privacy policy

last updated: october 4, 2026 · effective: october 4, 2026

introduction

This Privacy Policy describes how well.software ("well," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the well.software platform and any related applications, features, and tools we make available (together, the "Service"). It does not apply to information practices of third parties, including websites or services that may be accessible through the Service.

By accessing or using the Service, you confirm that you have read this Policy. If you do not agree with our practices, do not use the Service.

This Policy is written in plain English and uses lowercase headings to match our brand. The legal effect of its terms is not affected by formatting.

1. who we are

well.software provides software tools that help organizations process recorded land instruments, extract structured data from documents, and manage title research workflows. Our typical customers are title imaging companies, abstract companies, land service providers, and similar businesses operating in the energy and real estate sectors. Most users of the Service are employees of these customer organizations.

If you use the Service on behalf of an organization (your employer or another principal), that organization is generally responsible for determining what information is processed within its workspace and how it is used. This Policy describes information handling at the platform level. Your organization may have its own privacy notice that also applies to you.

2. information we collect

We collect the categories of information described below.

a. account information

When an account is created, we collect identifying information such as full name, email address, username, password (stored using one-way hashing), employer or organization, and role or job title where provided.

b. profile information

You may choose to add information to your profile, including a display name, profile photo, time zone, or communication preferences.

c. content you upload or create

The Service is used to upload, store, and process documents (including PDFs of recorded land instruments) and to create derived content such as runsheet entries, extracted field values, annotations, project notes, comments, and instrument metadata. While the underlying recorded documents are typically public records, the entire body of content created and stored within a workspace is treated as confidential to that workspace.

d. communications

When you contact us for support, submit feedback, or otherwise communicate with us, we retain the content of those communications along with your name and email address.

e. usage and technical information

When you use the Service, we automatically collect information about your activity and the device used to access it, including:

  • pages and features accessed
  • time, date, and duration of sessions
  • actions performed within the Service, such as document uploads, edits, and downloads
  • IP address recorded with service requests; Well does not derive your location from your IP address
  • browser type and version
  • operating system and device type
  • referring URL
  • error and diagnostic information

iPhone notifications

If you enable notifications in the Well iPhone app, we associate an app installation identifier, Apple push notification device token, device label, app identifier, and notification registration status with your signed-in account. We use them to send service notifications and record delivery attempts for reliability and troubleshooting.

Well sends the device token and notification content to Apple Push Notification service (APNs) for delivery. Notifications can include names and short excerpts of messages, tasks, announcements, schedules, and other events you are permitted to receive. Those previews may appear on your lock screen according to your iPhone settings. Demonstration accounts receive only synthetic test notifications.

You can turn notifications off in iPhone Settings or sign out of Well. Signing out revokes the device registration for that session. Notification identifiers are used for app functionality, not advertising or cross-app tracking. For account or notification-data access, correction, or deletion requests, contact brainai.support@gmail.com.

contractor base location

When an organization supplies a contractor’s home or base city, state, or coordinates, we use that information to plan assignments and calculate travel. This is information entered in the workspace; the iPhone app does not request GPS location access.

f. cookies and similar technologies

We use cookies and similar technologies to authenticate sessions, remember preferences, and understand how the Service is used. For details, see our cookie notice.

3. how we use information

We use the information we collect for the following purposes:

  • to provide, operate, and maintain the Service
  • to authenticate users and secure accounts
  • to process documents and produce the outputs you request
  • to send service-related communications, including security alerts, system notices, and support responses
  • to respond to inquiries and provide customer support
  • to monitor, troubleshoot, improve, and develop the Service
  • to detect, prevent, and address fraud, abuse, and security incidents
  • to comply with legal obligations and enforce our policies
  • to perform our obligations under our contracts with customers
  • with your consent or at your direction

We do not sell personal information. We do not use personal information for targeted advertising or for cross-context behavioral advertising.

We do not use customer content to train general-purpose artificial intelligence or machine learning models. We may use de-identified or aggregated information, or information from your workspace at your direction, to improve features that operate on your own content.

4. how we share information

We share information with the following categories of recipients, in the circumstances described.

a. service providers

Service providers support hosting and email delivery. Email workflows may use Resend or Gmail, and iPhone push notifications use Apple APNs as described above. Well keeps its own account-linked activity records for workspace administration, usage analysis, and troubleshooting; the app does not include a third-party analytics or advertising SDK.

Optional server document-extraction features can send the image or PDF you select to Anthropic for processing when that provider is configured. This includes box-label reading and extraction from client assignment attachments. Native iPhone text recognition uses Apple Vision on the device; the uploaded document and resulting workspace content are stored by Well when you save or submit them. Public business-enrichment and lodging lookups may send business or place queries to the queried websites and public mapping services.

b. your organization

If you use the Service on behalf of an organization, certain information, including your account profile, actions within shared workspaces, and content you create, may be accessible to administrators, supervisors, or other authorized users within that organization.

c. legal and safety

We may disclose information when we believe in good faith that disclosure is required or permitted by law, including in response to subpoenas, court orders, government requests, or other legal process; to enforce our terms, policies, or rights; to protect the safety, rights, or property of our users, the public, or ourselves; or in connection with the investigation of suspected fraud or unlawful activity.

d. business transfers

In the event of a merger, acquisition, financing, reorganization, bankruptcy, dissolution, or sale of all or part of our business or assets, information we hold may be transferred as part of that transaction. We will notify affected users where required by law.

e. with your consent

We may share information with third parties when you have given us consent or directed us to do so, for example, when you connect a third-party application to your workspace.

f. aggregated or de-identified information

We may create and use aggregated or de-identified information that does not identify any individual. We may share such information for any lawful purpose.

