Privacy Policy

Disclosure: WellyBox’s use and transfer to any other app of information received from Google Accounts will adhere to Google API Services User Data Policy, including the Limited Use requirements.

WellyBox ("us", "we", or "our") operates the https://www.wellybox.com/ website (the "Service").

This page informs you of our policies regarding the collection, use, and disclosure of your data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from https://www.wellybox.com/en/terms

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

  • Financial data
  • Electronic mail data
  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Cookies and Usage Data

Financial Data

The primary function of the Service is the collection, analysis, classification and processing of financial documents such as invoices, receipts, bills and credit notes ("Financial Documents"). When you manually upload documents or connect your e-mail box to the Service, your data is shared with us. For manually uploaded documents, any document you upload is shared with us. For more information about information collected from your e-mail box, please see the Electronic Mail Data section elsewhere in this Privacy Policy.

We use your Financial Documents in order to help you, or your bookkeeper or client, prepare tax documents. This includes analyzing the Financial Documents, removing duplicates, extracting amount, vendor and item information from each such document, and so forth. Such analysis includes our own proprietary algorithm, as well as 3rd-party services operated by Amazon Web Services and Google, Inc. Financial Documents are used for the sole purpose of rendering the service as described, as well as limited debugging and quality assurance purposes, when such circumstances arise, and only when approved in advance and in writing, by an authorized officer of the company.

Documents are stored in a highly-secure server facility operated by Amazon Web Services, protected by a wide range of security measures, including passwords, security tokens, bank-level encryption and others.

Documents are stored in a highly-secure server facility operated by Amazon Web Services, protected by a wide range of security measures, including passwords, security tokens, bank-level encryption and others.

The default setting of the Service is that no sharing with any 3rd-party, with the limited exception of the 3rd-parties listed above and for the purpose listed above, takes place. The Service does, however, allow you to explicitly share, or download and share, Financial Documents with your client, bookkeeper, employee, person or organization, for further processing. If, however, you do not elect to share, or download and share your data, it will not be shared without your explicit consent.

Electronic Mail Data

In order to help you find Financial Documents, you may elect to use the "Connect to E-mail" feature. This feature, once authorized by you ("Authorization" hereinafter), will be able to access and fetch Financial Documents from your e-mail box automatically. Please be advised that the Authorization grantes us read-only access to all messages sent, received and written since the email box was created. We use the Authorization subject to the following policy:

  • We only retrieve documents that we believe, using our proprietary algorithm, to be Financial Documents;
  • From time to time, the Service may retrieve a document believed to be a Financial Documents, even though it is not. In such cases, the document will be displayed to you and you will have the ability to remove it from the Service;
  • Documents collected, including all Financial Documents, are used, stored and shared in the manner described above for all other Financial Documents added to the Service.

The specific permissions requested during the Authorization process vary according to your e-mail service provider. The following overview is a summary of the permissions requested and the reason for requesting them, according to each service provider:

Google G Suite / G-mail:
Permission Reason
Associate you with your personal info on Google This means we can tie your identity to your specific Google account. For more information on why we need your identifying information, please see below.
See your personal info This permission provides us with your first and last name. We use this information to associate your first and last name with the account we create for you at WellyBox.
View your email address This permission provides us with the email address associated with your account. We use this information to associate your email address with the account we create for you at WellyBox.
View your email messages and settings This permission allows us provides us read-only access to your messages for the sole purpose of locating and fetching financial documents, such as invoices and receipts. We will not, and cannot, make any changes or delete any messages from your inbox.

Microsoft Office 365 / Outlook.com Premium:

Permission Reason
Read your mail This permission allows us provides us read-only access to your messages for the sole purpose of locating and fetching financial documents, such as invoices and receipts. We will not, and cannot, make any changes or delete any messages from your inbox.
Maintain access to data you have given it access to This permission allows us to store your information even after you have logged out of your Microsoft account. For more information about the data we collect, see below.
Read all users' full profiles This permission provides us with your first and last name, and the email address associated with your Microsoft account. We use this information to associate your first and last name, and email address, with the account we create for you at WellyBox.

