records. Who did what in a workspace, with a timestamp, for security and support.
• Billing. Handled by Lemon Squeezy, who are the merchant of record. We receive a subscription status and an invoice reference. We never see or store card numbers.

When someone talks to a widget on a customer's site, we store, on that customer's behalf:

• The messages exchanged, and which passages of the customer's content were used to answer.
• The page the visitor was on: URL, title and referrer, so the assistant knows the context.
• Browser user agent and country.
• The IP address as a salted SHA-256 hash, never in the clear. It is used to rate limit abuse and to tell one session from another. We cannot recover the original address from it.
• Anything typed into a lead form the customer built — typically a name, email or phone number — together with the exact consent text that was shown at the time.

• To provide the service you asked for: indexing your content, answering questions, and showing you the results.
• To enforce the limits of your plan and bill the right amount.
• To keep the service secure — rate limiting, abuse prevention and audit trails.
• To send messages the service needs to send: verification, password resets, invitations, usage warnings and billing notices.
• To fix problems you report to us.

Answers are generated by Anthropic's Claude models, and content is turned into embeddings by OpenAI. To answer a question we send the question, recent conversation, and the passages retrieved from the relevant knowledge base.

We do not train models on your content, and we do not permit our providers to. Your documents are embedded so they can be retrieved, and for nothing else.

Customers on a Bring Your Own Key plan send that traffic under their own agreement with the provider, and the provider's terms apply to it directly.

If you sign in with Google, we receive your name, email address and profile picture from your Google account.

We use them to create your account, to identify you when you return, and to show your name and picture to the other people in your workspace. We request no other Google data, and we do not read your Gmail, Drive, Calendar or Contacts.

Google's data is never sold, and never shared beyond the processors listed below. You can disconnect WelcomeAI at any time from your Google account permissions, and you can delete the WelcomeAI account itself from your profile.

We use a small number of providers, each for one job:

• Vercel — hosting and content delivery.
• Neon — the PostgreSQL database, including the vector index.
• Cloudflare — DNS and file storage.
• Anthropic — generating answers.
• OpenAI — embeddings for search.
• Inngest — background jobs such as indexing and scheduled syncs.
• Resend — transactional email.
• Lemon Squeezy — payments, as merchant of record.
• Google Analytics — traffic measurement on the public website only. It does not run inside the product or inside a widget.

We do not sell personal data, and we do not share it for advertising.

• Account and workspace data: for as long as the account is open.
• After a workspace is deleted: 180 days, then permanent removal. During that window it can be restored. The platform owner can also purge a workspace immediately on request.
• Conversation analytics: for the retention window of the plan — 30 days on Starter, 365 days on Pro and Business.
• Audit records and the minimum billing records required by law are kept longer, and hold no content.
• Rate-limit counters are pruned automatically once their window has passed.

• Everything travels over HTTPS, with HSTS on every response.
• Credentials for connected services are encrypted at rest with AES-256-GCM and only decrypted on the server when a sync runs.
• Provider keys and connection secrets are never sent to the browser and are never returned by an API once saved.
• Every tenant table is scoped by workspace, and access is checked on the server on every request.
• Sign-in, sign-up and password reset are rate limited per IP.
• No system is perfect. If you find a problem, write to privacy@welcomeai.dev and we will treat it as urgent.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to some processing.

• Access and correction: your name and picture are editable in your profile, workspace settings in the workspace.
• Export: knowledge bases can be exported from the app, and we will provide account data on request.
• Deletion: deleting a workspace removes its data on the schedule above; write to us to delete the account itself.

Write to privacy@welcomeai.dev and we will answer within 30 days.

• The product sets one cookie, to keep you signed in. There is no advertising or tracking cookie inside the app.
• The widget stores a conversation id in the visitor's browser so a chat survives a page change. It is not used to follow anyone between sites.
• This website uses Google Analytics to count visits.

If this policy changes in a way that matters, we will say so in the product before it takes effect. The date at the top always reflects the current version.

Questions about privacy: privacy@welcomeai.dev. Anything else: support@welcomeai.dev. The service is also governed by our Terms of Service.