We do not sell personal information to third parties. We do not share personal information with third parties for their independent marketing purposes.

5. cookies and tracking

The Service uses cookies and similar technologies. For information about the specific cookies in use, their purpose, and how to control them, please see our cookie notice. Where required by law, we will obtain your consent before placing non-essential cookies.

6. data retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the type of information and on our customer relationships.

If you close your account, we will delete or de-identify your personal information in accordance with applicable law and any agreement we have with the organization on whose behalf you used the Service. We may retain limited information where retention is required for legal, regulatory, accounting, or operational reasons.

7. security

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Measures include encryption in transit and at rest, access controls based on least privilege, security monitoring, and regular review of our practices.

No system is fully secure. While we work to protect your information, we cannot guarantee its absolute security. If we become aware of a security incident affecting your information, we will notify you in accordance with applicable law.

8. your rights and choices

Depending on your location, you may have certain rights regarding the personal information we hold about you, including the rights to:

  • access the personal information we hold about you
  • correct inaccurate or incomplete information
  • request deletion of your information
  • receive a copy of your information in a portable format
  • restrict or object to certain processing
  • withdraw consent where processing is based on consent

To exercise these rights, contact us at brainai.support@gmail.com. We will respond within the time frames required by applicable law, typically within 30 to 45 days. We may need to verify your identity before fulfilling a request. In some cases, we may be unable to fulfill a request, in whole or in part, due to legal exceptions or because the information is necessary to maintain the Service. Where we cannot fulfill a request, we will explain why.

If you use the Service on behalf of an organization, certain requests may need to be directed to that organization, which controls your workspace.

a. residents of california

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), gives California residents specific rights, including:

  • the right to know what personal information we have collected, used, disclosed, or sold
  • the right to delete personal information we have collected from you
  • the right to correct inaccurate personal information
  • the right to opt out of the sale or sharing of personal information
  • the right to limit the use and disclosure of sensitive personal information
  • the right to non-discrimination for exercising your rights

We do not sell personal information as that term is defined under the CCPA. We do not share personal information for cross-context behavioral advertising. We do not knowingly process the personal information of California consumers under the age of 16 without affirmative authorization.

To exercise your CCPA rights, contact us at brainai.support@gmail.com. You may also designate an authorized agent to make a request on your behalf, subject to verification.

In the prior twelve months, we have collected the categories of personal information described in Section 2 of this Policy. We have disclosed those categories for business purposes to the categories of recipients described in Section 4. We have not sold or shared personal information for cross-context behavioral advertising.

b. residents of other us states

Residents of states with comprehensive consumer privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Florida, Oregon, Montana, Iowa, Tennessee, Indiana, Delaware, New Hampshire, New Jersey, Kentucky, Maryland, Minnesota, Nebraska, Rhode Island, and other states with similar laws, may have rights comparable to those described above. These typically include the rights of access, correction, deletion, portability, and opt-out of certain processing, including processing for targeted advertising, sale of personal information, and certain profiling. To exercise these rights, contact us at brainai.support@gmail.com.

If we deny a request, you may have the right to appeal our decision. To appeal, reply to our decision or contact us at brainai.support@gmail.com with the word "appeal" in the subject line. We will respond to your appeal within the time required by applicable law.

c. residents of canada

If you are a resident of Canada, your personal information is protected under federal law (the Personal Information Protection and Electronic Documents Act, "PIPEDA") and applicable provincial laws, including Alberta's Personal Information Protection Act, British Columbia's Personal Information Protection Act, and Quebec's Act respecting the protection of personal information in the private sector (also known as Law 25).

You have the right to access the personal information we hold about you, request correction of inaccurate or incomplete information, and withdraw consent (subject to legal or contractual restrictions). For information held in Quebec or about Quebec residents, you also have the right to data portability and the right to request information about decisions based exclusively on automated processing of your personal information.

To exercise these rights, contact us at brainai.support@gmail.com.

You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or your provincial privacy regulator, including the Commission d'accès à l'information du Québec, the Office of the Information and Privacy Commissioner of Alberta, or the Office of the Information and Privacy Commissioner for British Columbia.

d. residents of the european economic area, united kingdom, and switzerland

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under applicable data protection law, including the General Data Protection Regulation. These include the rights of access, rectification, erasure, restriction of processing, data portability, objection to processing, and to lodge a complaint with your local supervisory authority. The legal bases on which we process personal information typically include performance of a contract, legitimate interests, compliance with legal obligations, and consent.

9. children's privacy

The Service is intended for use by businesses and adult professionals. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact brainai.support@gmail.com and we will take appropriate steps to delete that information.

10. international data transfers

We are based in the United States. If you access the Service from outside the United States, your information will be transferred to, processed in, and stored in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those of your country of residence.

Where required by law, we put appropriate safeguards in place to protect information during transfer, including standard contractual clauses or other approved transfer mechanisms.

11. third-party services

The Service may contain links to third-party websites, services, or applications, and may allow integrations with third-party tools. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information or enabling integrations.

12. changes to this policy

We may update this Policy from time to time. When we do, we will revise the "last updated" date at the top of the Policy. For material changes, we will provide additional notice, such as a prominent notice within the Service or an email to the address associated with your account. Your continued use of the Service after the effective date of a change constitutes acceptance of the revised Policy.

13. contact us

If you have questions, concerns, or requests regarding this Policy or our information practices, contact us at:

Well developer support
brainai.support@gmail.com
united states

If you are located in Canada and prefer to communicate in French, you may write to us in French and we will respond in French.