The short version
We collect your email, the business details you type in, and how you use the app. Your business details are sent to an AI provider so it can write your marketing. We do not sell anything. You can ask for a copy of your data or have it deleted.
What we collect
Account details: your email address, and a password stored only as a secure hash by our authentication provider. We never see it.
Business information: everything you enter about your business — name, location, services, audience, brand tone, goals.
Content and results: the drafts generated for you, which you published, and any performance figures you enter.
Your Oddling: its name, species, level, stats and what it has learned.
Billing: handled by Stripe. We store your Stripe customer id, plan and status. We never receive your card number.
Technical: IP address, browser type and basic error logs, used to keep the service working and secure.
Site analytics: we use Vercel Analytics to count page views and see which pages people land on. It sets no cookies, does not follow you to other websites, and does not build a profile of you. We cannot use it to identify an individual visitor.
We do not use advertising trackers and we do not run analytics that profile you across other sites.
Where your business information goes
This is the part worth reading closely. When you ask your Oddling for an idea, your business details, its learned patterns, and your recent post titles are sent to a third-party AI provider to generate the text.
We use Anthropic as our AI provider. Under their commercial terms, data sent through the API is not used to train their models. If we change provider we will update this page.
Do not enter anything into your business details that you would not want processed this way — no customer personal data, no payment details, no confidential third-party information.
Who else processes your data
Supabase — database and authentication, storing your account and business data.
Vercel — hosting, delivery, and cookieless page-view analytics.
Anthropic — AI generation, as described above.
Stripe — payment processing.
Each is a processor acting on our instructions. We do not sell personal information or share it with advertisers.
Why we are allowed to use it
To provide the service you asked for — performing our contract with you.
To take payment — performing our contract, and complying with tax and accounting law.
To keep the service secure and working — our legitimate interest in running it safely.
Where consent is the basis, you can withdraw it at any time.
How long we keep it
Account and business data: while your account is open, and for 30 days after you close it, so an accidental deletion can be undone.
Billing records: seven years, because tax law requires it.
Error logs: 90 days.
After that, data is deleted or irreversibly anonymised.
Your rights
You can ask for a copy of your data, correct it, delete it, or object to how we use it. Business details can be edited yourself at any time on the Business page.
To make a request, write to YourOddlings@outlook.com. We will respond within 30 days.
Depending on where you live you may also have the right to complain to a data protection authority, and to ask us not to sell or share personal information — which we do not do in any case.
Security
Data is encrypted in transit and at rest by our providers. Database access is restricted per account by row-level security, so one account cannot read another.
No system is perfectly secure. If a breach affects your data, we will tell you and the relevant regulator as the law requires.
Children
The service is for adults running a business. It is not directed at children and we do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.
Changes
We will post any update here and change the date at the top. Material changes will be emailed to you first.
Questions: YourOddlings@outlook.com.