Privacy Policy

Welcome to Welda. The Welda mobile applications (iOS and Android), web platform at welda.ai, and all associated content, products, and services (collectively the "Service") are owned and operated by Welda, LLC ("Welda," "we," "us," or "our").

Your privacy is of the utmost importance to us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By accessing or using the Service, you agree to be bound by this Privacy Policy and our Terms of Service. If you do not agree, please do not use the Service.

If you have any questions about this Privacy Policy, please contact us at team@welda.ai.

1. Information We Collect

1.1 Account and Contact Information

When you create or manage an account, we collect:

• Email address and authentication details (including identifiers from Apple, Google, or other sign-in providers when you choose those methods).
• Display name, username, and profile information you provide.
• Billing information such as payment token identifiers when you purchase credits (we do not store credit card numbers — payments are processed by Stripe).

1.2 Creative Inputs and Outputs

To operate the Service, we process text prompts, generation parameters, and AI-generated media (images and videos). We store this content to provide features such as your generation history, gallery, and the ability to access your creations across devices.

1.3 Device and Usage Information

We automatically collect technical data when you access the Service, including:

• Device type, operating system, app version, and browser information.
• IP address and approximate location (based on IP).
• Diagnostics such as crash logs, performance data, and interaction events.
• Times of access, referring websites, and general usage patterns.

1.4 Cookies and Similar Technologies

On the web, we use cookies, local storage, and similar tools to remember preferences, maintain sessions, and measure engagement. You can adjust browser settings to limit cookies, but the Service may not function correctly without them.

1.5 Support and Communications

When you contact team@welda.ai or submit in-app feedback, we collect the information you provide, including attachments and transcripts, to respond to your inquiry and improve our services.

2. How We Use Your Information

We use the collected data to:

• Provide, personalize, and maintain the Service.
• Generate and deliver AI-created images and videos based on your prompts by sending them to third-party AI model providers.
• Process payments and manage your credit balance.
• Communicate with you about updates, security alerts, and support responses.
• Monitor usage, troubleshoot issues, and protect against fraud or abuse.
• Develop new features, train safety systems, and improve the Service (using aggregated or de-identified data wherever possible).
• Comply with legal obligations and enforce our Terms of Service.

3. Legal Basis for Processing (EEA, UK, and Switzerland)

Where GDPR or similar laws apply, we process personal data based on:

• Performance of a contract — providing the Service you requested.
• Legitimate interests — maintaining and improving the Service, securing infrastructure.
• Consent — marketing communications, optional analytics where required.
• Compliance with legal obligations — responding to lawful requests, tax requirements.

4. Third-Party Services and Data Sharing

We do not sell your personal data. We share information only with:

• AI model providers (such as Replicate, OpenAI, Google, and others) — your text prompts are sent to these providers to generate content. Each provider has their own privacy policy governing their use of data.
• Supabase — for authentication, database storage, and file storage.
• Stripe — for payment processing. We do not store your credit card numbers. We receive transaction confirmations and payment identifiers from Stripe.
• Analytics providers — we may use analytics services to measure and improve the Service. Where possible, data is aggregated or de-identified.
• Legal authorities — when we believe disclosure is necessary to comply with law, protect our rights, prevent fraud or abuse, or respond to lawful requests.
• Business transfers — in the event of a merger, acquisition, or asset sale. We will notify you before personal data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain personal data for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce agreements. Specifically:

• Account data — retained for the duration your account is active; deleted within 30 days of account deletion.
• Generated content — stored in your gallery as long as your account is active. Deleted when you remove them or delete your account.
• Transaction records — retained for up to 7 years as required for tax and accounting purposes.
• Usage and diagnostic data — retained for up to 90 days, then aggregated or deleted.

When data is no longer required, we delete or anonymize it. You may request deletion at any time by contacting team@welda.ai.

6. Data Security

We use technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. This includes:

• All data transmitted over encrypted connections (TLS/SSL).
• Database-level security with Row Level Security (RLS) policies ensuring users can only access their own data.
• Restricted access to personal information limited to employees, contractors, and agents who need it to operate or improve the Service.

No online service is completely secure. Please use strong passwords, keep your software updated, and notify us immediately at team@welda.ai of any suspected account compromise.

7. International Data Transfers

We operate in the United States and may process data using servers or service providers located in other countries. When transferring personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) to protect your rights.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — request correction of inaccurate or incomplete data.
• Delete — request erasure of your personal data.
• Object or restrict — object to or restrict certain processing activities.
• Portability — receive a copy of your data in a portable, machine-readable format.
• Withdraw consent — where consent is the legal basis for processing, you may withdraw it at any time.

To exercise these rights, email team@welda.ai with your request. We will respond within the timelines required by applicable law (typically 30-45 days). We may need to verify your identity before fulfilling your request.

9. Children's Privacy

Welda is not directed to children under 13 (or the minimum age required in your jurisdiction; 16 in the EU unless local law provides otherwise). We do not knowingly collect personal information from children. If you believe a child has provided personal data without proper consent, contact us at team@welda.ai so we can promptly remove it.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know — the categories of personal information we collect, use, and disclose.
• Right to delete — request deletion of personal information, subject to legal exemptions.
• Right to opt-out — we do not sell or share personal information for cross-context behavioral advertising.
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights.

To submit a verifiable consumer request, contact team@welda.ai. We will respond within 45 days.

Categories of Personal Information Collected

• Identifiers — names, email addresses, IP addresses. Collected: Yes
• Commercial information — records of credit purchases and generation history. Collected: Yes
• Internet activity — browsing and usage history on the Service. Collected: Yes
• Audio/visual information — AI-generated images and videos. Collected: Yes
• Biometric information — Collected: No
• Geolocation data — Collected: No (only approximate via IP)

Sale of personal information: Welda has not sold personal information in the preceding 12 months.

11. EU/EEA Supervisory Authority

If you reside in the European Union, you may lodge a complaint with your local data protection authority. You can find contact details at edpb.europa.eu.

12. AI Content and Data Processing

• We do not use biometric identifiers such as faceprints or fingerprints from your content.
• We do not perform facial recognition or identification on any content.
• AI-generated outputs are synthetic content created based on text prompts. They do not constitute real-life representations and should not be used for identity verification, medical, or legal purposes.
• We do not use your personal data to generally train our own separate artificial intelligence models. Your prompts are sent to third-party AI providers solely to fulfill your generation requests.

13. Third-Party Links

The Service may include links to or integrations with websites and platforms we do not control. This Privacy Policy does not apply to those third parties. Review their policies before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in laws, technology, or our practices. When we make material changes, we will notify you by email, in-app notice, or by posting an update on our website, and indicate the "Last updated" date at the top. Your continued use of the Service after the effective date means you accept the revised Policy. If you do not agree, you must stop using the Service.

15. Contact Information

If you have questions, requests, or concerns about this Privacy Policy or our data practices, contact us at:

Welda, LLC
11110 S Governors Avenue, Ste 99839, Dover, DE 19904, US
Email: team@welda.ai

We will respond within the timelines required by applicable law.