Privacy Policy

1. Introduction

The Wolf ("Company," "we," "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. By using The Wolf ("Service"), you agree to the practices described here.

2. Information We Collect

Account information

When you sign up, we collect your name, email address, and password (stored as a hash - we never store plaintext passwords). We also record whether you accepted our Terms of Service and opted into marketing communications, along with the timestamps of those actions.

Deal data

When you submit a deal for diagnosis, we collect the information you provide - company names, deal details, stakeholder information, problem descriptions, and any other context you enter. We also store the AI-generated outputs (diagnoses, rescue plans, scripts, and coaching feedback) produced for you.

CRM data

If you connect a CRM integration (e.g., HubSpot, Salesforce, or other supported providers), we access deal data via OAuth solely to pre-fill your intake form. We do not bulk-export your CRM database or access data beyond what is needed for that purpose.

Payment information

Payments are processed by Stripe. We do not store your credit card number, CVV, or full card details on our servers. Stripe provides us with limited billing metadata (last four digits, expiration date, billing address) for display in your account.

Usage data

We collect standard usage data including pages visited, features used, browser type, device type, and IP address. This data helps us understand how the Service is used and identify issues.

3. How We Use Your Information

We use your information to:

• Provide the Service - analyzing deals and generating diagnoses, plans, and scripts
• Maintain your account and deal history
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, password resets, billing receipts)
• Send marketing communications if you opted in (you can unsubscribe at any time)
• Monitor and improve the Service
• Detect and prevent fraud or abuse

We do not sell your personal data to third parties. We do not use your deal data for advertising or profiling.

4. AI Processing and Third-Party Services

Anthropic (Claude API)

Your deal data is sent to Anthropic's Claude API for analysis. Per Anthropic's API terms, data sent through their API is not used to train their models. We send only the information necessary to generate your diagnosis and rescue plan.

Supabase

We use Supabase for authentication and database hosting. Your account data and deal records are stored in Supabase-managed infrastructure.

Stripe

Stripe processes all payments. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

CRM providers (optional)

If you connect a CRM (e.g., HubSpot, Salesforce), we use their API via OAuth to read deal data you authorize. We do not write to or modify your CRM account. Each provider's handling of your data is governed by their own privacy policy.

5. Cookies

We use essential cookies to maintain your authentication session. We do not use third-party advertising or tracking cookies. If we introduce analytics in the future, we will update this policy and provide appropriate controls.

6. Data Retention

We retain your account and deal data for as long as your account is active. If you delete your account, we will permanently remove your personal data and deal records from our systems within 30 days, except where retention is required by law (e.g., billing records for tax purposes).

7. Data Security

We use industry-standard measures to protect your data, including encryption in transit (TLS), encrypted database storage, and access controls. However, no system is perfectly secure. If we become aware of a data breach affecting your personal information, we will notify you as required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for marketing communications
• Object to or restrict certain processing of your data

To exercise any of these rights, contact us at support@thewolf.ai. We will respond within 30 days.

9. Children's Privacy

The Service is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn that we have collected personal information from a child under 18, we will delete that data promptly.

10. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service. Your continued use after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at support@thewolf.ai.