Privacy Policy

This Privacy Policy explains how Wild West Labs LLC(“AurenWell,” “we,” “us”) collects, uses, and shares information when you use the AurenWell application (the “Service”). AurenWell is an invoicing and business management tool for independent contractors. We act as a data controller for information about our account holders and as a data processor for the information our account holders upload about their own clients and business records.

If you have questions, email us at support@aurenwell.com.

We use the information described above to:

• Provide and operate the Service, including invoicing, payments, and document generation;
• Process the one-time purchase and any platform fees;
• Send transactional messages (receipts, password resets, invoice notifications);
• Respond to support requests;
• Detect, investigate, and prevent fraud, abuse, and security incidents;
• Improve the Service and develop new features, including aggregate or de-identified analytics;
• Measure marketing and advertising performance, including whether ads lead to purchases;
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We do not use Your Content to train third-party machine-learning models.

If you are in the European Economic Area or the United Kingdom, the legal bases we rely on to process your personal data are:

• Contract: to provide the Service you purchased.
• Legitimate interests: to secure the Service, prevent fraud, improve the product, and communicate with you about your account.
• Legal obligation: to meet tax, accounting, and anti-fraud requirements.
• Consent: where we ask for it specifically (for example, optional analytics cookies).

We share information only in these circumstances:

We operate from the United States. If you access the Service from outside the U.S., your information will be transferred to, stored in, and processed in the U.S. Where personal data of EEA, UK, or Swiss residents is transferred, we rely on Standard Contractual Clauses and equivalent safeguards required by applicable law with our subprocessors.

We retain information only as long as needed for the purposes described in this policy:

• Account and business records — for as long as your account is active.
• Account deletion — when you delete your account, your active records are removed from the Service. Financial records (payment history, invoices, tax-relevant data) may be retained for up to 180 days in a limited-access archive to meet legal, accounting, and fraud-prevention obligations, after which they are deleted or irreversibly anonymized.
• Backups — routine backups may contain data for up to 30 days after deletion before being overwritten.
• Logs and analytics — typically retained for 12 to 24 months.

We take security seriously. Measures include encryption in transit (TLS), encryption at rest for database and storage, row-level access controls so one account cannot see another’s data, password hashing, webhook signature verification, and operational practices such as least-privilege access to production systems. No system is perfectly secure; if you believe your account has been compromised, contact us immediately at support@aurenwell.com.

If you are in the EEA or UK, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data, subject to the retention periods above;
• Restrict or object to certain processing;
• Port your data to another service in a structured, machine-readable format;
• Withdraw consent at any time where processing is based on consent.

You can exercise these rights by emailing support@aurenwell.com. You also have the right to lodge a complaint with your local supervisory authority.

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the following rights:

• Right to know what personal information we collect, use, disclose, and retain, and the categories of sources and recipients;
• Right to delete personal information we collected from you, subject to legal exceptions;
• Right to correct inaccurate personal information;
• Right to opt outof the “sale” or “sharing” of personal information. We do not sell personal information. Our use of Meta advertising measurement may be considered “sharing” under some privacy laws;
• Right to limit use of sensitive personal information — we do not use sensitive personal information for purposes that would require this opt-out;
• Right to non-discrimination for exercising your rights.

To exercise any of these rights, email support@aurenwell.com. We may ask you to verify your identity before acting. You may designate an authorized agent to submit a request on your behalf; proof of authorization will be required.

AurenWell is not directed to children under 13 (or under 16 in the EEA / UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We use cookies and similar technologies for authentication (strictly necessary), session management, and limited product analytics via PostHog. We also use Meta Pixel and related server-side conversion events to measure advertising performance, including page views and purchases. Most browsers allow you to block or delete cookies; note that blocking strictly necessary cookies will break login and core features.

We currently do not respond to “Do Not Track” browser signals in a way that differs from this policy. We honor the Global Privacy Control (GPC) signal as an opt-out of sale/sharing where applicable under state law (we do not sell or share in any case).

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

Privacy questions, requests, or complaints? Email us at support@aurenwell.com, or write to: