OG Welly Privacy Policy

Effective Date: December 1, 2025

OG Welly (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our application. By using the OG Welly application, creating an account or interacting with our platform, you acknowledge and agree to the practices described in this policy.

1. Information We Collect

User Account Information:

• Username (provided at time of account registration)
• Email address (provided at time of account registration)
• Name of User (provided at time of account registration)
• Job Title of User (provided at time of account registration)
• Password (securely hashed and salted)

User-Uploaded Data:

• Well Logs (.las format)
• Directional Surveys (.csv format)
• Well Headers (.csv format)
• Formation Tops (.csv format)
• Shapefiles (.zip format)

This data is stored securely to provide continued functionality across user sessions. User passwords are securely hashed and salted, and OG Welly will not share any user data with any third parties for commercial purposes. All of your data is inaccessible to any other User.

2. How We Use Your Information

• Provide and maintain core app functionality
• Authenticate and manage user accounts
• Enable the import, processing, and visualization of user-uploaded data
• Communicate account-related updates or support responses
• Send transactional or marketing emails (only if consented)

Third-party service providers may process limited information strictly as needed to perform services on our behalf, such as payment processing, hosting the application, email delivery, or maintaining platform functionality. These providers do not have permission to use your data for their own purposes.

3. Third-Party Service Providers

• Stripe (Payment Processing): Stripe is PCI-DSS and GDPR compliant. Your payment data is processed directly by Stripe and never touches our servers. View Stripe’s privacy policy
• Twilio SendGrid (Email Communications): We use SendGrid to send transactional and marketing emails. View SendGrid’s privacy policy
• Amazon Web Services (AWS) (Hosting and Storage): We use AWS to host and store data. AWS complies with international data protection laws, including GDPR. View AWS’s privacy policy
• MapTiler (Map Tile Service): We use MapTiler to display geospatial maps. View MapTiler’s privacy policy

4. Data Protection and Security

• HTTPS encryption for data in transit
• Secure password hashing
• Access control and authentication for backend systems
• Regular monitoring and security audits

5. User Rights Under GDPR (if applicable)

If you are located in the EU or UK, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Lodge a complaint with your local data protection authority

We are not required to appoint a Data Protection Officer under GDPR requirements. You can request these rights by contacting us at info@ogwelly.com.

6. International Transfers (EU/UK Users)

If you are located in the European Union or the United Kingdom, your personal data may be transferred to and processed on servers located in the United States. These transfers rely on the EU–US Data Privacy Framework or, where applicable, standard contractual clauses provided by AWS, Stripe, and other service providers.

7. Legal Basis for Processing

We process your data on the following legal bases:

• Contract Necessity: to create and manage your OG Welly account and provide access to the service
• Legitimate Interests: to maintain platform security, prevent abuse, and improve the application. Our legitimate interests include platform security, fraud prevention, and improving core functionality
• Consent: for marketing emails (optional)

8. Email Communications

• Marketing emails require explicit consent (opt-in)
• All emails include an unsubscribe link
• You may opt out of marketing at any time without affecting your access to the app

9. Data Retention

We retain your data only as long as necessary to provide our services and fulfill legal obligations. You may request deletion of your account and data at any time.

10. Changes to This Policy

We may update this policy periodically. You will be notified of significant changes via email or in-app notice.

11. Automatically Collected Data

When you use the OG Welly application, certain technical information is collected automatically by your browser, device, or our hosting providers. This information is used for security, platform functionality, troubleshooting, and performance monitoring. This data includes:

Device and Usage Information

• IP address
• Browser type and version
• Operating System
• Date and Time of access
• Pages viewed, actions taken, and general usage patterns
• Error logs and diagnostic data

Cookies and Similar Technologies

OG Welly does not use cookies for advertising or behavioral tracking. However, limited cookies or similar technologies may be used to support essential functionality. These include:

• Session Cookies: Used to authenticate your login session and keep you signed in
• AWS Infrastructure Cookies: AWS services (such as load balancers or CloudFront) may generate cookies for routing, security, and reliability
• Stripe Cookies: Stripe may use cookies to enable secure payment processing and fraud prevention
• SendGrid Tracking: Transactional emails may include a basic tracking pixel to confirm successful delivery or to detect whether messages bounce

These technologies are used solely for security, platform functionality, and service reliability. They do not track your activity across other websites, and the data is not used for advertising or sold to any third parties.

12. Contact Us

For questions or concerns about this Privacy Policy or your data:
info@ogwelly.com