HOWL is operated by ETG ("we", "us", "our"). Contact: privacy@howlapp.com.
We collect the following categories of data:
| Category | Examples | Purpose | Basis |
|---|---|---|---|
| Account data | Email, name, avatar | Authentication | Contract |
| Usage data | Clips generated, features used | Service delivery, billing | Contract |
| Device data | Browser, OS, screen size, timezone, language, IP address | Security, abuse prevention, analytics | Legitimate interest / Consent |
| Payment data | Handled entirely by Stripe — we never see card numbers | Billing | Contract |
| Content | Uploaded videos (processed then deleted within 24h) | Clip generation | Contract |
| Social platform data | Instagram/Facebook user ID, display name, access token (when you connect an account) | Posting clips to your social accounts on your behalf | Consent |
| Cookies | Session token, consent record | Authentication, preferences | Consent / Legitimate interest |
We do not sell your personal data to third parties. Ever.
Videos you upload are stored temporarily for processing only. Processed clips are stored in the location you configure. Raw uploaded files are automatically deleted within 24 hours of processing. We do not use your video content to train AI models.
When you choose to connect an Instagram or Facebook account, HOWL uses Meta's official OAuth flow to request your explicit authorization. We only request the permissions necessary to deliver the feature you signed up for.
Permissions we request and why:
What we store: We store your Instagram/Facebook user ID, display name, and a short-lived or long-lived access token (encrypted at rest) solely for the purpose of posting clips on your behalf. We do not store, read, or analyze your Instagram posts, followers, messages, or any other content beyond what is required to post the clip you explicitly select.
What we never do with Instagram data:
Revoking access: You can disconnect your Instagram account at any time from your HOWL account settings. This immediately invalidates our stored access token. You can also revoke HOWL's permissions directly in Instagram's App Settings or Facebook's App Settings.
Data deletion: To request complete deletion of all Instagram-related data we hold, email privacy@howlapp.com with the subject line "Instagram Data Deletion Request." We will delete all stored tokens and associated identifiers within 30 days and confirm by email. You may also use the Data Deletion page for an automated request.
We share data only with:
Depending on your location you may have the right to: access, correct, delete, or export your data; object to processing; withdraw consent. Email privacy@howlapp.com to exercise any right. We respond within 30 days.
To delete all data associated with your account (including any connected Instagram/Facebook data), you may:
We will confirm deletion within 30 days. Note that payment records required by law (7 years) and anonymised aggregate analytics data may be retained after account deletion.
Passwords are hashed with bcrypt. Social platform access tokens are encrypted at rest. Data in transit is encrypted via HTTPS. We conduct regular security reviews. No system is 100% secure — please use a strong unique password.
HOWL is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us immediately.
When you use HOWL to publish content to Instagram, Facebook, or other third-party platforms, your use of those platforms is governed by their own terms and privacy policies. HOWL is an independent service and is not affiliated with Meta Platforms, Inc. Instagram and Facebook are trademarks of Meta Platforms, Inc.
We may update this policy. Material changes are notified via email or in-app banner at least 7 days before taking effect.
Privacy questions: privacy@howlapp.com
Data deletion requests: privacy@howlapp.com or howlapp.com/data-deletion