Welt · Privacy notice
How Welt uses your data
In short
- The tables you upload are yours. Welt stores them privately, runs the models you ask for on them, and keeps them until you delete them.
- Welt does not use your data to train models, and does not share it with anyone outside the processors listed below.
- Your data and the models run in a single Google Cloud region in the United States, on infrastructure Welt operates. No dataset is sent to a third-party model API.
- Assistants you connect through the Welt plugin act with your permission, in one workspace, and can be disconnected at any time.
1. Your datasets, predictors and results
What. Tables you upload or import (CSV, Parquet, or rows sent by an assistant), their schema and target column, the predictors fitted on them, prediction and forecast results, causal graphs, evaluations and their reports.
Why. To run the modelling operations you request and to let you and the members of your workspace reuse them. That is the only purpose. Welt does not analyse your datasets for any other reason, does not use them to train or improve any model, and does not use them to build profiles.
Where. In a private Google Cloud Storage bucket and database in the us-central1 (Iowa, United States) region, inside a Google Cloud project dedicated to Welt. Models execute on GPU and CPU workers Welt operates in that project. No dataset, prediction or result is sent to a third-party model provider.
Who can see them. The members of the workspace that holds them, according to their role, and the assistants and API keys those members have authorised for that workspace. Ergodic staff access customer data only to operate the service, investigate a fault or a security incident, or at your request.
How long. Datasets, predictors and the records of your operations are kept until you delete them or close your workspace; there is no automatic expiry. Links that let an assistant upload a file or download a result work once and expire within one hour. Evaluation report links expire after the period you choose, at most seven days.
Deleting. You can delete datasets, evaluations, model runs, forecasts and causal results from the console, the Python client or the API. To delete a predictor or a whole workspace, or to export everything a workspace holds, ask support; deletion of a whole workspace is completed within 30 days.
Personal data inside your tables. If a table you upload contains personal data about other people, you are responsible for having the right to process it with Welt. Welt processes it only on your instructions, as described here.
2. Your account and workspace
To sign in Welt keeps your email address, your name if you give one, a hashed password or the identity of the Google or GitHub account you sign in with, email-verification state, and the workspaces you belong to with your role. Sign-in is handled by Google Cloud Identity Platform. Invitation and some verification emails are sent by Resend. Welt keeps an audit record of sign-ins, key and connection changes and workspace membership changes.
Welt's session cookie (__Host-welt_session) is strictly necessary, HttpOnly and never used for tracking. The console stores your theme and layout preferences in your browser only. Welt uses no analytics or advertising trackers.
3. Connected assistants and API keys
When you connect an AI assistant (ChatGPT, Claude, Cursor, VS Code, Codex or another MCP client) through the Welt plugin, Welt records the connection as a key in your workspace: the app's name, the address it returns to, the access you granted (read, or read and write), the workspace, and the expiry you chose. Access tokens are stored only as hashes. The assistant then acts in that one workspace on your behalf, within the credits and spend cap of the workspace. What your assistant sends to its own provider is governed by that provider's privacy terms, not by Welt. You can disconnect any assistant from the console under Settings → API keys; access stops at once.
API keys are shown once and stored hashed. Every request made with a key or a connection is recorded as a usage operation with its time, model, workload and credits.
4. Billing
Credits are bought and plans are managed through Stripe. Stripe handles card details; Welt never receives or stores card numbers. Welt keeps the workspace's Stripe customer and subscription identifiers, the billing email, purchases, grants and consumption records needed to account for credits.
5. Processors
| Processor | What for | Where |
|---|---|---|
| Google Cloud (Google LLC) | Hosting, storage, database, model execution, sign-in (Identity Platform) | United States (us-central1) |
| Stripe, Inc. | Payments and subscriptions | United States and EU |
| Resend | Transactional email (invitations) | United States |
Welt shares no data with any other third party, and never sells data. Where personal data leaves the UK or EU, the transfer relies on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses with these processors.
6. Public research datasets
Welt's research catalogue contains public tables published under their own licences (for example CC BY 4.0 or ODbL), each with its attribution. They are separate from your private datasets. Copying one into your workspace creates a private copy subject to that licence.
7. Operational logs and security
Requests produce operational logs with request identifiers, addresses, timing and error codes, kept for a limited period for reliability and security and never joined with the contents of your data. Data is encrypted in transit and at rest. Workspaces are isolated from each other at every API route.
8. Your rights
You can see and export what a workspace holds, correct your account details in the console, delete your data as described above, and ask us to delete your account. UK and EU users also have the rights of access, rectification, erasure, restriction, portability and objection under the UK GDPR and the GDPR, and may complain to the ICO or their local authority. Write to support.
9. Changes
When this notice changes materially, the date above moves and the console shows a note on sign-in. Earlier versions are available on request.