Introduction
Owlly (“we,” “us,” or “our”) provides a browser extension and related services that help you understand website terms of use and privacy notices. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, extension, and services (collectively, the “Services”).
By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.
Information we collect
We may collect the following categories of information, depending on how you use the Services:
- Account and profile data. Such as your name, email address, and authentication identifiers when you create or manage an account.
- Usage and device data. Such as browser type, extension version, approximate location derived from IP address, timestamps, diagnostic logs, and interactions with the Services (for example, feature usage and error reports).
- Policy and browsing context processed by the extension. To provide summaries and cautions, the extension may process URLs, page metadata, and text from pages you visit (for example, terms or privacy documents linked or shown on a site). We design the Services to focus on policy content relevant to your browsing; avoid submitting sensitive information you do not want analyzed.
- Payment information. If you purchase a paid plan, payments are processed by our payment providers. We typically receive limited billing details (such as subscription status and partial identifiers), not your full card number.
- Communications. If you contact us, we keep the content of your message and contact details to respond and improve support.
How we use information
We use information to:
- Provide, maintain, and improve the Services, including summaries, cautions, and account features;
- Authenticate users, prevent fraud and abuse, and protect security and integrity;
- Analyze usage in aggregate or de-identified form to understand product performance;
- Communicate with you about the Services, updates, and support;
- Comply with law and enforce our terms and policies.
Legal bases (EEA, UK, and similar regions)
Where applicable privacy laws require a legal basis, we rely on one or more of the following: performance of a contract with you; legitimate interests (such as securing and improving the Services, provided those interests are not overridden by your rights); consent where we ask for it; and compliance with legal obligations.
How we share information
We may share information with:
- Service providers who assist us (for example, hosting, analytics, customer support, email delivery, security, and payment processing), subject to contractual obligations.
- Professional advisers where reasonably necessary (for example, auditors or lawyers).
- Authorities if required by law or to protect rights, safety, and security.
- Business transfers in connection with a merger, acquisition, or sale of assets, with notice as required by law.
We do not sell your personal information as traditionally defined in applicable U.S. state privacy laws.
Retention
We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the data type and context.
Security
We implement technical and organizational measures designed to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing. You may also have the right to withdraw consent where processing is consent-based. To exercise rights, contact us using the details below. You may appeal certain decisions as provided by law.
If you are in the EEA, UK, or Switzerland and believe we have not resolved your concern, you may contact your local data protection authority.
International transfers
We may process and store information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
Children
The Services are not directed to children under 13 (or the age required by your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps.
Third-party sites and services
Our Services may reference or interact with third-party websites and services. Their practices are governed by their own policies. We are not responsible for third-party sites you choose to visit.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date. If changes are material, we will provide additional notice as appropriate (for example, by email or an in-product message).
Contact us
Questions about this Privacy Policy or our privacy practices? Contact us at support@owlly.app.
See also our Terms of Service.