Privacy Policy

1. Information We Collect

• Account information: Email address and authentication credentials, managed via Supabase Auth.
• Session data: Session metadata including mode (guidance or confession), priest persona selected, session duration, and credit usage. We do not store audio recordings of your sessions.
• Transcripts: Real-time transcription is used during sessions for safety monitoring purposes. Transcripts are not routinely reviewed. They may be reviewed if automated systems detect potential safety concerns, abuse, or violations of our Terms.
• Payment information: Processed entirely by Stripe. HolyLine does not store payment card numbers, expiry dates, or CVV data. We retain only transaction identifiers and amounts for our records.
• Usage data: Standard server logs, error logs, and analytics used to operate and improve the service.

2. How We Use Your Information

• To provide, operate, and improve the HolyLine service.
• To process payments and manage your session credit balance.
• To enforce our Terms of Use, including safety and abuse monitoring.
• To communicate service updates, changes, or support responses.

3. We Do Not Sell Your Data

HolyLine does not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Third-Party Services

HolyLine uses the following third-party services to operate the platform. Each processes data under their own privacy policies:

• Supabase — authentication, database, and session storage.
• OpenAI— AI model powering sessions. Your voice audio and session transcripts are processed by OpenAI to generate responses. This data is subject to OpenAI's Privacy Policy and API Terms.
• Stripe — payment processing. Payment card data is handled entirely by Stripe and is not accessible to HolyLine.
• Hosting and infrastructure providers — may process data incidentally as part of operating and delivering the service.

5. Data Retention

• Account information: Retained for the life of your account. Deleted within 30 days of a confirmed account deletion request submitted to admin@holyline.org.
• Session metadata: Retained for 12 months from the session date, then deleted.
• Session transcripts: Retained for 30 days for safety monitoring purposes, then automatically deleted. Audio recordings are not stored by HolyLine unless explicitly stated otherwise.
• Payment records: Retained for 7 years to comply with financial recordkeeping requirements. Payment data is held by Stripe; HolyLine retains only transaction identifiers and amounts.
• Server and error logs: Retained for 90 days, then deleted.

6. Your Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data we collect, request deletion of your data, and opt out of the sale of personal data (HolyLine does not sell personal data).

To exercise any of these rights, contact us at admin@holyline.org. We will respond within 45 days.

7. Changes to This Policy

HolyLine may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

8. Contact

Questions about this Privacy Policy? admin@holyline.org