Privacy Policy

1. Introduction

Owlerts ("we", "us", or "our") operates the owlerts.com website and the Owlerts platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Organization and team member details
• Stripe account connection data (OAuth tokens, account identifiers)
• Payment and billing information processed through Stripe
• Notification preferences and channel configurations
• Usage data and analytics about how you interact with the Service

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process and analyze your Stripe transaction data to generate analytics
• Send notifications and alerts based on your configured preferences
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and fraud

4. Data From Stripe

When you connect your Stripe account, we receive webhook events and API data related to your customers, subscriptions, invoices, and payment activity. This data is used exclusively to provide analytics and alerts within the Service. We do not sell, share, or use your Stripe data for any purpose other than operating the Service on your behalf.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide you with the Service. Retention periods for analytics data depend on your subscription tier. When you disconnect your Stripe account or delete your Owlerts account, we will delete your Stripe-sourced data within 30 days.

6. Data Security

We implement industry-standard security measures to protect your data, including AES-256-GCM encryption for sensitive credentials, TLS encryption for all data in transit, and strict access controls. Stripe OAuth tokens are encrypted at rest and never stored in plain text.

7. Third-Party Services

We integrate with third-party services to deliver notifications. When you enable a notification channel, relevant alert data may be transmitted to:

• Email service providers
• Slack, Discord, or Telegram (via their respective APIs)
• SMS and push notification providers
• Webhook endpoints you configure

8. Your Rights

You have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability

9. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@owlerts.com.