Privacy Policy

Last updated: July 3, 2026

This Privacy Policy explains how Birova, Inc. (“WellStrata,” “we,” “us,” or “our”) collects, uses, and shares personal information when you use the WellStrata platform and related services (the “Service”) at wellstrata.ai and app.wellstrata.ai.

This Policy covers personal information about account users. Well and production data made available through the Service is generally derived from public regulatory records and is not personal information about our users.

1. Information we collect

  • Account information — your name, email address, password (stored only as a hash), and your organization and role.
  • Billing information — plan and subscription details. Card payments are processed by our payment processor; we do not store full payment-card numbers.
  • Content you create — well lists, projects, notes, saved screens, and sharing settings.
  • Usage and log data — features used, queries and exports performed, timestamps, IP address, browser and device information, and diagnostic logs.
  • Cookies and local storage — used to keep you signed in and to remember preferences.

2. How we use information

  • Provide, operate, secure, and maintain the Service, including authentication and organization-based access;
  • Process subscriptions, billing, and payments;
  • Provide support and respond to your requests;
  • Monitor, analyze, and improve the Service, including usage analytics and enforcing plan limits;
  • Detect, prevent, and address fraud, abuse, and security incidents; and
  • Comply with legal obligations and enforce our agreements.

3. Legal bases (where applicable)

Where the GDPR or similar laws apply, we process personal information to perform our contract with you, for our legitimate interests in operating and improving the Service, to comply with legal obligations, and, where required, with your consent.

4. How we share information

Within your organization. Content and activity may be visible to other members of your organization according to your sharing and visibility settings (for example, organization-visible well lists and projects).

Service providers (subprocessors). We share information with vendors who process it on our behalf:

  • Microsoft Azure — cloud hosting (data stored in a US region)
  • Stripe — payment processing
  • Anthropic — AI processing for AI-assisted features
  • Resend — transactional email delivery
  • Mapbox — interactive maps

Legal and safety. We may disclose information to comply with law, respond to lawful requests, or protect the rights, property, and safety of WellStrata, our users, or others.

Business transfers. Information may be transferred as part of a merger, acquisition, financing, or sale of assets.

We do not sell your personal information.

5. AI features and third-party AI

When you use AI-assisted features, your query and relevant context are sent to a third-party AI provider to generate a response. Please do not submit sensitive personal information in queries. AI outputs may be inaccurate and should be independently verified.

6. Data retention

We retain personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. We may retain de-identified or aggregated information that no longer identifies you.

7. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International data transfers

We and our service providers may process information in countries other than yours. Where required, we implement appropriate safeguards for cross-border transfers of personal information.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Users in California and the EEA/UK may have additional rights. To exercise a right, contact us using the details below; we may need to verify your identity.

10. Cookies and local storage

We use cookies and browser storage that are necessary to sign you in and operate the Service, and, where applicable, to remember preferences and understand usage. You can control cookies through your browser, but disabling essential storage may prevent the Service from working.

11. Children’s privacy

The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from individuals under the age required by applicable law.

12. Changes to this policy

We may update this Policy from time to time. We will post the updated version and revise the “Last updated” date, and, for material changes, provide additional notice where required.

13. Contact us

For privacy questions or to exercise your rights, contact us at support@birova.ai.