Privacy Policy

Effective date: October 16, 2026

Last updated: October 21, 2026

---

1. Introduction

Welcome to We’ll Do It LLC. We are committed to protecting your personal information and being transparent about what we do with it. This Privacy Policy explains how we collect, use, share, and protect your data when you use welldoit.solutions, Monocle Prism (monocleprism.com), our marketplace, our advisory, setup and support services, and related WDI services. That includes Monocle Prism features when they are included in your plan.

Who we are. We’ll Do It LLC, 2321 E. University Dr., Phoenix, AZ 85034, United States. For most of the processing described here, we are the data controller.

When we are a processor. When we resell or set up technology on a client’s behalf, we may act as a data processor. In that case, our processing is governed by our agreement with the client (the controller).

Related documents: Terms & Conditions, Data Protection, SMS Terms, Cookies, Your Privacy Choices, Third-Party Processors.

---

2. Legal reasons we use your information

We process personal information only when we have a valid legal reason.

• Contract. To deliver the services you purchase, manage your account, and process payments.
• Legal obligation. Tax, accounting, and regulatory requirements (including PTIN and ETIN identifiers where applicable).
• Legitimate interests. Security, fraud prevention, service improvement, and customer support, balanced against your rights.
• Consent. Optional marketing, non-essential cookies, and similar choices you can withdraw at any time.

---

3. Information we collect

We collect information directly from you, automatically on our sites, and from partners.

Delegated access data

When you give us logins or financial access so we can do the work you hired us for, we treat that as high-trust data. We store it encrypted, restrict access on a need-to-know basis, prefer OAuth or API tokens over raw passwords, use the access only for the contracted purpose, and delete it when the service ends.

Health information

We do not routinely process protected health information (PHI). If a project requires it, we will use a separate, HIPAA-aligned agreement first.

---

4. How we use information

---

5. Sharing and third parties

We do not sell personal information. We share data with service providers who process it for us. See the Third-Party Processors appendix for the current list (payments, CRM, analytics, hosting, marketplace tools, and more).

We may also share information with:

• Professional advisors (legal, accounting) under confidentiality.
• Government or law enforcement when required by valid legal process.
• A successor in a merger or acquisition (with notice where required).

Monocle and WDI software

Monocle Prism (monocleprism.com) is a software platform owned and operated by We’ll Do It LLC. Purchases, accounts and orders are handled in Monocle Prism; our website links you there to buy. Through WDI plugins such as internal-wdi-monocle, our website sends Monocle Prism what you enter in our forms (contact, registration, provider applications and inquiries), domain searches and quotes, provider store listings, sign-in handoff identifiers when you move between our website and Monocle Prism, and referral and advertising-click information as described on our Cookies page (/cookies/). Monocle data is processed under this policy and our Terms. Permissions are scoped to your active workplace memberships.

Business-listing scanner

Our business-listing scanner is provided by Optimize Location, a Yext partner service. The details you enter, including your name and email address, are submitted directly to that provider rather than to us. We were unable to locate a published privacy policy for this provider when we checked on 21 September 2026. If you would rather not share your details with a third party, contact us and we will run the check for you.

---

Advertising and measurement

We advertise on Google, Meta (Facebook and Instagram) and TikTok, and we use their tools to see whether our advertising works.

On our website. If you allow Analytics or Marketing cookies, our website loads Google Analytics and Google Tag Manager, the Meta pixel and the TikTok pixel. They record the pages you visit and how you arrived, and let these platforms show our ads to people who have visited our site. They do not load until you allow them.

When you buy. When you complete a purchase in Monocle Prism, we tell Google, Meta and TikTok that a purchase happened, so we can measure which ads led to sales. We send the order value, the time, the products, and your email address in a scrambled (hashed) form that the platform can match only to an account it already holds. If you arrived from one of their ads, we also send the click identifier that came with you. We don’t send your name, address or payment details.

Our product list. We send our list of products and prices to these platforms so they can show them in ads. It contains no information about you.

Your choice. If you turn off Marketing in Cookie Settings, the pixels don’t load on our website. To stop us reporting your purchases, turn off Advertising measurement in Monocle Prism (Settings, then Data & Privacy), check out with Global Privacy Control turned on, or ask us by email. See Your Privacy Choices.

Google, Meta and TikTok use this information under their own privacy policies.

Google user data (Monocle Prism)

Monocle Prism is a business platform operated by We’ll Do It LLC. This section explains what Monocle Prism does with information it receives from Google when you sign in with Google or connect a Google service. It adds to the rest of this Privacy Policy, and where they differ for Google user data, this section applies.

What we access

When you sign in with Google, we receive your name, email address and profile picture (the openid, email and profile permissions). We use them only to create your Monocle Prism account and sign you in.

When you choose to connect a Google service to your Monocle Prism workplace, we ask Google for only the access that service needs, and only when you connect it:

• Gmail (gmail.readonly, gmail.send): to show your inbox in Monocle Prism and send the emails you write there.
• Google Calendar (calendar, calendar.events): to keep your bookings and meetings in step with your calendar.
• Google Drive, Docs, Sheets and Slides (drive, drive.readonly, documents, spreadsheets, presentations): to link and import the files you choose.
• Google Tasks (tasks): to keep your tasks in step.
• Google Contacts (contacts.readonly): to import the contacts you choose.
• Google Business Profile (business.manage): to manage your business listings and reply to reviews.
• Google Ads (datamanager): to report purchases made with your business to your own Google Ads account, for people who agreed to advertising measurement.

