Privacy Policy

Hilaros (“we”, “our”, “us”) operates the website hilarosecho.com and the Hilaros email subscription service. This policy explains what personal information we collect, how we use it, and what rights you have over it.

We keep this simple: we collect the minimum information necessary to deliver daily Bible verses to your inbox. We do not sell your data. We do not show you ads.

• Deliver your selected Bible verse(s) each morning.
• Send transactional emails: account confirmation, subscription changes, billing receipts.
• Respond to your support requests.
• Improve the service — understanding which topics are most used, diagnosing delivery failures.

We will never use your email for marketing unrelated to Hilaros, sell it to third parties, or share it with advertisers.

Hilaros uses the following services to operate. Each has its own privacy policy:

• Clerk — authentication (clerk.com/privacy)
• Stripe — payments (stripe.com/privacy)
• Resend — email delivery (resend.com/privacy)
• Supabase — database hosting (supabase.com/privacy)
• Vercel — website hosting (vercel.com/legal/privacy-policy)

These services are bound by data processing agreements and may not use your data for their own purposes.

By creating an account and subscribing to a topic, you consent to receive daily emails from Hilaros at the email address you provide.

You can unsubscribe at any time by:

• Clicking the “Unsubscribe” link in any email we send.
• Deleting your subscription in your dashboard.
• Deleting your account entirely (see below).

After unsubscribing, you will receive no further daily verse emails. You may still receive essential account emails (e.g., billing receipts) until your account is deleted.

• Your account data is retained while your account is active.
• If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain billing records (typically 7 years for tax purposes — stored in Stripe, not our database).
• Email delivery logs are retained for 90 days.

Depending on where you live, you may have rights including:

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request deletion of your account and associated data. You can do this yourself in your dashboard under Settings → Delete Account.
• Portability — request your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email us at support@hilarosecho.com. We will respond within 30 days.

Hilaros is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

We use industry-standard security practices: HTTPS everywhere, encrypted database connections, Stripe for payment processing (we never touch card data), and Clerk for authentication. No system is perfectly secure, but we take reasonable precautions.

If we make material changes, we will notify you by email at least 14 days before the changes take effect. The “Last updated” date at the top of this page will always reflect the current version.

Questions about this policy? Email us: support@hilarosecho.com