Legal
Privacy Policy
Last updated 26 August 2026
Wellform is operated by Media Yard LLC, a New Jersey limited liability company. This policy describes what we collect and what we do with it. It is written to be checkable against how the service actually behaves rather than to cover every hypothetical.
The short version
Documents you send are rendered in memory and returned in the response. By default nothing is stored — the HTML you post and the PDF we produce are gone when the request finishes. Storage happens only when you explicitly ask for it. We never look at document contents, never log them, and never use them to train anything.
What we collect
Account data
Your email address, your plan, and identifiers linking you to your Stripe customer and subscription records. This is what an account is.
API keys
Stored only as SHA-256 hashes. The plaintext exists once, when the key is created, and is never recoverable — not by you and not by us. We also record a non-secret prefix so you can tell keys apart, and the time a key was last used.
Usage counts
A per-month tally of documents produced, per account. This is what your bill is calculated from. It is a number, not a record of what you rendered.
Document content
HTML you submit is held in memory for the duration of the request and
discarded. If you pass "store": true, the resulting PDF is written
to object storage and you receive a URL. Identical output is stored once, since
keys are derived from a hash of the content itself.
Request logs
Our infrastructure provider records standard request metadata — timestamp, status code, response time, IP address. Document bodies are not written to logs.
Payment data
We never receive or store card numbers. Checkout and the billing portal are hosted by Stripe, and card details go directly to them.
How long we keep it
| Data | Retention |
|---|---|
| Submitted HTML | Duration of the request only. Never written to disk. |
| Generated PDFs (unstored) | Duration of the request only. |
| Generated PDFs (stored on request) | 30 days, then deleted automatically. |
| Account and key records | Life of the account, then 90 days. |
| Usage counts | Retained for billing and tax records. |
| Request logs | As retained by our infrastructure provider, currently 7 days. |
Who else processes data
| Processor | Purpose |
|---|---|
| Cloudflare, Inc. | Compute, object storage, database, DNS and request logging. |
| Stripe, Inc. | Payments, subscriptions and invoicing. |
We do not sell personal data, and we do not share it with anyone for advertising. We will disclose data if legally compelled, and where we are permitted to tell you, we will.
Your customers' data
Documents of the kind Wellform exists to produce — invoices, statements, reports — frequently contain other people's personal data. Where that is the case you are the controller and we are the processor: we act on your instructions, which in practice means rendering what you send and storing it only if you ask. Because unstored content never persists, the surface for that data is a single request. If you require a signed data processing agreement, write to support@wellform.dev.
International transfers
Our infrastructure is globally distributed and a request may be processed in a region near the caller. Data at rest is held with the providers listed above.
Your rights
Depending on where you live you may have rights to access, correct, delete or export your personal data, to object to or restrict processing, and to complain to a supervisory authority. Email support@wellform.dev and we will respond within 30 days. We will ask you to verify control of the account before acting.
Deleting your account removes account and key records on the schedule above. Usage totals needed for tax and accounting are retained.
Security
Traffic is encrypted in transit. Keys are stored hashed. Rendering runs unprivileged in an isolated container, and requests to private, loopback and link-local network addresses are refused so that submitted markup cannot be used to reach internal systems. No system is perfectly secure, and we do not claim otherwise.
Children
Wellform is a developer tool for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 16.
Changes
If we make a material change we will email account holders and update the date at the top of this page.
Contact
Media Yard LLC — support@wellform.dev