Privacy policy.

Who we are

Belwethr is operated by Belwethr (the legal entity name and mailing address will be shown here once registered). You can reach us at hello@belwethr.com. This policy covers belwethr.com, demo.belwethr.com, the Belwethr application and the connections it makes to other systems on a customer’s behalf.

What we collect

We collect only what is needed to run the product for a business and to keep it secure.

• Account information. Your name, work email address, company, role, and the sign-in links and session records needed to let you in and keep others out.
• What you tell us. Answers you give on the request form or in the short interview before a demo, questions you ask inside the product, and messages you send us.
• Business data you connect. When a business connects a system (for example its bookkeeping, point of sale, online store, calendar or mailbox) or uploads an export, we read the records that system holds about orders, products, stock, invoices, bills, payments, customers, appointments, messages and similar business activity, as described on the Where it comes from page inside the product.
• Use of the product. Which pages are opened, which proposals are approved or declined, and errors, so we can support you and improve the product. We do not run third-party advertising trackers.

Why we use it

• To show the business its own picture: the brief, alerts, forecasts, answers and proposals are all computed from the data the business connected.
• To carry out actions the business approves. Nothing is sent or changed in another system without a person in that business approving it first, and every approval is logged.
• To sign you in, keep the account secure, and tell you about access and changes that affect you.
• To support you, fix problems and improve the product.
• To meet legal obligations.

We do not sell personal information and we do not use a customer’s business data to train models.

How AI is used

Belwethr uses a large language model (from Anthropic) to write the brief, answer questions and draft messages. The model is given the specific records the request is about, labeled as information rather than instructions, and returns structured text that is checked against the data before it is shown. Model providers process this data to return the answer and, under the terms we hold with them, do not use it to train their models. A business can see and change the daily allowance of model use inside the product.

Google user data

If a business connects a Google account (for example Google Business Profile, Gmail or Google Calendar), Belwethr requests only the scopes needed for the features the business turns on, reads the data to show it inside Belwethr and to carry out actions the business approves, and does not transfer it to anyone else except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice.

Belwethr’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Humans at Belwethr do not read Google user data except with the business’s consent for support, for security purposes, to comply with law, or when the data has been aggregated and anonymized.

Who can see it

• People in the business. Owners and managers of a business see its data; roles inside the product decide who can approve actions.
• Service providers. Hosting (Vercel), database and sign-in (Supabase), email delivery (Resend), the model provider (Anthropic), and bot protection on forms (Cloudflare Turnstile). Each processes data only to provide its service to us.
• The systems you connect. When you approve an action, Belwethr sends the approved content to the connected system, for example a reply through your own mailbox.
• Law and safety. When required by law, or to protect the rights, safety or property of Belwethr, our customers or others.

We do not share business data between customers. Each customer’s data is kept in its own database project.

How long we keep it

Connected business data is kept while the business is a customer and deleted within 30 days after the account ends, unless the business asks for it sooner. Access tokens for connected systems are encrypted at rest and removed as soon as a connection is disconnected. Demo accounts run on sample data; what a demo visitor types and approves is deleted within 90 days of their access ending. Records we must keep by law are kept only as long as the law requires.

How we protect it

Data is encrypted in transit and at rest. Credentials for connected systems are encrypted with keys that never reach a browser. Every request to protected data is checked against the database for an active, authorized session. Access inside Belwethr’s team is limited to the people who need it to support a customer. If we learn of a breach affecting your data we will tell you without undue delay.

Your choices and rights

• Disconnect any system at any time from inside the product; Belwethr stops reading it immediately.
• Ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by writing to the address above. We answer within 30 days.
• Revoke Belwethr’s access from the other side, in the connected system’s own settings, at any time.
• If you are in a region with data protection law (for example the EU, the UK or California), you have the rights that law gives you, and we will honor them.

Children

Belwethr is a product for businesses and is not directed at children under 16. We do not knowingly collect their information.

Changes to this policy

We will post changes here and update the date at the top. If a change materially affects how we use your data, we will tell account owners by email first. This version took effect November 2, 2026.