Privacy Policy

1. Introduction

HiNow ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI services, including our models, APIs, platform, and related services (collectively, the "Services").

We comply with applicable data protection laws, including the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and organization details when you create an account
• Payment Information: Billing address and payment method details (processed by our payment providers)
• Communications: Information you provide when contacting support or participating in surveys
• Content: Prompts, inputs, and data you submit to our AI models and services

2.2 Information Collected Automatically

• Usage Data: API calls, feature usage, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Log Data: Access times, pages viewed, and referring URLs

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze usage trends and preferences
• Detect, investigate, and prevent fraudulent or unauthorized activities
• Comply with legal obligations

4. AI Model Training

We do not use your prompts or inputs to train our AI models by default. Your data submitted to our APIs and services is used solely to provide you with the requested outputs and is not used to improve or train our models unless you explicitly opt in to such usage.

Enterprise customers can enable zero data retention, where prompts and outputs are not stored after processing.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With vendors who perform services on our behalf (hosting, payment processing, analytics)
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission

We do not sell your personal information to third parties.

6. Data Security

We implement robust security measures to protect your information:

• Encryption of data at rest (AES-256) and in transit (TLS 1.3)
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• SOC 2 Type II certified infrastructure
• 24/7 security monitoring and incident response

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you with Services. We may retain certain information as required by law or for legitimate business purposes, such as resolving disputes and enforcing agreements.

API request logs are retained for 30 days by default. Enterprise customers can configure custom retention periods, including zero retention.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at privacy@hinow.ai or through your account dashboard.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers from the European Economic Area.

Enterprise customers can choose specific data residency regions to keep data within their preferred jurisdiction.

10. Cookies and Tracking

We use cookies and similar technologies to operate our Services, remember your preferences, and analyze usage. You can control cookies through your browser settings, though some features may not function properly without them.

11. Children's Privacy

Our Services are not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Services after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: