Privacy Policy
WinterHowl Studios Ltd. (“WinterHowl”, “we”, “us”) operates winterhowl.com and related account and product services, including WinterHowl: Shift. This policy describes how we collect, use, and protect personal information when you use our websites and services.
Who we are
WinterHowl Studios Ltd. is based in Edmonton, Alberta, Canada. For privacy questions, contact us through the contact form at winterhowl.com.
Information we collect
- Account information — name, email address, password (stored hashed), and security settings such as two-factor authentication when you create a WinterHowl account.
- Organization and billing — workplace or organization names, membership roles, and subscription or payment-related identifiers processed through our payment provider (Stripe).
- Product usage — scheduling data, compliance flags, audit logs, and similar information you enter or generate in Shift or other WinterHowl products.
- Contact form — information you submit when you contact us (name, email, message, and related metadata).
- Technical data — IP address, browser type, and similar logs needed for security, fraud prevention, and service operation.
How we use information
We use personal information to:
- Provide, secure, and improve our services;
- Authenticate users and manage accounts across WinterHowl products;
- Process subscriptions and communicate about billing;
- Respond to support requests and contact form submissions;
- Meet legal obligations and protect our rights and users.
Our commitments
WinterHowl operates under clear product standards, including: no advertising in our products; no generative AI in the software we deliver, product features, or creative assets such as art and music (while we may use AI-assisted tools in our own development workflow); ethical and transparent pricing; a permanent commitment not to sell personal information or customer content, and ongoing efforts to maintain security and privacy. See winterhowl.com — How we build products for a plain-language summary.
Sharing and sale of data
We do not sell your personal information. We share data with service providers who help us operate our services (for example hosting, email delivery, and payment processing), only as needed for those purposes and under appropriate safeguards. Payment card details are handled by Stripe, not stored directly on our servers.
Retention
We keep information for as long as your account is active or as needed to provide services, comply with law, resolve disputes, and enforce our agreements. You may request deletion subject to legal and operational requirements.
Your rights
Depending on where you live, you may have rights to access, correct, or delete personal information, or to object to certain processing. Canadian users may have rights under applicable privacy laws, including PIPEDA. Contact us to make a request; we will respond within a reasonable time.
Security
We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure.
Children
Our services are intended for business use and are not directed at children under 16.
Changes
We may update this policy from time to time. We will post the revised version on this page with an updated date. Continued use of our services after changes take effect constitutes acceptance of the updated policy.