Privacy Policy

Sign-up and sign-in: email, display name and password. We store only a hash of the password, never the text. If you sign in with Google or Apple, we receive the account identifier, email and name, according to the permission you give the provider. With Wellmexh®, we receive the account identifier and email.

Session: your sign-in is kept in a cookie, and on our server we store only a hash of that code, with its expiry and any revocation.

Page content: everything you put on them, such as title, bio, text, links, social links, video addresses, QR Code values, uploaded images, any code you include, theme and public address. What you publish is public. If you publish other people’s data, you are responsible for having permission to do so.

Billing: customer and subscription identifiers at Stripe, plan, billing frequency, status, period dates and the subscription event history. Full card details stay with Stripe. For guest purchases, we also use the email entered at checkout and a purchase linking key.

Wellmexh® Premium: your Wellmexh® account identifier and whether Premium is active, to unlock the benefit.

Communication and operations: the service emails we send (email confirmation and password reset), the messages you send us, technical security and rate-limit records, and an audit trail of actions taken by our team in the admin panel (for example, plan adjustments).

Each published page has a small measurement script. When someone opens the page or clicks a link, the browser sends our collector the page identifier, the event type (visit or click), the link clicked, a traffic-source category and a random visitor identifier, stored in the browser’s local storage under the name wellynk_visitor. This identifier is not a cookie and is used only to avoid counting the same person several times in a short interval (30 minutes).

The source is worked out in the browser itself from the site the person came from and becomes just a category: direct, Google, Instagram, Facebook, TikTok, YouTube, X, LinkedIn or other. We do not store the referring address, the site name, the full URL or the user agent.

The IP address is used only transiently, to limit abuse and repeated counts. It goes through a cryptographic function with a server secret, and only the result, without the plain IP, is kept for a short time (30 minutes to 1 hour) in a rate-limit control table. The IP and the visitor identifier are not saved together with the metrics.

What is stored is daily aggregated counts per page: visits, clicks, clicks per link and visits per source. The page owner sees only these numbers. We do not use these metrics to identify visitors or to build profiles.

Cloudflare, when delivering the pages, and the providers that host the service may record technical connection data (such as the IP) in their own operational logs, under each one’s policies.

Pages published on the Origin plan may show a Google AdSense ad. When it appears, Google loads scripts and may use its own cookies and identifiers to show and measure ads, under Google’s policies. We do not receive that data. Pages on paid plans do not show ads.

Pages that embed YouTube or Vimeo videos load those services’ players, which may process visitors’ data under their own policies. Links to external sites lead to third-party services that we do not control.

Providing the service (creating and protecting the account, signing in, hosting and publishing pages, delivering metrics): performance of a contract (LGPD, art. 7, V; UK GDPR, art. 6(1)(b)).

Billing, subscriptions and tax and accounting obligations: performance of a contract and compliance with a legal obligation (LGPD, art. 7, II and V; UK GDPR, art. 6(1)(b) and (c)).

Security, fraud and abuse prevention, rate limiting, aggregated page metrics and improving the service: legitimate interests (LGPD, art. 7, IX; UK GDPR, art. 6(1)(f)), always taking care to collect the minimum necessary.

Service emails, such as email confirmation and password reset: performance of a contract. Today we only send emails tied to how the account works.

Complying with the law, answering authorities and defending our rights: legal obligation and the regular exercise of rights (LGPD, art. 7, II and VI; UK GDPR, art. 6(1)(c) and (f)).

We do not sell personal data.

We use suppliers to run Wellynk^®, and each receives only what it needs for its role:

Stripe: payments, subscriptions, invoices and the billing portal.

Cloudflare: storage (R2) and delivery (CDN) of published pages and images.

Email delivery provider: confirmation and password reset emails.

Authorized AI provider: page generation in the “Create with AI” feature. It receives only the description you write and the page information used as context, only when you use the feature, and processes this data only to generate the answer.

Google, Apple and Wellmexh®: sign-in. When you sign in through them, the provider handles your data under its own policy. In the case of Wellmexh®, we also check whether your Premium is active by sending your Wellmexh® account identifier.

Google AdSense, YouTube and Vimeo: ads and videos shown on published pages, as explained above.

Hosting and infrastructure providers: where the app and the database run.

