Privacy Policy

Howlers (howlers.io) is operated by John Cihangir, a sole proprietor based in the United States. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Information We Collect

Account information: When you create an account, we collect your name, email address, and authentication credentials (password hash or OAuth token). If you sign in with Google, we receive your name and email from Google — we do not receive or store your Google password.

Content you provide: Guide text, checklists, instructions, and any other content you create within the Service. This content is stored in our database to deliver the Service.

Session and conversation data: When a recipient interacts with an AI agent, we store the conversation transcript, checklist progress, agent memory notes, and tool event logs. Voice audio is processed in real time by our AI providers and is not stored by Howlers after the session ends.

Usage data: Voice minutes consumed, session timestamps, and general usage metrics for billing and service improvement.

Payment information: Payment processing is handled entirely by Stripe. We do not store your credit card number, bank account details, or other sensitive financial information on our servers. We receive from Stripe only the data necessary to manage your subscription (customer ID, subscription status, billing period).

Technical data: IP address, browser type, device type, and similar technical information collected automatically when you access the Service. This data is used for security, debugging, and service improvement.

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To process payments and manage your subscription.
• To send transactional communications (account confirmations, billing receipts, security alerts).
• To enforce our Terms of Service and protect against abuse.
• To comply with legal obligations.

We do not sell your personal information. We do not use your content to train AI models. Your guide content and session data are used solely to deliver the Service to you.

3. Third-Party Services

We use the following third-party services to operate Howlers:

• Supabase — Authentication and database hosting (your account data and content are stored in Supabase’s infrastructure).
• Stripe — Payment processing (subject to Stripe’s Privacy Policy).
• xAI — AI conversation processing and voice synthesis.
• ElevenLabs — Text-to-speech processing (fallback provider).
• Railway — Application hosting.
• Google — OAuth authentication (if you choose to sign in with Google).

Each provider processes data according to their own privacy policies. We select providers that maintain industry-standard security practices.

4. Data Retention

Account data is retained for as long as your account is active. Session data (transcripts, checklists, tool logs) is retained for up to 90 days after the session expires, then archived or deleted. You may request deletion of your account and associated data at any time by emailing john@howlers.io.

5. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (TLS), row-level security in our database to prevent cross-account data access, and secure authentication via Supabase Auth. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your personal data and account.
• Export your data in a portable format.
• Object to processing of your personal data.

To exercise any of these rights, contact us at john@howlers.io. We will respond within 30 days.

7. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information. To make a request, email john@howlers.io.

8. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies. Your browser settings allow you to control cookie behavior.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. The “Last updated” date at the top reflects the most recent revision.

11. Contact

Questions about this Privacy Policy? Email us at john@howlers.io.