Privacy Policy

Oh Wow Studio ("we," "us," or "our") operates Fast Business ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Personal Information

When you create an account, we collect:

• Email address (required for authentication)
• Full name (optional)
• Username (optional)
• Profile avatar (optional, max 2MB)
• Google account information (if you sign in with Google)

Business Information

When you use the Service, we collect and store:

• Business idea descriptions and project data
• Problem statements and target customer segments
• Solution descriptions and revenue model details
• Business model canvas content (9 sections)
• Key assumptions and risk assessments
• Roadmap phases, tasks, and progress
• Task notes and history

AI Interaction Data

• Chat conversation history with our AI assistant
• Analysis queries and results
• Suggested changes and applied modifications
• Question/answer workflows

Usage and Financial Data

• AI credit balance and transaction history
• Subscription status and plan information
• Feature usage patterns
• Timestamps (creation, updates, last access)

Technical Data

• Session cookies for authentication
• Browser type and version
• IP address (for security purposes)

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Generate AI-powered business strategies, canvases, and roadmaps
• Process AI requests: Send your business data to our AI provider for generation and analysis
• Manage your account: Authenticate you and manage your subscription
• Process payments: Work with our payment processor to handle subscriptions and purchases
• Provide support: Respond to your inquiries and resolve issues
• Improve the Service: Analyze usage patterns to enhance features
• Ensure security: Detect and prevent fraud or unauthorized access
• Communicate: Send service-related notifications (not marketing without consent)

3. How We Share Your Information

We share your information with the following third-party service providers:

We may also disclose your information:

• To comply with legal obligations or valid legal requests
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

4. Data Security

We implement appropriate security measures to protect your information:

• Row-Level Security (RLS): Database policies ensure users can only access their own data
• Encrypted connections: All data is transmitted over HTTPS
• Secure authentication: Session-based authentication with secure cookies
• Webhook verification: HMAC signature verification for payment webhooks
• No credit card storage: Payment information is handled by LemonSqueezy (PCI DSS compliant)

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• Projects and content: Retained until you delete them or your account
• Chat conversations: Retained until you delete the associated project or account
• Credit transactions: Retained permanently for auditing purposes
• Account data: Deleted within 30 days of account deletion request

When you delete a project, all associated conversations and messages are automatically deleted through cascade deletion.

6. Your Rights

You have the right to:

• Access: View all your data through the Service dashboard
• Correction: Update your profile information at any time
• Deletion: Delete individual projects or your entire account
• Data portability: Export your project data (contact support)
• Withdraw consent: Stop using the Service at any time

To exercise these rights, contact us at support@ohwow.fun or use the account settings in the Service.

7. Cookies

We use only essential cookies necessary for the Service to function:

• Authentication cookies: To keep you logged in securely
• Session cookies: To maintain your session state

We do not use third-party advertising or tracking cookies.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

9. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers are located. These countries may have different data protection laws than your country of residence. By using the Service, you consent to the transfer of your information to these countries.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. We encourage you to review this policy periodically.

11. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information we collect and how we use it
• Right to request deletion of your personal information
• Right to non-discrimination for exercising your privacy rights

We do not sell personal information to third parties.