Privacy Policy — HowHaveWeDone

We believe privacy policies should be readable. This one explains exactly what data we collect, why we collect it, how we use it, and what we will never do with it — in plain English.

1. Who This Policy Applies To

This Privacy Policy applies to individuals and businesses ("you") who use the HowHaveWeDone platform operated by Alchemy Digital Media Real Estate Photography and Videography, LLC at howhavewedone.net and photographer.howhavewedone.net.

This policy is written for users based in the United States.

2. What Information We Collect

We collect two types of information: information you give us directly, and information generated by your use of the platform.

Data	Why we collect it	How long we keep it
Your name and business name	To personalise your account and the emails sent on your behalf	For the life of your account
Your email address	To log you in, send account notifications, and service communications	For the life of your account
Your SMTP credentials	To send follow-up emails from your own email address	For the life of your account; deleted on request
Agent contact details you enter	To enable follow-up emails, feedback collection, and nurture sequences	For the life of your account; deleted when you delete them
Shoot records and feedback data	To power your pipeline dashboard and reporting	For the life of your account
Usage data (pages visited, actions taken)	To improve the platform and diagnose technical issues	Up to 90 days

3. What We Do Not Collect

We will never:

Store your payment card details. Payments are processed exclusively by Stripe, which handles all card data directly.
Collect data from agents who click your feedback links beyond what they voluntarily submit in the feedback form.
Use tracking pixels, fingerprinting, or behavioural advertising tools.
Collect sensitive personal information such as Social Security numbers, government IDs, or health data.

4. How We Use Your Information

We use the information we collect solely to:

Provide, operate, and improve the HowHaveWeDone platform.
Authenticate you and secure your account.
Send follow-up emails and nurture sequences on your behalf, using your own SMTP credentials.
Generate AI-written email content personalised to your agents and shoots.
Send you transactional emails related to your account (e.g. password resets, billing notices when applicable).
Respond to support requests you send us.

5. We Will Never Sell Your Data

We do not sell, rent, trade, or otherwise transfer your personal information or your agents' information to any third party for marketing, advertising, or commercial purposes. Ever. This is a core principle of how we operate and will never change.

6. Who We Share Data With

We share data only with the third-party services that are essential to running the platform. In each case, data is shared only to the minimum extent necessary:

Supabase — our database and authentication provider, which stores your account and platform data securely.
Anthropic — the AI provider whose technology generates email content. Agent and shoot data is sent to generate email copy. Anthropic does not store this data for model training on our plan.
Stripe — our payment processor (when payments are introduced). We never see or store your card details; Stripe handles this directly.
Your chosen SMTP provider — emails are sent through your own email credentials. We pass your message through your server; your provider may log this as normal email activity.

We do not share your data with any other parties.

7. Google Reviews

When an agent submits a 4 or 5 star rating, they are shown a button that links to your Google Business review page. This is simply a hyperlink — no data about the agent is sent to Google by us. Any interaction the agent has with Google after clicking that link is governed by Google's own privacy policy.

8. Data Security

We take reasonable technical and organisational measures to protect your data, including:

All data transmitted to and from the platform is encrypted using HTTPS/TLS.
Database access is protected by Supabase's Row Level Security, meaning each account can only access its own data.
Authentication is handled securely via Supabase Auth with industry-standard session management.
SMTP credentials are stored in your account and used only to send your authorised emails.

No system is 100% secure. If you believe your account has been compromised, please contact us immediately at Info@HowHaveWeDone.net.

9. Your Rights

You have the following rights regarding your personal data:

Access: You can request a copy of the personal data we hold about you.
Correction: You can update your account information at any time from within the platform.
Deletion: You can request that we delete your account and all associated data. We will action this within 30 days.
Portability: You can request an export of your data in a common machine-readable format.

To exercise any of these rights, contact us at Info@HowHaveWeDone.net.

10. Cookies

HowHaveWeDone uses only essential cookies — specifically the session cookie that keeps you logged in to the platform. We do not use advertising cookies, tracking cookies, or any third-party analytics cookies.

11. Children's Privacy

HowHaveWeDone is a business-to-business platform intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has registered an account, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes, we will notify registered users by email. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

Privacy questions or requests?

Info@HowHaveWeDone.net

Alchemy Digital Media Real Estate Photography and Videography, LLC · Florida, USA