Privacy Policy

What Olowl does

Olowl is a compliance review service for supplement and CPG brands. You submit a product label and marketing materials, we run an automated FDA/FTC compliance screen, and a human reviewer sends back an audit report.

What we collect

When you submit a product for review, we collect:

• Your name and email address
• The product name, your label file, and any marketing copy you provide
• Your product website URL and social handles, if you provide them

We don't require an account, and we don't collect payment information — this service doesn't process payments.

How your submission is used

• Your label and marketing copy are sent to Anthropic's Claude API to run the compliance scan. Your name, email, and other identifying details are stripped out before this step — the model sees your product content, not who submitted it.
• Your submission is stored in a private Google Sheet and Google Drive folder that only we can access.
• Once the automated screen is complete, a human reviewer is notified and given access to a sanitized version of your submission — never your name or email — to complete the review.
• Your email address is used to send you status updates and your final report, via Resend.

Your reference number and status

Every submission gets a reference number you can use to check its status without creating an account or logging in.

Bot protection and rate limiting

We use Cloudflare Turnstile to verify submissions come from a real person, not an automated script. Turnstile may process your IP address as part of that check, under Cloudflare's own privacy policy. We also limit how many submissions and status checks can come from the same IP address in a given time window, to keep the service available for everyone.

What we don't do

• We don't sell your data or your submission to anyone.
• We don't use your submission to train AI models.
• We don't add you to a mailing list beyond communications about your own submission.

How long we keep your data

We keep submission records and files for as long as needed to deliver your review and respond to any follow-up questions. If you'd like your data deleted, contact us using the address below.

Children

This service isn't directed at children under 13, and we don't knowingly collect information from them.

Changes to this policy

If this policy changes, we'll update this page and the date above.

Contact

Questions about this policy or your data? Email support@olowl.com.