How the application accesses, uses, stores or shares user data

This section out lines how the Service and shares information collected through the "Connect to E-mail" feature, and applies to Google®d; G Suite™, G-mail®d;, Microsoft®d; Office 365®d;, Microsoft Outlook.com™ Premium and Microsoft Live™ users who have authorized the Service to connect to their email box.

Permission Reason
The manner in which the application accesses user data By using the "Connect to E-mail" feature, you will grant us read-only access to all messages sent, received and written since the email box was created. Therefore, we will try to minimize such access to the minimum required in order to render the Service to you. This includes using filters that limit the scope of messages we fetch from your mailbox, even before they are analyzed, and deleting from our systems any messages that, in retrospect, are obviously "false positives" that are irrelevant for the Service to be rendered. When such "false positives" are encountered, we will make every reasonable effort to avoid fetching such messages in the future.
The manner in which the application uses user data We use your Financial Documents in order to help you, or your bookkeeper or client, prepare tax documents. This includes analyzing the Financial Documents, removing duplicates, extracting amount, vendor and item information from each such document, and so forth. Such analysis includes our own proprietary algorithm, as well as 3rd-party services operated by Amazon Web Services and Google, Inc. Financial Documents are used for the sole purpose of rendering the service as described, as well as limited debugging and quality assurance purposes, when such circumstances arise, and only when approved in advance and in writing, by an authorized officer of the company.
The manner in which the application stores user data Documents are stored in a highly-secure server facility operated by Amazon Web Services, protected by a wide range of security measures, including passwords, security tokens, bank-level encryption and others.
The manner in which the application shares user data The default setting of the Service is that no sharing with any 3rd-party, with the limited exception of the 3rd-parties listed above and for the purpose listed above, takes place. The Service does, however, allow you to explicitly share, or download and share, Financial Documents with your client, bookkeeper, employee, person or organization, for further processing. If, however, you do not elect to share, or download and share your data, it will not be shared without your explicit consent.

Usage Data

We may also collect information how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

  • Session Cookies. We use Session Cookies to operate our Service.
  • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
  • Security Cookies. We use Security Cookies for security purposes.
  • E-mail Cookies. If you use the "Connect to E-mail" feature, your service provider uses its own cookies for security purposes. Please contact your service provider for more information about these cookies.

Use of Data

WellyBox uses the collected data for various purposes:

  • To provide and maintain the Service
  • To notify you about changes to our Service
  • To allow you to participate in interactive features of our Service when you choose to do so
  • To provide customer care and support
  • To provide analysis or valuable information so that we can improve the Service
  • To monitor the usage of the Service
  • To detect, prevent and address technical issues

Transfer Of Data

Your information, including Personal Data, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

WellyBox will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Data Retention & Deletion Policy

WellyBox retains your data for as long as your account remains open. While we reserve the right to change this policy in the future, we do not currently automatically close accounts due to inactivity. Your data, including all data sourced from third-parties (such as Google Gmail), will be retained for as long as your account remains open. Therefore, it is your responsibility to close your account with us. The process of closing an account deletes all of the data associated with your account, including all data sourced from third-parties (such as Google Gmail). If you wish to close your account, or delete your data so that we no longer hold a copy of it, please follow these steps:

  • Sign-in to the system at https://app.wellybox.com/.
  • In the top menu, click on Profile. If you are already signed-in, click here.
  • Scroll down and click Close Account & Delete Account Data.
  • Follow the instructions as they appear on screen.

This will delete all the data you have with us, including data sourced from third-parties. Please be advised that account and data deletions are irreversible. Please be noted, however, that data stored with third-parties, such as email messages stored in your own mailbox, are not deleted as part of this process.

Disclosure Of Data

Legal Requirements

WellyBox may disclose your Personal Data in the good faith belief that such action is necessary to:

  • To comply with a legal obligation
  • To protect and defend the rights or property of WellyBox
  • To prevent or investigate possible wrongdoing in connection with the Service
  • To protect the personal safety of users of the Service or the public
  • To protect against legal liability

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's Privacy

Our Service does not address anyone under the age of 18 ("Children").

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Usage of Google Workspace User Data

We hereby explicitly affirm that Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us: