Privacy Policy

1. Information we process

Depending on the services you use, we may collect account and contact details, organisation information, order and payment records, enquiries and support communications, and device information, IP addresses, cookies, and usage logs. Payments are processed by payment providers; we do not store full bank card numbers.

Service data may include prompts, files, code, task records and outputs, GTM contacts and marketing materials, and FDE project materials and system access credentials that you submit or authorise us to access. Information may come from you, your organisation, authorised third-party systems, or public sources lawfully used in the services. Provide only information needed for the services that you are entitled to provide.

2. How we use information

To the extent permitted by applicable law, we use this information to provide and maintain services, execute tasks, deliver projects, manage accounts and payments, respond to support requests, prevent abuse, and meet legal obligations. We may also use necessary usage statistics and diagnostic information to analyse performance, troubleshoot, and improve services. We obtain consent where required by law.

When processing personal information in business data on behalf of an enterprise customer, we act under its instructions and applicable agreements. The customer is responsible for its own basis for collecting and using data. Requests about that data should generally be directed to the customer first; we assist as required.

3. Sharing and international processing

We do not sell your personal information. To provide services, we may share necessary information with authentication, payment, AI model, cloud hosting, analytics, and collaboration providers, including sending relevant inputs to model providers to perform tasks. Personnel or contractors involved in FDE delivery may also access project materials when necessary. We restrict entrusted providers’ use and require information protection as applicable.

This Policy does not cover third-party websites or services you connect yourself. Review their privacy policies and decide whether to provide information. We may also disclose information to meet legal requirements, protect legitimate rights, or carry out necessary procedures for financing, mergers, or business transfers, with appropriate safeguards.

Information may be processed outside your country or region. For international transfers, we apply contractual or other necessary safeguards required by applicable law.

4. Cookies and analytics

We use cookies and similar technologies for login, language, and other preferences, and may use analytics services such as Google Analytics to understand website usage. You can restrict or delete cookies in your browser settings, but some features may be affected.

5. Security and retention

We take reasonable measures to protect information but cannot guarantee absolute security of transmission, storage, or third-party systems. Manage your account, credentials, and sharing permissions carefully. If we identify or reasonably suspect security risks, we may restrict access or pause related processing under the Terms of Service. This does not remove our statutory data protection obligations.

We retain information only as long as necessary to provide services, perform contracts, meet legal requirements, or resolve disputes, and then delete or anonymise it. Stopping use or closing an account does not mean all records are immediately deleted. Backups and legally required records may be retained for the necessary period with appropriate protection.

6. Your choices and rights

Subject to applicable law, you may request access, correction, or deletion of personal information, withdraw consent, or exercise other applicable rights. Send requests to the email below. We may verify your identity and handle requests under legal requirements and exceptions. Withdrawing consent may affect related services but does not affect prior lawful processing.

7. Policy updates and contact

We may update this Policy as services or legal requirements change and revise the date on this page. Material changes will be communicated reasonably through the website, product notices, or email. We will obtain further consent where legally required.

For privacy questions or personal information requests, contact hello@hast.so.