Hiro builds and runs custom software for businesses. This page says exactly what we collect, why we have it, and what happens to the data inside the systems we build — which is yours, and stays yours.
01Who we are
Hiro (“Hiro”, “we”, “us”) builds custom software for businesses that are paying to rent it, and then hosts and maintains what we build. This policy covers hiro.ly and the systems we run on behalf of our customers.
02What we collect
We keep data collection minimal:
- Enquiries — when you ask for a quote we collect your name, email, business name and what you told us about the software you pay for today.
- Account — an email address, used for passwordless sign-in to anything we host for you.
- Your business data — the records inside the system we build for you (bookings, entries, orders, customers and the like). We hold that on your behalf; it is yours, not ours.
- Server logs — ordinary request logs kept for security and troubleshooting.
03How we use it
To answer your enquiry and price the work, to build, host, support and secure the system we run for you, and to contact you about it. We do not sell your data, we do not run advertising trackers, and we do not use your business data or your customers’ records to train models.
04Your data stays yours
For the system we build you, you are the owner of the data and we are the processor: we act on your instructions. You can export it at any time, in a usable format, for any reason — including leaving. Ask us to hand it over or delete it and we will, except where the law requires us to keep a record.
05Sharing & processors
We do not sell data. We share it only with the services that run the product:
- Vercel — hosting and delivery.
- Resend — transactional and sign-in email.
- Google Workspace — our own business email.
- A card payment processor — only where your system takes payments. Money from your sales settles into your own account, not ours.
06Data retention
We keep enquiry and account data while there is a live relationship, and your business data for as long as we run your system. After that we return or delete it on request, keeping only what we must for legal and accounting records.
07Security
Data is encrypted in transit, access is limited to the people who need it to run your system, and we keep the platform patched. No method is perfectly secure; if something happens that affects your data, we will tell you.
08Your rights
You can access, correct, export or delete your personal data. Email [email protected] and we will help. Depending on where you are (for example under GDPR or CCPA) you may have additional rights, and we honour them.
09Cookies
A single signed session cookie keeps you logged in. No advertising trackers.
10Children
Hiro is a service for businesses. It is not directed to anyone under 18 and we do not knowingly collect data from children.
11Changes
We will update this page and the “last updated” date when this policy changes, and give notice of material changes where appropriate.
12Contact
Questions about privacy? Email [email protected].
This document is a plain-English summary of how Hiro operates. It is provided in good faith and should be reviewed by your own counsel before relying on it. Questions? [email protected].