Privacy Policy

Who we are

Well Said (“we,” “us,” “our”) is a testimonial collection tool operated by Asaf Mohammed, based in Chennai, Tamil Nadu, India. This Privacy Policy explains how we collect, use, and protect your information when you use wellsaid.vercel.app (the “Service”).

Information we collect

If you create a Member account (someone who collects testimonials):

• Email address
• Password — stored as a securely hashed value. We never store or have access to your plaintext password.
• Display name, headline, and any customisations you make to your profile page

If you submit a testimonial as a Contributor (someone leaving a testimonial via a shared link):

• No account is required to submit a testimonial.
• If you choose to log in at submission to receive a verified badge, we collect your email and credentials in the same way as a Member account.
• If you do not log in, we only collect the information you voluntarily provide: name, role, company, star rating, and testimonial text.

Automatically collected:

• Basic server logs (IP address, browser type, device info) collected via our hosting provider Vercel, for security and performance purposes.

How we use your information

• To create and manage your account
• To display testimonials on your public collection page
• To verify identity for the verified badge feature
• To send a custom thank-you message after a testimonial is submitted (if you configure one)
• To calculate your tier badge based on your verified testimonial count
• To maintain security and prevent abuse of the Service

We do not sell your personal data, use it for advertising, or share it with third parties beyond what is necessary to operate the Service.

Data storage & security

• Passwords are hashed using industry-standard algorithms and are never stored in plaintext.
• Data is stored on Supabase's infrastructure (PostgreSQL database) with access restricted to the Service operator.
• We take reasonable technical measures to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Third-party services & data sharing

We use the following third-party providers to operate the Service:

• Supabase — database storage and authentication. supabase.com/privacy
• Vercel — hosting and deployment. vercel.com/legal/privacy-policy
• Google Fonts — fonts loaded on the dashboard and embed widget. Google may collect usage data per their own privacy policy.

Testimonial content submitted through the Service may be publicly displayed or embedded by the Member who collected it (e.g., on their website). This is the core function of the Service and is disclosed at the point of submission. We may also disclose data when required by law or valid legal process.

Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Receive a copy of your data (data portability)
• Withdraw consent for data processing at any time

To exercise these rights, contact us at mohamedmd2500@gmail.com. We will respond within 30 days.

If you are located in the EU or UK, you have additional rights under GDPR/UK GDPR, including the right to lodge a complaint with your local data protection authority.

Data retention

Your account data and testimonials are retained for as long as your account is active. If you request account deletion, all associated pages, testimonials, and profile data are removed permanently. We may retain certain information where required by law.

Children's privacy

The Service is not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us and we will remove it promptly.

Cookies

We use essential cookies only — for authentication (to keep you signed in). We do not use advertising, tracking, or third-party analytics cookies.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? mohamedmd2500@gmail.com