Privacy Policy

Last Updated: February 18, 2026

1. Overview

At Holly, we value your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and safeguard your information when you use our platform to automate lead responses.

2. Data Accessed

We access information that you provide directly to us and data from connected third-party services. Specifically, when you authorize Holly via Google OAuth, we access:

  • Google Account Information: Your primary email address to identify your account and send notifications.
  • Google Sheets Data: Read and write access to your spreadsheets to extract lead data and update statuses as configured in your workflows.

3. Data Usage

We use the Google user data we access to:

  • Execute automated workflows that you have configured.
  • Process and monitor spreadsheet updates to trigger lead alerts.
  • Improve the accuracy and performance of our automation engine.
  • Send you technical notifications related to your active automations.

4. Data Sharing

Holly does not sell your Google user data. We only share information with third-party service providers to the extent necessary to provide our services:

  • Supabase: For secure storage of your workflow configurations and encrypted credentials.
  • Stripe: For processing subscription payments (no Google user data is shared with Stripe).

Any third party with whom we share data is bound by confidentiality and security obligations consistent with this policy.

5. Data Storage & Protection

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit using TLS and at rest using industry-standard AES-256 encryption.
  • Secure Infrastructure: Our services are hosted on Supabase, which maintains rigorous security certifications.
  • Access Control: Limited access to production data is restricted to authorized personnel only.

6. Data Retention & Deletion

We retain your data only for as long as your Holly account is active or as needed to provide you with our services.

  • User-Initiated Deletion: You can delete your account and all associated data at any time through the "Settings" section of your dashboard.
  • Requesting Deletion: You may also request the deletion of your data by contacting us at hello@hollyplatform.com. Upon request, we will delete your personal information from our active databases within 30 days.

7. Google API Disclosure

Holly's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@hollyplatform.com.