Effective Date: June 1, 2025 - gethandled.net
When you register, we collect your email address through Clerk. If you use Google OAuth, we receive your name and email from Google. We do not store your password directly — authentication is managed by Clerk.
Handled extracts and stores profile information from your interactions to personalize your experience. This may include:
Profile data is used solely to improve the relevance of Platform Outputs. You can view, edit, or delete this information at any time through the Situation Room.
We store metadata about your interactions, including situation type, a brief summary of the initial issue, timestamps, session identifiers, resolution status, and recovered amounts if you choose to record them. We do not store full conversation transcripts — session content exists in memory only during the active session and is not persisted verbatim.
All payment processing is handled by Stripe. We do not store your full payment card details. We retain only Stripe customer identifiers, subscription status, plan type, and billing period dates.
Vercel, our hosting provider, automatically collects standard technical data including IP addresses, browser type, device type, page views, and performance metrics. This data is aggregated and not linked to individual users. We do not operate additional behavioral analytics tools.
Pro subscribers who use Handled's document upload feature may upload personal documents including but not limited to correspondence, financial records, medical records, and legal documents. These documents are stored securely in cloud storage and are accessible to the account holder. As the platform operator, Handled may access stored documents only as necessary to provide, maintain, or improve the service, to investigate potential violations of our Terms of Service, or as required by law. Uploaded documents and generated documents may be processed by Handled's AI service providers as described in the Third-Party Services section of this policy. Handled does not sell, share, or use uploaded document content for any purpose other than providing the requested service to the uploading user.
We use collected information to:
We do not sell your personal information. We do not use your personal information for targeted advertising. We do not use your data to train the Company's proprietary AI models without your express consent.
Your interaction content is transmitted to the following providers to generate Outputs:
Anthropic, Inc. — Claude Haiku processes your conversation content for Output generation. Governed by Anthropic's API Terms and Privacy Policy at anthropic.com.
OpenAI, LLC — gpt-4.1-mini processes elements of your situation context as part of the research pipeline. Governed by OpenAI's API Terms and Privacy Policy at openai.com.
By using the Platform, you acknowledge and consent to your interaction data being transmitted to these providers for the purpose of generating your requested Outputs.
Clerk, Inc. manages authentication and session management. Privacy Policy at clerk.com.
Stripe, Inc. processes all payments. Privacy Policy at stripe.com.
Vercel, Inc. hosts the Platform. Privacy Policy at vercel.com.
We may disclose your information if required to comply with a legal obligation, enforce our Terms, protect user safety, or respond to valid government requests.
In the event of a merger, acquisition, or sale of assets, your information may transfer to the successor entity. We will notify you if your information becomes subject to a materially different privacy policy as a result.
We do not sell, rent, or trade your personal information to third parties for commercial purposes.
We retain account and profile information for as long as your account is active. Interaction metadata is retained to support your Situation Room history.
When you delete a situation, it is removed from your visible history. Residual data may remain in backup systems for up to ninety (90) days before permanent deletion.
Account deletion requests are processed within thirty (30) days, except where retention is required by law or where data has already been transmitted to third-party providers subject to their own retention policies.
We implement industry-standard security measures including row-level security on all database tables, encrypted connections (TLS/HTTPS) for all data in transit, authenticated API access controls, and service role separation for administrative database access.
No method of electronic storage or transmission is completely secure. We cannot guarantee absolute security. In the event of a breach affecting your personal information, we will notify you as required by applicable law.
Depending on your jurisdiction, you may have the right to:
To exercise any right, contact us at support@gethandled.net. We will respond within the timeframe required by applicable law, typically thirty (30) days. Identity verification may be required.
California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, opt out of sale (we do not sell personal information), limit use of sensitive personal information, and non-discrimination for exercising privacy rights.
To submit a California privacy request, contact support@gethandled.net with subject line "California Privacy Request." We will respond within forty-five (45) days as required by law.
The Platform is operated in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States. By using the Platform, you consent to this transfer.
The Platform is not currently certified under the EU-U.S. Data Privacy Framework. Users located in jurisdictions requiring additional compliance frameworks use the Platform at their own discretion.
The Platform is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided information to us, contact support@gethandled.net and we will delete it promptly.
The Platform uses cookies and similar technologies for authentication, session management, and basic operational purposes. We do not use cookies for advertising or cross-site tracking. Disabling certain cookies may affect Platform functionality including your ability to remain logged in.
We may update this Privacy Policy from time to time. Material changes will be communicated via Platform notice and email to your registered address. Continued use following notice constitutes acceptance. If you do not agree to material changes, discontinue use of the Platform.
Questions, concerns, or requests regarding this Privacy Policy:
Handled · gethandled.net · support@gethandled.net