Privacy Policy

Last updated: 24 August 2026

This Privacy Policy explains how Howseen AI ("Howseen", "we", "us") collects, uses, and protects your information when you use our website and application at howseen.ai and app.howseen.ai (the "Service").

Who we are

The Service is operated by Raphaël Aubry, sole trader (entrepreneur individuel / micro-entreprise) registered in France under SIREN 102456951 (APE 70.22Z), with registered address 128 rue La Boétie, 75008 Paris, France. For any privacy question or request, contact us at raphael@orayasystem.fr.

Information we collect

Account data — your email address and a securely hashed password (or a Google sign-in identifier).
Onboarding data — the domain you track, your competitors, tracked prompts, and optional survey answers (how you found us, your role, your intended use).
Google data (with your explicit consent) — read-only access to your Google Search Console and Google Analytics 4 metrics, connected through Google OAuth.
Usage data — basic logs and analytics needed to operate and secure the Service.
Payment data — subscriptions are processed by Stripe. We do not store your card details; Stripe processes them under its own privacy policy.

Google user data

Howseen's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect Google, we request read-only access to Google Search Console and Google Analytics 4 solely to display your own search and AI-driven traffic performance inside your dashboard. Specifically:

We use this data only to provide and improve the features you connected it for.
We do not sell Google user data, and do not use it for advertising.
We do not use Google user data to train generalized artificial-intelligence or machine-learning models.
We do not transfer Google user data to others except as necessary to provide the Service, to comply with applicable law, or with your consent.
Only you (and, where applicable, staff acting to operate or support the Service) can access the data you connect.

You can disconnect Google at any time from your dashboard, or revoke access via your Google Account permissions. Revoking removes our ability to read your Google data.

How we use your information

To create and manage your account and provide the Service.
To display your AI-visibility, search, and analytics metrics.
To generate and, at your request, publish content to your connected platforms.
To process subscriptions and send transactional emails (e.g., confirmation, billing).
To secure the Service, prevent abuse, and comply with our legal obligations.

Legal bases (GDPR)

We process your data to perform our contract with you (providing the Service), based on your consent (e.g., connecting Google), for our legitimate interests (security, product improvement), and to comply with legal obligations.

Service providers

We share data only with providers that help us run the Service, under appropriate safeguards: Supabase (database & authentication), Vercel (hosting), Stripe (payments), Brevo (transactional email), Cloudflare (security), Google (when you connect it), and AI providers used to generate content and analysis. We do not sell your personal data.

Security & storage

Data is stored on secure infrastructure with row-level access controls; sensitive tokens (including Google and CMS credentials) are encrypted at rest. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

Data retention

We keep your data for as long as your account is active and as needed to provide the Service, then delete or anonymize it, unless a longer period is required by law.

Your rights

Under the GDPR you may access, correct, delete, or export your data, object to or restrict processing, and withdraw consent. To exercise these rights, email raphael@orayasystem.fr. You may also lodge a complaint with the French data-protection authority (CNIL).

International transfers

Some providers may process data outside the European Economic Area. Where they do, appropriate safeguards (such as Standard Contractual Clauses) are in place.

Cookies

We use essential cookies to keep you signed in and to secure the Service. We do not use advertising cookies.

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Howseen AI · Raphaël Aubry (micro-entreprise), 128 rue La Boétie, 75008 Paris, France · raphael@orayasystem.fr · Terms of Service