You can see what is connected, and disconnect it, in your workplace’s settings in Monocle Prism. You can also remove our access at any time from your Google Account (https://myaccount.google.com/permissions).

How we use it

We use Google user data only to provide and improve the features you or your workplace turn on, inside that workplace. We don’t use it for any other purpose.

How we store and protect it

Google user data is encrypted when stored. The keys that let Monocle Prism reach your Google services (access tokens) are kept in an encrypted vault. Inside Monocle Prism, who can see the information follows your workplace’s permissions.

Sharing

We don’t sell Google user data, and we don’t use it for advertising, retargeting or interest-based ads. We share it only:

• with the people in your own workplace, as your workplace’s settings allow;
• with the service providers we need to run the feature you asked for (for example, our hosting and database providers), under contracts that let them use it only for that purpose;
• when the law requires it, or to protect the security of our users and services; or
• with your permission.

Monocle AI

We don’t use Google user data to develop, improve or train generalized artificial intelligence or machine learning models. Monocle AI uses it only to answer the person who asked, inside their workplace. When answering requires an AI model, the request is sent to the model’s provider under business terms that don’t allow that provider to train its models on it.

Keeping and deleting it

• Disconnecting. When you disconnect a Google service, we stop accessing it and delete the access tokens we stored for it.
• Account deletion. When your Monocle Prism account or workplace is deleted, we delete the Google user data we stored for it, except records the law requires us to keep.
• Asking us to delete it. You can ask us to delete your Google user data at any time by emailing specialist@welldoit.solutions or calling 1-833-WDI-4YOU.

Limited Use

Monocle Prism’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

We’ll Do It LLC, operator of Monocle Prism. For questions about this section or your Google user data, email specialist@welldoit.solutions or call 1-833-WDI-4YOU.

Text messages (SMS)

SMS consent is not shared with third parties. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

What we collect. If you agree to receive text messages from We’ll Do It LLC, we collect your mobile number, your consent record (the wording you agreed to, the date and time, and the page or form where you agreed), the messages we exchange with you, and delivery information such as the time a message was sent and whether it was delivered.

How we use it. We use this information only to send you the text messages you agreed to, to answer your messages, to honor STOP and HELP requests, and to keep a record that shows you agreed.

Who we share it with. We send texts through our business phone provider, which processes your number and messages only to deliver them for us, under contract. We may disclose information when the law requires it. We do not sell your mobile number or your consent.

Opting out. Reply STOP to any message to stop receiving texts. See our SMS Terms for details.

All of the sharing described elsewhere in this Privacy Policy excludes text messaging originator opt-in data and consent. This information will not be shared with any third parties.

---

6. Cookies and similar technologies

We use cookies and similar technologies in the following categories.

For visitors in the EEA, UK, and California, non-essential cookies and trackers are blocked from loading until you give consent through our banner or a recognized global privacy signal.

A full per-vendor cookie list (name, purpose, provider, duration, and transfer destination) is available at /cookies/ and is linked from the cookie banner before consent.

Managing your choices. You can change your preferences at any time through Cookie Settings in the site footer. We honor Global Privacy Control (GPC) signals as a valid opt-out of sale and sharing under California law, and as a request to suppress non-essential storage and access under UK PECR.

California Your Privacy Choices. A persistent footer link labeled “Your Privacy Choices” with the CPPA-approved icon gives you a one-click way to opt out of sale and sharing and, where it applies, to limit the use of sensitive personal information.

---

7. Security, retention, and transfers

Security. We use a layered set of safeguards designed to keep your data confidential and intact.

• Encryption in transit (TLS) for site, account, and form traffic.
• Access controls that restrict systems to a need-to-know basis and require strong authentication for staff accounts.
• Vendor due diligence before we grant a service provider access to personal data.
• Card payments are taken by our payment processor, Stripe; we do not store full card numbers on our own systems.
• Edge protection through a content delivery network and web application firewall.
• Application hardening, patching, and monitoring on our website and on Monocle Prism.

We don’t publish the specific tools we use, because doing so would help attackers. We are happy to share our security overview under a non-disclosure agreement with enterprise clients on request.

Retention (summary).

• Client and transaction records: up to 10 years where required for tax and accounting.
• Analytics: up to 1 year.
• Support inquiries and chats: kept until deleted; you can ask us to delete them.
• Marketing: until you unsubscribe (we retain a suppression list).

International transfers.

We operate from the United States, so personal data from the EEA or the UK is transferred there.

We are being straightforward about where we are with this. We rely on service providers who are themselves certified under the EU-US Data Privacy Framework or who offer Standard Contractual Clauses in their own terms. We have not yet executed Standard Contractual Clauses of our own, and we are not going to claim that we have. Putting those agreements in place is part of the compliance work we are completing.

