1) Information We Collect

  • Account & Profile — name, email, company, role, authentication data, preferences.
  • Usage & Device — logs, IP, browser, pages viewed, telemetry.
  • Content You Provide — uploads, messages, forms, data you input.
  • Support — details you send to support/success teams.

We collect from you, org admins, devices, and service providers that help operate the Services.

2) How We Use Information

  • Provide, secure, troubleshoot, and improve the Services.
  • Authenticate users and prevent fraud/abuse.
  • Operate features, personalize experiences, and communicate.
  • Comply with law, enforce Terms, and protect WeCan LLC, users, and the public.
  • With your consent, for additional clearly explained purposes.

3) How We Share Information

  • Service Providers under contract (hosting, security, analytics, support).
  • Enterprise Admins may access certain account/usage details.
  • Legal & Safety (lawful requests / protection).
  • Business Transfers (M&A/asset sale) with safeguards.

We do not sell personal information or share it for cross-context behavioral advertising.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are never shared with any third party.

4) Data Retention

We retain data as needed to provide the Services, meet legal obligations, resolve disputes, and enforce agreements.

5) Security

We apply administrative, technical, and physical safeguards. No method is perfect—keep credentials secret and notify us of suspected compromise.

6) Your Rights & Choices

  • Access/correct/delete certain account data via settings or by contacting us.
  • Object/restrict processing where applicable.
  • Opt out of non-essential emails via unsubscribe links.

To exercise rights, email [email protected]. We may need to verify identity/authority.

7) California Notice (CCPA/CPRA)

California residents may access, delete, correct, and know categories/sources/purposes/disclosures. We do not “sell” or “share” PI as defined by CPRA; we honor “Limit the Use of Sensitive PI” where applicable.

Submit requests at [email protected] (authorized agents permitted).

8) EEA/UK Notice (GDPR)

WeCan LLC is controller. Legal bases: contract, legitimate interests, legal obligations, and consent where applicable. Rights include access, rectification, erasure, restriction/objection, portability, and complaints to your authority. Withdraw consent anytime.

9) Cookies & Tracking

We use necessary, functional, and limited analytics cookies. Manage via browser settings. We don’t currently respond to DNT signals.

10) Text Messages (SMS)

If you choose to sign in or verify your account with your phone, we send one-time sign-in and verification codes to the mobile number you enter, only when you ask for one. We use that number to deliver the codes and to keep your account secure, never for marketing. Message frequency varies with your requests; message and data rates may apply. Reply STOP to stop receiving texts and HELP for help. Carriers are not liable for delayed or undelivered messages. Questions: [email protected].

11) Children’s Privacy

Not directed to children under 13 (or older by local law). Contact us to delete if a child submitted data.

12) International Transfers

We may transfer/store/process data outside your country. Where required, we use SCCs for EEA/UK transfers.

13) Changes to this Policy

We’ll post updates with a new “Effective” date and notify of material changes by reasonable means.

14) Contact

Email [email protected].