Prowlit

Privacy Policy

Last updated: May 2, 2026

What Prowlit is

Prowlit is a SaaS platform that monitors Reddit and X (Twitter) for buyer-intent posts and brand mentions, classifies them with AI, and helps you draft human-like replies. It also surfaces Reddit content that ranks in Google search results for your brand terms. We process publicly available content on your behalf — we never post to any platform automatically.

Information we collect

We collect only what is necessary to operate the service:

  • Account data — your email address, used for authentication via magic link.
  • Project configuration — company name, website, keywords, subreddits, competitors, and X keywords you configure inside the product.
  • Reddit content — publicly available Reddit posts and comments matching your keywords, fetched via the Reddit API and stored to power your lead and mention inboxes.
  • X (Twitter) content — publicly available tweets and mentions matching your keywords, fetched via the X API. If you connect your X account via OAuth, we also store your access and refresh tokens to enable reading your timeline and posting replies on your behalf when you explicitly request it.
  • Google search data — search result snippets from Google (via SerpAPI) used to surface Reddit content that ranks for your brand terms.
  • Generated content — AI-drafted reply suggestions created on your behalf, stored per lead so you can edit and send them yourself.
  • Usage data — product activity (e.g. which leads you marked as replied) to maintain state across sessions.

How we use your information

  • Authenticate your account and maintain your session.
  • Monitor Reddit, X, and Google for content matching your project settings.
  • Generate AI reply suggestions when you request them.
  • Send email notifications about new leads or mentions (if enabled).
  • Operate and improve the service.

We do not use your data for advertising. We do not sell your data to third parties.

Third-party services

Prowlit uses the following sub-processors to deliver the service:

  • Supabase — database, authentication, and file storage.
  • OpenAI — AI classification of posts and generation of reply drafts. Content and your project context are sent to OpenAI for this purpose.
  • Reddit API / Apify — fetching publicly available Reddit posts and comments.
  • X (Twitter) API — fetching tweets and posting replies when you connect your X account.
  • SerpAPI — querying Google search results to surface Reddit content ranking for your brand terms.
  • Inngest — background job orchestration (scheduling scrapes, sending notifications).
  • Resend — transactional email delivery for account and notification emails.
  • Paddle — subscription billing and payment processing.

Each sub-processor is bound by its own data processing terms. We do not share your personal account data with them beyond what is technically required.

Cookies and local storage

Prowlit uses cookies and browser storage strictly for authentication (session tokens) and product functionality (e.g. remembering your active project). We do not use third-party tracking cookies or behavioral analytics cookies.

Data retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Backups may persist for up to 30 days after deletion.

Your rights

Regardless of where you are located, you can:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and data.
  • Export your project configuration and leads data.

To exercise any of these rights, contact us at the address below.

Security

All data is encrypted in transit (TLS) and at rest. Access to production data is restricted via Supabase Row-Level Security — each account can only read its own data.

Changes to this policy

We may update this policy when the service changes materially. If we do, we will update the date at the top of this page. Continued use of the service after a change constitutes acceptance of the updated policy.

Contact

For privacy questions or data requests, email fedebicasua@gmail.com.