Policy / Privacy

Welcome Foundry Privacy Notice

This conformance candidate describes the deliberately narrow founding-beta data boundary. Paid enrollment and public visitor collection remain closed until the release record is complete.

Conformed candidate · Version 2026-09-26.1 · Updated September 26, 2026

1. Scope and current release

Welcome Foundry provides managed websites and related account and billing services to business customers. The controlled founding beta is limited to one named business-to-business plumbing customer in Middletown, Rhode Island. Paid enrollment remains closed until the release record is executed.

The current release may include a text-only service-request form and appointment-request feature for a Customer Site when identified in the applicable Order and release schedule. These features may collect the limited visitor information described below so the customer business can respond. The current release does not include file upload, visitor analytics, advertising pixels, session replay, AI-assisted content or chatbot features, managed-domain registration, SMS or calling, marketing email, or payment collection for a customer's customers unless a later approved, versioned release expressly provides otherwise.

2. Information we process

  • Account, order, billing-address, subscription, tax, payment-status, support, website-content, publishing, domain-connection, authentication, security, and audit information needed to provide the service.
  • Customer Site request information. If the customer enables a released service-request or appointment-request feature, we may process a visitor's name, email address or telephone number, optional ZIP code, requested date or time, short service-request message or note, routing and delivery status, and related security and audit records. These forms are not intended for payment-card information, account passwords, government identification numbers, health information, information about children, precise geolocation, or other regulated or highly sensitive information.
  • Marketing-site inquiry information that a person chooses to provide, plus bounded security, source-page, and consent evidence needed to respond and prevent abuse.

3. How we use information

  • Provide, authenticate, secure, support, bill, publish, export, suspend, restore, and delete the contracted service.
  • Process and route Customer Site service and appointment requests to the customer business; maintain request status; prevent abuse; and support deletion, dispute, security, and delivery evidence.
  • Respond to a Welcome Foundry inquiry where an inquiry channel is separately enabled. A service or appointment request does not enroll a visitor in marketing.
  • Maintain contract, tax, accounting, refund, dispute, incident, release, and legal records where reasonably necessary.

4. Customer and Welcome Foundry roles

For account, billing, marketing-site, security, legal, and business-operation records that Welcome Foundry determines how to use, Welcome Foundry acts as the responsible business. For information submitted through a Customer Site's released service-request or appointment-request feature, the customer business determines the business purpose and Welcome Foundry processes the information on that customer's documented instructions as its service provider. The customer is responsible for its services, response, confirmation, notices, and end-customer relationship.

5. Service providers and disclosures

The intended active provider register for the founding beta is Google Cloud and Firebase for hosting, application infrastructure, authentication, and storage; Stripe for subscription billing and tax calculation; Resend for transactional email; IONOS for Welcome Foundry domain services; and Sentry only if its minimized error reporting is enabled for the released build. Welcome Foundry does not sell personal information.

Zendesk, Telnyx, Gemini, Vertex AI, Gemini File Search, Google Business Profile, visitor analytics, advertising pixels, and session replay are outside the founding-beta release and may not receive released customer or visitor data unless a later approved, versioned release says otherwise.

6. Retention and deletion

Customer content and site data are kept during active service and through a tested 30-day export window after service ends, then deleted from active systems unless a documented legal, security, fraud, or dispute hold applies. Diagnostic logs are targeted for 14 days and detailed security or audit logs for 30 days. Text-only service requests are targeted for deletion 30 days after their terminal status. Appointment contact information and free text are targeted for deletion 30 days after confirmation, decline, cancellation, or expiry; a minimal appointment audit record without contact information or free text may be kept for up to 365 days.

Contract, tax, billing, refund, dispute, and release records may be kept internally for up to seven years as a maximum business policy, not as a statement of a statutory period. Suppression evidence may be retained as needed to honor a communication choice, while message content is targeted for deletion after 30 days. Backups follow their documented numeric lifecycle, and data restored from backup is deleted again when the applicable deletion rule is reached.

7. Security, choices, and rights

Welcome Foundry uses access controls, tenant boundaries, encryption, logs, backups, and tested deletion and restoration procedures appropriate to the released service. No online service can guarantee absolute security.

A person may use the business contact method instead of a site form. Requests to access, correct, export, or delete Welcome Foundry-controlled information are subject to identity verification, the customer's role where the information is customer-directed, and lawful or documented retention exceptions.

8. Contact and release status

For a privacy question, write to privacy@welcomefoundry.com. Do not send passwords, payment-card details, medical information, government identification numbers, information about children, or other sensitive regulated data by email or through a site form.

The exact sole-proprietor identity and postal notice address must be populated from the accepted Rhode Island trade-name record before paid beta release. This conformance candidate is not the final customer-assent copy until that fact, the final document-set hash, and licensed-counsel closing confirmation are recorded.