If you are in the EEA or the UK and you want to know how your data is handled before you share it with us, contact us at specialist@welldoit.solutions and we will tell you.

---

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object, port your data, and withdraw consent. California residents may also opt out of sale and sharing and limit the use of sensitive personal information.

How to make a request. Email specialist@welldoit.solutions with the subject “Privacy Request”, or submit through the Your Privacy Choices link in our footer.

How long it takes. We aim to respond to California requests within 45 days (with one 45-day extension on notice). We respond to EEA and UK requests within one month (with up to two extra months on notice for complex requests), in each case as permitted by law. If a request involves data held by a partner processor, additional time may be needed and we will keep you informed.

How we verify you. Before we fulfill a request, we verify your identity using information already on file.

• For requests to know the categories of personal information we collect, or to delete it, we require at least two matching data points.
• For requests to know the specific pieces of personal information we hold, we require at least three matching pieces and a signed statement under penalty of perjury.
• We do not require verification for opt-out, opt-in, or “limit the use of sensitive personal information” requests.

Authorized agents (California). California residents may use an authorized agent. We may require either (a) the agent’s signed written permission from you plus verification of your own identity, or (b) a valid power of attorney executed under California Probate Code §§ 4121–4130.

Quick contacts for California rights:

• Do Not Sell or Share: specialist@welldoit.solutions
• Limit the Use of Sensitive Personal Information: specialist@welldoit.solutions
• One-click: the Your Privacy Choices link in our footer.

---

9. Notices for specific places

California (CCPA and CPRA)

The rights and notices above apply. We do not sell personal information in the traditional sense. We do not knowingly sell or share the personal information of consumers under 16.

EEA / UK / Canada

Controller: We’ll Do It LLC.

Contact: specialist@welldoit.solutions · 1-833-WDI-4YOU.

EEA and UK contact. If you are in the EEA or the UK, you may contact We’ll Do It LLC directly at specialist@welldoit.solutions or by mail at the address above.

Right to lodge a complaint.

• UK users may complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/.
• EEA users may complain to their local data protection authority. The full list is at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

Mexico (LFPDPPP)

You may exercise ARCO rights (Access, Rectification, Cancellation, Opposition) through Section 8.

---

10. Children

Our services are not directed to children under 16, or to the lower age set by law where you live (no younger than 13). If we find out that a California user is between 13 and 15, we will not sell or share their personal information without their affirmative opt-in. For users under 13, we will not process personal information without verifiable parental consent under the methods recognized by California regulators.

---

11. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new effective date and, where appropriate, emailed to registered customers.

---

12. Contact us

We’ll Do It LLC

2321 E. University Dr., Phoenix, AZ 85034, United States

Email: specialist@welldoit.solutions

General: mgmt@welldoit.solutions

For EU, UK, and Canada inquiries: specialist@welldoit.solutions · 1-833-WDI-4YOU

Appendix: Third-party processors

Controller: We’ll Do It LLC (Arizona, USA)

Last reviewed: 2026-10-16

We do not sell personal information. We share data with service providers who process it for us. “Providers” here include website plugins and vendors connected to your account through a Monocle Prism workplace integration.

Categories of providers, and who receives customer content

Categories of providers we use: payment processing, accounting, customer relationship management, email delivery, telephone and messaging, hosting and content delivery, website analytics, advertising measurement, business listings and search, identity and business verification, document signature, and artificial intelligence services.

Providers that receive customer content through Monocle Prism. Where a workplace uses the assistant in Monocle Prism, the content it is shown is sent to the provider that answers it. Today those providers are Google (Gemini), Anthropic (Claude) and OpenAI. A workplace may connect its own provider account instead, in which case the content is sent under that account rather than ours.

A current list of the named providers we use is available on request from specialist@welldoit.solutions, and we will tell you what each one receives.

Integrations you connect yourself. Additional services receive your data only when someone in your workplace connects them. You see the permissions requested at the time, you can review active connections in your settings, and you can disconnect at any time.

Tier 1: customer data, payments, and marketing

Tier 1b: Monocle workplace integrations

When your plan includes Monocle, additional third-party services may receive your data only when you connect them to your Monocle workplace through Settings → Integrations. Each connection is scoped to the workplace it was authorized in, and credentials are stored encrypted. Disconnecting an integration revokes Monocle’s access and stops further data exchange.

Authorization model. Every Monocle integration is workplace-scoped and consent-gated. You see the exact scopes requested at OAuth time, you can review active connections in Settings → Integrations, and you can disconnect at any time. We store no plaintext credentials; tokens are encrypted at rest.

Tier 2: infrastructure

We use hosting providers that run our website and Monocle Prism and keep standard server logs.

We also use commercial caching, image optimization, comment spam filtering, login protection, and WordPress security hardening tools to operate the site. These tools run on our own infrastructure and do not have independent access to personal data outside the hosting environment. We do not publish the specific products or versions we use, because doing so would help attackers. Enterprise clients may request a security overview under a non-disclosure agreement.

Affiliated WDI services (not third-party processors)

For Monocle-specific processing, see Section: Monocle and WDI software in the Privacy Policy.