Legal

Privacy Policy

Effective Date: November 13, 2025

Dwello, Inc. ("Dwello," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Dwello platform ("Platform"). Please read this policy carefully. By using the Platform, you consent to the data practices described in this policy. If you do not agree with the practices described here, please do not use the Platform.

1. Information We Collect

We collect different types of information depending on how you use the Platform.

1.1 Account Registration. When you create an account, we collect your full name, email address, and password.

1.2 Profile Information. To build your profile, we collect: gender; denomination (optional); biography; location (city and state); profile photos; budget preferences; and housing preferences such as lease term, pet ownership, and amenity needs.

1.3 Religious and Belief Information. During the questionnaire process, we collect information about your theological convictions, spiritual practices, community involvement, lifestyle preferences, and doctrinal beliefs. This information is used to calculate compatibility scores with other Users. Providing this information is voluntary but enhances your ability to find compatible roommates.

1.4 Church Verification Information. If you request church membership verification, we collect your church name, church location, pastor's name, pastor's email address, and pastor's phone number (optional). Your pastor will receive a verification request and may provide attestation information about your membership.

1.5 Phone Number. We collect your phone number for identity verification purposes via SMS.

1.6 Background Check Information. If you opt in to a background check, we collect additional information including your date of birth and physical address (street, city, state, postal code, and country). This information is shared with our background check provider to conduct the check.

1.7 Identity Verification Information. If you complete identity verification, you may be asked to provide a government-issued photo ID and a selfie. This information is processed by our identity verification provider.

1.8 Payment Information. When you purchase a membership or add-on service, your payment information is collected and processed by our payment processor. We do not store your full credit card number or payment credentials on our servers. We do store your payment processor customer ID, transaction IDs, and purchase amounts for record-keeping.

1.9 Messages. When you communicate with other Users through the Platform, we store the content of your messages, timestamps, and read status.

1.10 Photos. Profile photos and room photos you upload are stored on our servers. These photos are accessible via URL to facilitate display on the Platform.

1.11 Usage and Error Data. We collect error reports and diagnostic data to maintain and improve the Platform. This may include information about your browser, device, and the actions that led to an error.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing the Service. To create and maintain your account, display your profile, calculate compatibility scores, facilitate roommate matching, and enable communication between Users.

2.2 Verification. To verify your identity, phone number, and church membership as part of the trust and safety features of the Platform.

2.3 Background Checks. To conduct optional background checks when you purchase this add-on service.

2.4 Payment Processing. To process payments for memberships and premium features.

2.5 Communications. To send you transactional emails including registration confirmations, membership confirmations, membership expiry reminders, and verification-related communications.

2.6 Safety and Security. To detect and prevent fraud, abuse, and security incidents; to enforce our Terms of Service; and to protect the rights and safety of our Users.

2.7 Improvement. To analyze errors and improve the performance, reliability, and functionality of the Platform.

3. Information Sharing with Third Parties

We share your information with the following categories of third-party service providers to operate the Platform. We do not sell your personal information.

3.1 Payment Processing — Stripe. We use Stripe to process payments and verify identity. When you make a purchase or complete identity verification, Stripe receives your name, email, payment details, and (for identity verification) your government-issued ID and selfie. Stripe's use of your data is governed by Stripe's privacy policy.

3.2 Background Checks — Certn. If you opt in to a background check, we share your name, date of birth, and physical address with Certn, our background check provider. Certn's use of your data is governed by Certn's privacy policy.

3.3 Phone Verification — Twilio. We use Twilio to send SMS verification codes. Your phone number is shared with Twilio for this purpose. Twilio's use of your data is governed by Twilio's privacy policy.

3.4 Email Communications — MailerSend. We use MailerSend to send transactional emails. Your email address and name are shared with MailerSend for this purpose. MailerSend's use of your data is governed by MailerSend's privacy policy.

3.5 Error Monitoring — Sentry. We use Sentry to monitor and diagnose errors on the Platform. Sentry may receive technical information about your browser, device, and the circumstances surrounding an error. Sentry's use of your data is governed by Sentry's privacy policy.

3.6 Infrastructure — Supabase. Our database, authentication, and file storage are hosted on Supabase. All user data described in this policy is stored on Supabase's infrastructure. Supabase's use of your data is governed by Supabase's privacy policy.

3.7 Hosting — Netlify. The Platform is hosted on Netlify. Netlify may process request data (such as IP addresses) as part of serving the Platform. Netlify's use of your data is governed by Netlify's privacy policy.

3.8 Legal Requirements. We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Storage and Security

4.1 Storage Location. Your data is stored on cloud infrastructure provided by Supabase and Netlify. Photos are stored in cloud storage buckets.

4.2 Photo Accessibility. Profile photos and room photos are stored in storage buckets that allow public read access to facilitate display on the Platform. This means that anyone with the direct URL to a photo may be able to access it. We recommend not uploading photos that contain sensitive information beyond what you intend to share on your profile.

4.3 Security Measures. We implement industry-standard security measures including: row-level security policies that restrict data access to authorized Users; encrypted connections (HTTPS/TLS) for all data transmission; secure authentication with hashed passwords; webhook signature verification for third-party integrations; and admin audit logging for all sensitive administrative actions.

4.4 No Guarantee. While we take reasonable steps to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security.

5. Data Retention

5.1 Account Data. We retain your account and profile data for as long as your account is active or as needed to provide the Service.

5.2 Messages. Messages sent through the Platform are retained indefinitely to maintain conversation history for Users. Message content is only accessible to the participants of the conversation.

5.3 Background Check Results. Background check status and summary results are retained for the duration of their validity period (one year) and may be retained afterward for compliance and record-keeping purposes. Detailed background check data is held by Certn according to their retention policies.

5.4 Verification Records. Verification records (identity, church membership) are retained for compliance, safety, and audit purposes.

5.5 Payment Records. Transaction records are retained as required by applicable tax and financial regulations.

5.6 Audit Logs. Administrative audit logs are retained for compliance and security purposes.

5.7 Account Deletion. When your account is deleted, your profile data, messages, verifications, and memberships are permanently removed from our database through cascading deletion. Data that has been shared with third-party providers (such as Stripe, Certn, or Twilio) is subject to those providers' respective retention and deletion policies.

6. Your Rights

6.1 Access and Update. You may access and update your profile information at any time through the Platform's settings.

6.2 Account Deletion. You may request deletion of your account by contacting us. Account deletion will remove your profile, messages, and associated data from our systems as described in Section 5.7.

6.3 Communication Preferences. You may opt out of non-essential communications. Transactional communications related to your account and the Service cannot be opted out of while your account remains active.

6.4 California Residents. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

6.5 Other Jurisdictions. If you reside in a jurisdiction with additional data protection rights, please contact us to exercise those rights.

7. Children’s Privacy

The Platform is not intended for use by anyone under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or via email. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: [email protected]

By using the Dwello platform, you acknowledge that you have read and understood this Privacy Policy.

Last Updated: February 23, 2026

Privacy Policy | Dwello | Dwello