Privacy Policy
Your privacy matters to us. Here's exactly how we handle your data.
Last updated: January 1, 2026
Our Commitment to You
At Wellspring Ventures, LLC ("Wellspring," "we," "us," or "our"), we believe in transparency and respect for your privacy. We built Wellspring to help yoga studios and wellness centers manage their businesses - not to exploit your personal information.
This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding your data. We've written this in plain language because we think you deserve to understand what's happening with your information.
This policy applies to our website at wellspring.club, our mobile applications, and any studio websites powered by Wellspring (like yourstudio.wellspring.club or custom domains).
Information We Collect
Account Information
When you create an account, we collect:
- Your name and email address
- Phone number (optional)
- Profile photo (optional)
- Password (stored securely with industry-standard encryption)
- Emergency contact information (optional, for studio safety)
Booking & Usage Data
When you use Wellspring to book classes or events:
- Class bookings and attendance history
- Event registrations
- Credit balances and purchase history
- Membership status and subscription details
- Favorites (teachers, class types)
- Reviews you submit
Payment Information
Important: We do not store your credit card numbers or bank account details on our servers.
All payment processing is handled by Helcim, a PCI-DSS Level 1 compliant payment processor. Helcim securely stores your payment tokens, which allow for repeat purchases without us ever seeing your card number.
We retain transaction records (amount, date, description) for your purchase history and accounting purposes.
Device & Technical Data
To provide and improve our services:
- Device type and operating system (for push notifications)
- Push notification tokens (to send you class reminders)
- IP address and approximate location (for security and analytics)
- Browser type and version (for compatibility)
How We Use Your Information
To Provide Our Services
- Process your class bookings and event registrations
- Manage your account and memberships
- Process payments securely
- Send booking confirmations and class reminders
To Communicate With You
- Send transactional emails (receipts, confirmations)
- Notify you of class cancellations or changes
- Share studio announcements (with your consent)
- Respond to your questions or support requests
To Improve Our Platform
- Analyze usage patterns to improve features
- Fix bugs and technical issues
- Develop new features based on user needs
- Ensure platform security and prevent fraud
To Support Studios
- Provide studios with attendance and booking data
- Generate reports for studio management
- Enable studios to communicate with their members
- Process payments on behalf of studios
Who We Share Your Information With
We don't sell your personal information. Period. Here's exactly who has access to your data and why:
Your Studio
The studio(s) you're a member of can see your profile, booking history, attendance, purchases, and membership status. This is essential for them to run their business and serve you. They can also contact you about classes and events.
Payment Processor (Helcim)
Helcim processes all payments. They receive your payment information to complete transactions and are bound by strict PCI-DSS security standards. View their privacy policy.
Email Service (Postmark)
Postmark delivers transactional emails (confirmations, reminders, receipts). They see your email address and message content to deliver emails reliably. View their privacy policy.
Cloud Infrastructure (AWS, Render)
Our servers and database are hosted on Render and Amazon Web Services (AWS). These are industry-standard, secure cloud providers. Your data is encrypted at rest and in transit.
AI Services (OpenAI)
Wellspring offers optional AI-powered features, such as email campaign assistance. When you use these features, relevant content may be sent to OpenAI for processing. OpenAI does not use this data to train their models. You can choose not to use AI features. View their privacy policy.
Push Notifications (Expo)
Our mobile app uses Expo to deliver push notifications. Expo receives device tokens to route notifications to your device. View their privacy policy.
Legal Requirements
We may disclose your information if required by law, court order, or government request. We'll notify you when legally permitted and will resist overly broad requests.
How We Protect Your Data
Encryption
All data is encrypted in transit (TLS/HTTPS) and at rest. Passwords are hashed using industry-standard algorithms.
Access Controls
Strict role-based permissions ensure only authorized personnel can access data. Studios only see their own members.
Regular Backups
Your data is backed up daily with point-in-time recovery available. We're prepared for the unexpected.
Your Rights
You have control over your data. Here's what you can do:
Access Your Data
You can view your profile, booking history, and purchase records anytime in the app or website.
Correct Your Data
Update your profile information, contact details, or preferences at any time through your account settings.
Export Your Data
Request a copy of your personal data. Contact us at privacy@wellspring.club and we'll provide it within 30 days.
Delete Your Data
Request deletion of your account and associated data. Some records may be retained for legal/accounting requirements.
Opt Out of Marketing
Manage your notification preferences in your account settings. You can opt out of marketing emails while still receiving essential transactional messages.
Lodge a Complaint
If you believe we've mishandled your data, contact us first. You also have the right to complain to your local data protection authority.
Cookies & Tracking
We use minimal cookies to make Wellspring work properly:
- Authentication cookies - Keep you logged in securely across sessions
- Preference cookies - Remember your selected studio and display preferences
- Analytics (Vercel) - Basic, privacy-respecting analytics to understand aggregate usage patterns
We don't use advertising cookies or sell your browsing data to third parties. We don't build advertising profiles. We don't track you across other websites.
Children's Privacy
Wellspring is designed for adults. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK).
If a studio offers children's classes, parents/guardians must create accounts on behalf of their children and consent to data collection. If you believe we've inadvertently collected data from a child, please contact us immediately at privacy@wellspring.club.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we'll:
- Update the "Last updated" date at the top
- Notify you via email for material changes
- Highlight what changed for transparency
Contact Us
Questions about this policy or your privacy? We're happy to help.
Email: privacy@wellspring.club
Privacy is a feature, not an afterthought.
We built Wellspring to respect your data. If you have any questions, we're always here to help.