Privacy Policy | Wizard of Covington

1. Information We Collect

When you use Wizard of Covington products and services, we may collect:

Email address (required for account creation and trials)
Name (if provided)
Website URL (for license activation)
Payment information (processed by Stripe — we do not store card details)
Usage data (plugin version, activation status)
IP address and browser information (for security and rate limiting)
Conversations with our assistant, including anything you tell it — what you need, and the name, email, phone or address you give when booking

About the assistant. Wizard of Covington's site has an AI assistant. What you type to it is saved so we can follow up and so we can see where it gave a poor answer. If you speak to it, the audio is never stored — only the text of what was said. Conversations are kept for 12 months and then deleted. You are talking to software, not a person; when you ask for a person, it will say so and put you in touch.

2. How We Use Your Information

To provide and maintain our products and services
To process payments and manage subscriptions
To send transactional emails (purchase confirmations, trial reminders, payment notices)
To prevent fraud and enforce our terms of service
To improve our products based on aggregate usage patterns
To answer your questions, book appointments, and pass on what you need so Corey can follow up

3. Third-Party Services

We use the following third-party services that may process your data:

Supabase: Database hosting and authentication
Stripe: Payment processing
SendGrid: Transactional email delivery
Cloudflare: CDN, DNS, and file storage (R2)
DigitalOcean: Server hosting
Google Analytics: Website analytics
Anthropic: The AI model behind our assistant. Your messages are sent to Anthropic to generate a reply; they are not used to train their models.
ElevenLabs: The assistant's voice, when it speaks. Only text the assistant has already written is sent, so that it can be read aloud.
OpenAI: Speech recognition, if you choose to talk to the assistant rather than type. Your recording is sent to OpenAI's Whisper service, converted to text, and discarded.

We do not store voice recordings. If you speak to the assistant, the audio is held in your browser only until it is transcribed, and is not written to our servers, our database, or any backup. The resulting text becomes part of the conversation and is kept on the same terms as anything you type.

4. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days. Anonymized usage data may be retained for analytics purposes.

Assistant conversations are kept for 12 months and then deleted. Voice audio is never stored at all. Appointments and the details you gave to book them are kept as business records.

5. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to processing of your data
Export your data in a portable format

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL), secure authentication, rate limiting, and regular security monitoring. However, no method of transmission over the internet is 100% secure.

7. We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties.

8. Contact

For privacy-related requests or questions, contact us at [email protected].