Privacy Policy

1. Information We Collect

We collect the following types of information when you use Hachus:

• Account information: email address, username, and password (hashed)
• Profile information: display name, bio, avatar, links, and other content you add
• Usage data: click events on your profile links, including timestamps and referrer URLs
• Payment data: billing is handled by Paddle — we do not store your card details

2. How We Use Your Information

We use your information to:

• Provide and operate the Hachus service
• Show you analytics about your profile's performance
• Send transactional emails (verification, password reset, milestone alerts)
• Improve the platform and fix bugs

We do not sell your personal data to third parties.

3. Cookies

We use an HTTP-only session cookie to keep you logged in. If you use a password-protected profile, a cookie is set to remember the unlock state. We do not use third-party tracking cookies.

4. Data Sharing

We share data only with the following service providers:

• Neon (PostgreSQL): database hosting
• Vercel: application hosting and deployment
• Resend: transactional email delivery
• Paddle: payment processing

5. Public Profiles

By default, your Hachus profile is public and can be viewed by anyone. You can make your profile private or password-protected from the Settings page at any time. Public profile content (links, display name, bio) is visible to all visitors.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, your personal data and profile content are permanently deleted within 30 days. Anonymized analytics data may be retained for longer.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data

To exercise these rights, contact us at privacy@hachus.com.

8. Security

We use industry-standard security measures including HTTPS, hashed passwords, and HTTP-only session cookies. No system is perfectly secure — please use a strong, unique password for your account.

9. Children's Privacy

Hachus is not directed at children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes via email. Continued use of the Service after updates constitutes acceptance.

11. Contact

Questions about privacy? Email us at privacy@hachus.com.