Privacy Policy

1. Introduction

Silver Owl Holdings LLC ("Silver Owl," "we," "us," or "our") operates Mahon CRM ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service. By using the Service, you consent to the practices described here.

2. Information We Collect

2a. Account Information (Clerk)

We use Clerk to manage authentication. When you create an account, Clerk collects your name, email address, and password hash. We receive from Clerk your user ID, email, and profile metadata necessary to operate your account. Clerk's privacy practices are governed by the Clerk Privacy Policy.

2b. CRM Data (Supabase)

Contacts, companies, deals, activities, pipelines, notes, and all other CRM records you create are stored in our Supabase-hosted PostgreSQL database. This data is associated with your account and used solely to deliver the Service.

2c. Payment Information (Stripe)

Billing is handled by Stripe. We do not store your payment card details on our servers. Stripe collects and processes payment information directly. Your billing history and subscription status are stored in Stripe and partially mirrored in our database for subscription management. Stripe's privacy practices are governed by the Stripe Privacy Policy.

2d. Usage Data

We collect information about how you interact with the Service, including pages visited, features used, API calls, error logs, and performance metrics. This data is used to improve the Service and diagnose issues.

2e. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember preferences, and analyze usage. See our Cookie Policy for details.

3. How We Use Your Information

We use your information to:

• Create and manage your account and subscription.
• Deliver, operate, and improve the Service.
• Process payments and send transactional emails.
• Respond to support requests and communicate about your account.
• Detect, investigate, and prevent fraudulent or unauthorized activity.
• Comply with legal obligations.
• Send product updates and marketing communications (you may opt out at any time).

4. Information Sharing

We do not sell your personal information. We share your data only in the following circumstances:

• Service Providers: Third-party vendors who process data on our behalf (e.g., Clerk, Supabase, Stripe, Resend for email, Vercel for hosting, Notion for integrations). These parties are contractually obligated to protect your data.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
• With Your Consent: When you explicitly authorize us to share your data with a third party (e.g., Notion integration).

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your personal data within ninety (90) days, except where we are required to retain it for legal, compliance, or legitimate business purposes.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security in our database, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent where processing is based on consent.

To exercise these rights, email legal@silverowl.dev. We will respond within thirty (30) days.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.

9. International Transfers

Your data may be stored or processed in countries other than your country of residence, including the United States. By using the Service, you consent to the transfer of your data to countries that may have different data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective Date" above and, where required, by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, contact us at legal@silverowl.dev.