Privacy Policy & Terms of Use
Effective Date: 2026-09-09
Last Updated: 2026-09-09
Beta Service Notice
This website and its services are currently in beta testing. Features, functionality, and these terms may change at any time without prior notice. By using this site, you acknowledge and accept the evolving nature of our beta services.
1. Who controls your data
`[PLACEHOLDER: LEGAL ENTITY NAME]` ("we," "us," or "our") operates Dwell-Well and is the controller
of the personal data described in this policy. You can reach us using the postal address and email
address below.
Postal address (PLACEHOLDER — replace before this policy is treated as final):
```
[PLACEHOLDER: LEGAL ENTITY NAME]
[PLACEHOLDER: STREET ADDRESS]
[PLACEHOLDER: CITY, STATE/PROVINCE, POSTAL CODE]
[PLACEHOLDER: COUNTRY]
```
Email: support@getdwellwell.com
We are a U.S.-based team. Whether laws such as the EU General Data Protection Regulation (GDPR),
the UK GDPR, or Canada's Anti-Spam Legislation (CASL) apply to a specific user depends on that
user's location, which we have not yet fully confirmed across our user base. See
`docs/compliance/jurisdiction-determination.md` in our repository for the current status of that
review. Until that review is complete, this policy is written to the broadest plausible set of
rights and disclosures rather than to a single confirmed jurisdiction.
2. Information we collect and how we get it
We collect information that you provide directly to us when using our services, and, because our
service is invitation-gated, information that an existing user provides about someone they invite.
Data collected directly from you
- Account information: name, email address, password (stored as a salted hash, never in plain
- Property, room, component, and maintenance data you enter to use the service
- Vendor contact information you choose to add
- Technical data: IP address and user-agent string, recorded at login for security purposes
- Communications with our team
Data collected about you from someone else
If an existing user invites you to Dwell-Well, they supply your email address, first name, and
(optionally) a personal message as part of that invitation. We use this information only to send
you the invitation and a limited number of follow-up reminders while the invitation is open. If you
never create an account, this information is deleted or anonymized on the schedule described in
Section 4 — you do not need to create an account to ask us to delete it sooner (see Section 5).
We do not currently verify that the email address on an account belongs to the person who created
it before granting access; the account is created on signup rather than after email confirmation.
3. Third parties that process your data (subprocessors)
We use a small number of infrastructure providers to run the service. Each one processes personal
data on our behalf, under contract, and only to provide their part of the service — none of them
are permitted to use your data for their own purposes. The current, complete list of these
subprocessors, and what each one touches, is maintained in
`docs/compliance/subprocessors.md` in our source repository and includes our database host,
application hosting provider, transactional email provider, and telemetry/observability provider.
We also share information in these limited circumstances:
- When you request an estimate or quote for services, or schedule an appointment requiring
request.
- When required by law or legal process.
- To protect our rights, property, or safety, or that of others.
We do not sell your personal information.
4. How long we keep your data
We keep personal data only as long as we have a documented reason to. The retention period for
each category of data we collect is set out in `docs/compliance/retention-schedule.md` in our
source repository. In summary:
| Data category | Retention period |
|---|---|
| Rate-limit counters (IP address) | 24–48 hours |
| Login security logs (IP address, user-agent) | 90 days |
| Email delivery logs | Up to 12 months |
| Invitee data supplied by a referrer, if you never sign up | Up to 90 days after the invitation expires or is declined |
| Account data (while your account is active) | Retained for the life of your account |
| Account data (after a deletion request) | Deleted or anonymized within 30 days |
If we change any of these periods, we will update both documents together.
5. Your rights and how to reach us
Depending on your location, you may have rights to access, correct, delete, or receive a copy of
your personal data, and to object to or restrict certain processing. These rights are not limited
to users with an active account — including the recipient of an invitation who never signed up.
To submit a request, email support@getdwellwell.com with the
subject line "Data request." You do not need to log in or hold an account to submit a request.
Include the email address the data is associated with so we can locate it. We will respond within
30 days.
If you believe we have not adequately addressed your request, you may have the right to lodge a
complaint with your local data protection authority.
6. Children's data
Dwell-Well is not directed at children, and we do not knowingly collect personal data from anyone
under 16 years of age. If we learn that we have collected personal data from a child under 16
without the consent required by applicable law, we will delete that data. If you believe a child
has provided us with personal data, contact us using the email address in Section 5.
7. Data anonymization and analysis
We may anonymize and aggregate data collected through our services for analysis, research, and service improvement purposes. Anonymized data cannot be used to identify individual users and may be used, shared, or published without restriction.
8. Data security
We implement reasonable security measures to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security of your data.
9. Changes to services and terms
As a beta service, we reserve the right to modify, suspend, or discontinue any aspect of our services at any time. We may also update these terms periodically. Continued use of our services constitutes acceptance of any changes.
10. Limitation of liability
Our services are provided "as is" during this beta period. We make no warranties, express or implied, regarding the accuracy, reliability, or availability of our services. To the fullest extent permitted by law, we disclaim all liability for any damages arising from your use of our services.
11. Marketing communications
By using our services, you may receive communications from us regarding updates, features, and relevant information. You may opt out of marketing communications at any time by following the unsubscribe instructions in our emails or contacting us directly at
Note: our invitation reminder emails do not yet include a working unsubscribe link. Until that
is fixed, use the email address above to opt out or to ask us to stop contacting an address we
hold as an invitee.
12. Contact information
If you have questions about this Privacy Policy or our data practices, or want to exercise a right
described in Section 5, contact us at:
Postal address: see Section 1.
13. Governing law
These terms shall be governed by and construed in accordance with the laws of Oregon, without regard to its conflict of law provisions.
By using this website and its services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and Terms of Use.