Privacy policy

Last updated: August 2, 2026

This policy explains what personal data Honeyloom collects, why, and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

Brennan — mastercrunch1103@gmail.com — see legal notice for full contact details.

2. Data collected

  • User account: email address, password (encrypted, never stored in plain text).
  • Analyzed listing content: title, description, tags, and product photo if you provide one.
  • Subscription data: chosen plan, payment status (card data never passes through our servers — it is processed directly by Stripe).
  • Technical data: session cookies required for authentication.

3. Purposes of processing

  • Provide the analysis and optimized content generation service.
  • Manage your account, free analysis quota, and subscription.
  • Provide customer support when needed.

4. Data recipients

Your data is shared only with subprocessors necessary to operate the service:

  • Supabase (database hosting and authentication, servers located in the European Union).
  • Anthropic (provider of the Claude AI model, used to analyze your listing content and generate results). Your listing content (text and optional photo) is sent to Anthropic only for the duration of processing your request.
  • Stripe (payment and billing processing).
  • Netlify (site hosting).

No data is sold to third parties.

5. Retention period

Your account data and analysis history are kept while your account is active. You may request deletion at any time (see section 7).

6. Security

Passwords are encrypted. Database access is protected and restricted by row-level security rules (each user can access only their own data).

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. To exercise these rights, contact mastercrunch1103@gmail.com. You may also file a complaint with the CNIL (cnil.fr).

8. Cookies

The site uses only cookies strictly necessary for the service to function (maintaining your login session). No advertising or tracking cookies are used.