Privacy Notice

Last updated: 6/17/2026

TLAC NOW L.L.C. ("we", "us") operates the H.U.S.T.L.E. application and is the data controller of personal information processed through the Service.

1. Information We Collect

• Account data — email address, password hash, account preferences.
• Profile data — age range, experience, focus area you provide during onboarding.
• Conversation data — messages, prompts, and responses generated through chat, Playbook, Leverage Lens, Breakdown, Energy Check, and Respect Meter features.
• Usage data — daily message counts, feature usage, login timestamps.
• Device & technical data — IP address, browser type, device identifiers, cookies.
• Support communications — content of any messages you send us.

Payment card and billing data is collected and processed directly by Paddle, our Merchant of Record, not by us.

2. Why We Use It (Purposes & Legal Basis)

• Provide the Service — account creation, authentication, generating AI responses (legal basis: contract performance).
• Security & fraud prevention — detecting abuse, enforcing acceptable use (legal basis: legitimate interests).
• Service improvement — analyzing usage patterns and prompt quality (legal basis: legitimate interests).
• Customer support — responding to inquiries (legal basis: contract or legitimate interests).
• Marketing — only with your consent or where permitted by law.
• Legal compliance — when required by applicable law.

3. How We Share Data

• Service providers / subprocessors — hosting, database, analytics, and AI model providers that process data on our behalf under written contracts.
• Merchant of Record — Paddle.com handles the sale of subscriptions, payment processing, subscription management, tax compliance, invoicing, and customer service for billing matters.
• Professional advisers — legal, accounting, where necessary.
• Authorities — where required by law or to protect rights and safety.

We do not sell your personal information.

4. Data Retention

We keep account and conversation data for as long as your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes. You may request deletion at any time.

5. International Transfers

Data may be processed in jurisdictions outside your home country. Where required, we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. Residents of the UK/EEA also have the right to lodge a complaint with a supervisory authority. We aim to respond to verified requests within one month.

7. Security

We use appropriate technical and organisational measures (encryption in transit, access controls, audit logging) to protect your data. No system is perfectly secure.

8. Cookies

We use essential cookies for authentication and session management. We may use limited analytics cookies to improve the Service. You can manage cookie preferences through your browser.

9. Children

The Service is not directed to anyone under 18.

10. Changes

We may update this notice. Material changes will be communicated through the Service.

11. Contact

Privacy requests can be submitted through the in-app support channel.