Privacy Policy

Last updated: June 2026

1. Who we are

Welra is operated by GR3NB LLC ("we", "us", "our"). We provide clear weekly business reports for e-commerce sellers. Questions? Email ryan@welra.io.

2. What we collect

  • Account data: name, email address, and password (hashed) when you sign up.
  • Platform data: read-only sales, orders, engagement, and traffic metrics from connected platforms (Etsy, Shopify, WooCommerce, Printify, Instagram, etc.). We never store your platform login credentials — access is via revocable OAuth or access tokens, encrypted at rest.
  • Payment data: handled entirely by Stripe. We store only a Stripe customer ID — never raw card details.
  • Usage data: which reports you open, feedback you submit, and basic analytics to improve the service.

3. How we use your data

  • To generate and deliver your weekly report.
  • To send transactional emails (report delivery, billing receipts).
  • To improve report quality and detect anomalies.
  • We do not sell your data to third parties. Ever.

4. Data storage, retention & security

Your data is stored in Supabase (hosted on AWS in the US). Platform access tokens are encrypted at rest using AES-256.

  • Connected platforms (Etsy, Shopify, WooCommerce, Printify, Instagram): we fetch your data at report time, summarize it into your weekly report, and do not keep the raw platform data afterward.
  • CSV uploads: when you upload a CSV export, we store the order records it contains (order date, order ID, and order amount) in private storage so your future weekly reports can include them. We do not store customer names, addresses, or any other columns from your file.
  • When you cancel: your platform connections and tokens are removed and your uploaded CSV order data is deleted. Your report history is kept for 12 months after cancellation — so you can come back without losing it — and then deleted automatically.
  • Your copy, any time: you can download all of your reports as a ZIP file from your settings page.

5. Third-party services

We use: Supabase (database & auth), Stripe (payments), Resend (email delivery), Anthropic (AI report generation), Railway (hosting), and Vercel (web hosting). Each is bound by their own privacy policy.

6. Your rights

You can request a copy of your data, correct inaccuracies, or delete your account at any time by emailing us or using the settings page. We will respond within 30 days.

7. EU / GDPR

Welra is currently available to customers in the US, Canada, Australia, and the UK. EU residents are on a waitlist while we complete GDPR compliance work. We will not knowingly sign up EU residents before that is complete.

8. Changes

We will notify you by email of any material changes to this policy at least 14 days before they take effect.