WellSent Reminders Privacy Policy

Last updated: October 31, 2026

What this service does

WellSent Reminders emails you before the last day to order a card for the dates you save, on that day, and when it's time to mail the card. You can type dates in or import them from your Google Calendar.

What we store when you save a date

Your email address, plus the first name, occasion, month, and day you type. These can be details about someone else, so only save what you're comfortable sharing with us. We never contact the people you name. We also keep a record of the reminders we've sent you.

We keep a scrambled version of your internet address for about a day, only to limit abuse of the form. We also keep the store link you arrived from until you delete your data.

What we access if you import from Google Calendar

With your permission, we request read-only access to your Google Calendar (the calendar.readonly scope). We can see event titles, dates, and calendar metadata, including the Birthdays calendar Google builds from your contacts. We also ask Google for your account's email address, so we know where to send reminders. We cannot create, edit, or delete anything on your calendar, and we never request access to your inbox, contacts, or files. Google Calendar is optional.

We store an encrypted token that lets us check your calendar on a daily schedule, and - for events we identify as occasions - the event title, date and ID so we can time your reminders and show them on your manage page. We do not store your full calendar. Events that are not occasions are discarded immediately after each daily check.

How we use it

We use it only to run your reminders: the emails you signed up for, a note when you save a date or your calendar disconnects, and limits that stop abuse of the form. Reminder emails link to the WellSent card shop and may list your other dates in the next 90 days. We do not sell your data, share it for advertising, use it to train AI or machine learning models, or allow humans to read your calendar data except with your explicit consent for support, for security, or where required by law.

Google API Limited Use disclosure

WellSent Reminders' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we share, transfer, and disclose Google user data

We do not sell your Google user data, share it for advertising, or use it to train AI or machine learning models.

We share Google user data only with the following service providers, who process it solely on our behalf and only in the United States: Vercel (application hosting), Supabase (encrypted database storage), and Resend (delivery of your reminder emails).

The names and dates you type go to the same three providers, for the same purpose.

We disclose Google user data outside these providers in only two cases: with your explicit consent, or where required by law. No person at WellSent reads your calendar data except with your explicit consent for support, for a security investigation, or where required by law.

How we protect your data

Your data, Google user data included, is encrypted with TLS as it travels, and our database provider encrypts it with AES-256 while it's stored. Your Google OAuth refresh token is stored encrypted and is never exposed to the browser or included in any email.

Database access is restricted at the database layer: row-level security is enabled on every table with no public access policies, so the database rejects all direct client access. Records are reachable only by our server, using a privileged credential stored in server-side environment variables and never exposed to a browser.

We request the narrowest scope our feature requires, calendar.readonly, and we discard every calendar event that is not an occasion immediately after each daily check, so non-occasion data is never retained.

Retention and deletion

We keep your data until you delete it. Unsubscribing (link in every email or on the manage page) stops all reminders and keeps your data so you can resume. On that page you can remove any date you saved, and "Delete my data" erases your email address, the names and dates you saved, your stored token, your send record, and the occasions we saved from your calendar. Resend may keep records of emails it already delivered, under its own terms. You can also revoke our access anytime at myaccount.google.com/permissions, or request full deletion at wellsentteam@gmail.com - completed within 30 days.

Changes and contact

Material changes get emailed to you. Questions: wellsentteam@gmail.com.