Privacy Policy

1. A note on the emails we analyze

HappyCohort is a competitive email-intelligence product. The emails we analyze are brands' outbound marketing emails, which we receive at seed inboxes that we own and control. They are not your personal mailbox and we do not connect to, read, or import your email account.

Because those marketing emails are addressed to our seed inboxes, they can contain information that identifies the seed recipient. Before we store or display any of that content, we automatically redact seed-identity information — the recipient address and addresses on our seed domains, recipient names, promotional codes, and per-recipient tracking and unsubscribe links. One known limitation is that a promotional code rendered inside an image (rather than as text) cannot be redacted by text processing.

If you are a brand or an individual and believe a public page contains information that should be removed, contact us at support@happycohort.com and we will review the request in good faith.

The rest of this policy is about the personal information of our website visitors and account holders.

2. Personal information we collect

Information you provide to us.

• Account and authentication information — your email address and a password (which we store only as a salted cryptographic hash, never in plain text).
• Billing information — if you purchase a subscription, our payment processor (Stripe) collects and processes your payment-card details directly. We receive and store only limited billing metadata, such as a customer identifier, your subscription plan and status, and renewal dates. We do not store your full card number.
• Workspace and usage content — the projects, own-brand selection, watched competitors, saved items, alert rules, and chat and prompt inputs you create in the Services.
• Alert-recipient email addresses — email addresses you add so that other people can receive alerts. Those recipients must confirm their subscription (double opt-in) before we deliver anything, and every alert email includes an unsubscribe link.
• Support and other correspondence — information you provide when you contact us.

Information we collect automatically. When you use the Services, we and our infrastructure providers automatically log technical information such as your IP address, browser and device type, operating system, referring pages, pages viewed, and the date and time of your requests. We use this information to operate, secure, and improve the Services.

Information from third parties. We receive limited billing status information from our payment processor (Stripe) so we can provision and manage your subscription.

3. Cookies and similar technologies

We keep our use of cookies deliberately minimal, and we use only strictly functional cookies. The main one is an authentication cookie that keeps you signed in to the dashboard; we also set functional preference cookies, such as one that remembers whether the dashboard sidebar is expanded or collapsed. We do not use third-party advertising cookies, and we do not run third-party analytics or advertising trackers on the Services. The dashboard also stores some preferences (such as your active project and interface settings) locally in your browser; this stays on your device and is not a tracking cookie.

One thing to be aware of: brand logos shown in the Services are loaded from a third-party logo provider (Logo.dev). Because those images load in your browser, your IP address is visible to that provider when a logo is fetched. Email creative images, by contrast, are proxied through our own systems and stripped of tracking, so that in normal operation viewing an email is not reported back to the original sender.

4. How we use personal information

We use personal information to:

• provide, operate, maintain, secure, and improve the Services;
• create and authenticate your account and keep you signed in;
• process payments, manage subscriptions, and meter AI usage;
• respond to your requests and provide customer support;
• send you service and administrative messages, and — where permitted — product updates and marketing (which you can opt out of);
• deliver the alert emails you configure to the recipients you designate;
• monitor for, prevent, investigate, and address fraud, abuse, security incidents, and violations of our Terms; and
• comply with our legal obligations and enforce our agreements.

5. AI processing

The Services use machine-learning models to analyze emails and to power features such as chat, drafting, and benchmarking. To do this, we send the relevant content — for example, the (redacted) marketing-email content and the prompts you enter — to third-party AI providers that act as our service providers (currently Anthropic and OpenAI, accessed through the Vercel AI Gateway). These providers process the content only to return a result to us (inference). We do not use your content or prompts to train models, and we send them to these providers to generate results for us — not to train their models.

6. How we share personal information

We do not sell your personal information. We share it only as described here:

Service providers (subprocessors). We share personal information with vendors that host and run the Services on our behalf, under contracts that require them to protect it. Not every provider below receives personal information — some (for example, our keyword-data and logo providers) receive only non-personal data such as brand domains or search terms. Our current subprocessors include:

Legal and safety. We may disclose personal information to comply with applicable law, regulation, legal process, or a lawful government request, or where we believe it is necessary to protect the rights, property, or safety of Altquid, our users, or others.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will require the recipient to honor this Privacy Policy or notify you before your information becomes subject to a different policy.

7. Retention

We retain personal information for as long as your account is active and for a reasonable period afterward, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements. We delete it upon a verified deletion request or when we no longer have a business or legal need to keep it. You may request deletion of your account and associated personal information by contacting us at support@happycohort.com (see Section 8).

8. Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• to access or receive a copy of it;
• to correct inaccurate information;
• to delete it;
• to port it to another provider;
• to object to or restrict certain processing; and
• to withdraw consent where processing is based on consent.

Where available, you can update your account information in the Services. To exercise any of the rights above, email us at support@happycohort.com. We may need to verify your identity before acting on a request, and we will not discriminate against you for exercising your rights. You can opt out of marketing emails at any time using the unsubscribe link in those emails; you may still receive service-related messages.

9. Security

We take reasonable measures to protect personal information. These include storing passwords only as salted cryptographic hashes, encrypting data in transit, encrypting stored raw email content at rest, verifying the authenticity of payment-processor notifications, validating and restricting outbound requests to reduce server-side request forgery, and redacting seed-identity information before email content is stored or displayed. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If you believe your account or our systems may have been compromised, contact us immediately at support@happycohort.com.

10. International data transfers

We are based in the United States and operate the Services there. If you access the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States and potentially other countries where we or our service providers operate. These countries may have data-protection laws that differ from those in your country. Where required, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) for such transfers.

11. Additional information for the European Economic Area and United Kingdom

If you are in the EEA or the UK, Altquid is the controller of your personal information, and we process it on the following legal bases: to perform our contract with you (to provide the Services); to pursue our legitimate interests (such as securing, operating, and improving the Services, and preventing fraud), where those interests are not overridden by your rights; to comply with our legal obligations; and with your consent where required (for example, for certain marketing). You have the rights described in Section 8, and you may lodge a complaint with your local data-protection authority.

12. Additional information for California residents

If you are a California resident, the California Consumer Privacy Act (as amended) gives you the rights described in Section 8, including the right to know, delete, and correct your personal information, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes that would require an opt-out. We will not discriminate against you for exercising your rights. To submit a request, email support@happycohort.com; you may use an authorized agent, subject to our verifying the request.

13. Children

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16 (or the applicable age of digital consent in your jurisdiction). If you believe a child has provided us with personal information, contact us at support@happycohort.com and we will delete it.

14. Third-party sites

The Services may link to websites and services we do not operate. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you and we will update the "Last updated" date above. Your continued use of the Services after the changes take effect constitutes your acceptance of the updated policy.

16. Contact us

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at:

Altquid, Inc.

Email: support@happycohort.com