We may also share data with authorities when the law requires it, with professional advisers bound by confidentiality, and with a successor in a corporate reorganization, keeping the protection of this Policy. Content you publish on a page is public and can be seen by anyone.

We are a United Kingdom company, and our suppliers (such as Stripe, Cloudflare and Google) operate in several countries, including outside the United Kingdom and Brazil. So your data may be processed outside your country. When that happens, we use the mechanisms the law provides in each case, such as adequacy decisions, standard contractual clauses (including the UK addendum and the ANPD standard clauses) or another applicable legal ground.

Account and page content: while the account exists. When the account is deleted, content is erased or anonymized, as described below.

Session and temporary codes: sign-in lasts up to 30 days, or until you sign out. Email confirmation and password reset links are valid for 24 hours and 1 hour respectively.

Billing: we keep the history of subscriptions and invoices, without your name and email after the account is deleted, for as long as tax and accounting law requires and to defend rights, generally 5 to 6 years depending on the applicable law.

Metrics: the daily aggregated counts remain while the page exists. Your plan sets the viewing window (7, 30 or 90 days).

Rate-limit control: the control keys expire in 30 minutes to 1 hour.

Admin audit trail: kept for security and accountability, without passwords, tokens or secrets.

You can delete your account at any time in the settings. Deletion is immediate, has no waiting period and cannot be undone. It does the following: ends your sessions; cancels active subscriptions; takes your pages offline; deletes published versions and uploaded images from storage; replaces your email and name on the Stripe customer with anonymous values; and removes your email, name, password and sign-in connections, as well as erasing page content. The account record remains in anonymized form to preserve billing history.

If any step fails, you can sign in and finish the deletion. After it, the email is free for a new sign-up.

Under the LGPD, you can ask for confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, information about who we share it with, withdrawal of consent (where applicable) and objection to processing based on legitimate interests. Under the UK GDPR, you have the rights of access, rectification, erasure, restriction, portability and objection, and to withdraw consent where it is the basis for processing.

To exercise these rights, write to contact@wellynk.com. We may ask for information to confirm you are the account holder. We reply within the legal deadlines, generally within one month. You can handle a lot yourself in your account: edit your data and pages, disconnect sign-in methods and delete the account.

Visit metrics are aggregated and do not identify visitors, so we cannot locate the data of a specific person in them.

You can also complain to the data protection authority: in Brazil, the ANPD; in the United Kingdom, the Information Commissioner’s Office (ICO). We would prefer you contact us first so we can try to resolve it.

In the app and the site we use only what is needed to work, with no advertising or tracking cookies of our own:

wellynk_session: keeps you signed in (HttpOnly cookie, valid for up to 30 days).

wellynk_device_uuid and wellynk_device_token: identify a browser where you already confirmed the login code (HttpOnly, valid for up to 1 year).

wellynk_oauth_tx, wellynk_oauth_link_intent and wellynk_provider_link: short-lived cookies used while signing in or connecting with Google, Apple or Wellmexh®.

wellynk_guest_claim: holds the linking key of a guest purchase, for up to 14 days.

NEXT_LOCALE: remembers the language you chose.

In the browser’s local storage, we keep interface preferences (such as the collapsed side menu and the drag hint in the editor).

On published pages, the only item of ours is the visitor identifier wellynk_visitor, described above. Google ads, YouTube or Vimeo videos and the Stripe payment page may use their own cookies, governed by their policies. You can clear cookies and site data in your browser settings.

We take reasonable technical and organizational measures to protect data, such as storing passwords and session codes only as hashes, using HttpOnly session cookies, not handling full card data (which stays with Stripe) and applying a content security policy on published pages. No system is completely secure. If an incident creates a significant risk to you, we will notify you and the authorities as the law requires.

Wellynk^® is for people aged 18 or older and is not directed at minors. We do not knowingly collect data from minors. If you believe a minor has created an account, let contact@wellynk.com know, and we will take steps to delete the data.

We may update this Policy. The date of the last update is shown at the top of the page. For significant changes, we will notify you by email or within the service.

Privacy requests and questions: contact@wellynk.com.

Support: support@wellynk.com.

Wellmexh International Limited, 20 Fenchurch Street, London, EC3M 8AF, United Kingdom. Company No. 16642289.