Your data,
explained.
Last updated 19 October 2026
Holdrate is operated by Swift Ideas. This notice explains the data used to provide member-retention reports and weekly digests. Contact support about your data.
Information we use
When you sign in, Whop supplies your user identifier, name and, when available, verified email address. When you connect an account, we read its member identifiers, names, usernames, join dates, last content-access timestamps, membership states and plan prices. We store your account API key encrypted so we can refresh the report.
We also store manual return records, when you prepare outreach drafts, digest preferences and email-delivery records. Message drafts stay in your browser; their contents are not saved by Holdrate. We do not collect your Whop password or payment-card details.
How the information is used
We use account information to provide the service you request, verify access to paid features and keep the workspace secure. We use community data on the instructions of the creator who connects it, to organise an inactivity report and prepare the digests that creator enables. The creator is responsible for having authority to connect the account and for informing their members about this use.
Inactivity labels use the days since a member last opened Whop content, or the join date if they have never opened it. They help the creator decide who to contact. Holdrate does not automatically cancel memberships or make decisions with legal effects.
Service providers
Whop provides sign-in, membership information and checkout. Vercel hosts the application, Neon stores the database, and Resend processes enabled digest emails. These providers receive the information required for those functions. Services may process information internationally under their applicable data-processing terms. Contact us for information about the arrangements relevant to your account.
Retention and deletion
Current member information and encrypted connection credentials are kept while your workspace is connected. Daily report history and digest-delivery records are retained for up to 90 days. Login sessions expire after seven days. Disconnecting Whop removes the stored key, report, member actions and digest settings. Deleting your Holdrate account removes its workspaces and sessions. Provider backups may take additional time to expire under the provider’s retention policies.
Your choices and rights
You can turn off weekly digests in the dashboard or through the unsubscribe link in each email. You can disconnect the community or delete your account in Settings. These actions do not cancel a separately billed Whop subscription.
You may request access, correction, deletion, portability or restriction of your personal information where applicable. You may also object to processing based on legitimate interests. Contact us to make a request. Community members can contact the creator who connected their data or ask us to help route a request.
If you have a privacy concern, please contact us. You can also raise a complaint with your local data-protection authority, including the UK Information Commissioner’s Office.
Cookies
Holdrate uses essential, HTTP-only session and sign-in cookies. The public interactive demo uses local browser storage for fictional example members. No advertising cookies are required by Holdrate. Whop’s checkout and sign-in pages have their own policies.
Public pages also keep daily totals of visits, free-audit starts and trial-checkout clicks. A total may include the page path and either a short campaign label from the link or the hostname of the site a visitor came from. These totals are not tied to an account, cookie, IP address or email address.