Privacy Policy

Last updated September 5, 2026

EraHQ respects your privacy. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your personal information.

1. Who We Are

EraHQ is operated by EraHQ, located in Bolton, MA. For questions about this policy, contact us at hello@erahq.app.

2. What Data We Collect

Account information: When you create an account, we collect your email address, first name, and password (hashed, never stored in plain text). If you sign up with Google, we receive your name and email from Google's OAuth service.

Onboarding data: Your selected era, your answers to the three onboarding questions (priorities, schedule preference, structure preference).

App usage data: Journal entries, habit completions, routine configurations, weekly reset reflections, intention text, style board uploads, sticker placements, era switch history.

Payment data: When you purchase EraHQ, your payment is processed by Stripe. We receive a confirmation of payment, your email, and a Stripe customer ID. We do not receive or store your credit card number, expiration date, or CVV. That data is handled entirely by Stripe.

Technical data: IP address, browser type, device type, operating system, and general location (country/region level, not precise). This data is collected automatically by our hosting provider (Vercel) and is used for security and performance purposes.

Cookies: EraHQ uses essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies. We do not run Google Analytics or any third-party analytics tools that track individual users across sites.

3. How We Use Your Data

We use your data to:

We do not use your data for advertising. We do not sell your data. We do not share your data with data brokers or marketing platforms.

4. AI Data Processing

If you enable personalized AI prompts in Settings (off by default), your journal entries are sent to Anthropic's Claude API to generate more relevant prompts and reflections.

What this means: your journal text is sent as part of an API request to Anthropic. Anthropic processes the text to generate a response and does not store the content beyond the duration of the request, in accordance with Anthropic's data usage policies.

You can turn this off at any time in Settings. When off, EraHQ uses a curated library of prompts and affirmations that require no data to be sent externally.

5. Where Your Data Is Stored

Your account and app data is stored in a Supabase database. Supabase uses cloud infrastructure hosted in the United States (via AWS). Your data is encrypted at rest and in transit.

Your uploaded images (style board) are stored in Supabase Storage or a similar cloud storage service with encryption.

The EraHQ web application is hosted on Vercel, which uses a global CDN with edge servers. No user data is cached at the edge; all data requests go to the Supabase backend.

6. Who Has Access to Your Data

We do not share your data with anyone else.

7. Data Retention

Your data is retained for as long as your account is active. If your access expires and you do not renew within 30 days, your account data is retained for an additional 60 days (90 days total after expiration) before being permanently deleted.

You can request deletion of your account and all associated data at any time by contacting hello@erahq.app. We will process deletion requests within 30 days.

8. Your Rights

Depending on where you live, you may have the following rights:

California residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion of your data, opt out of the sale of your data (we do not sell data), and not be discriminated against for exercising your rights.

EU/EEA residents (GDPR): You have the right to access, correct, delete, or port your data. You have the right to withdraw consent for data processing at any time. You have the right to lodge a complaint with your local data protection authority.

All users: You can request a copy of your data or request deletion by contacting hello@erahq.app.

9. Children's Privacy

EraHQ is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at hello@erahq.app and we will delete the account.

10. Global Privacy Control (GPC)

EraHQ honors Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat it as a valid opt-out request in accordance with applicable state laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the app. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at hello@erahq.app.