Privacy notice

Who is responsible

The hiddenhand operator named in your order form or pilot agreement is responsible for account, billing, service, and support data. For personal data contained in customer documents, your organization generally decides why that data is processed and hiddenhand processes it to provide the service. Contact support@hellohiddenhand.com for privacy questions.

Data we handle

• Account and membership data, such as name, business email, organization, role, authentication identifiers, and security events.
• Workspace content, including event details, uploaded documents, extracted data, conversations, findings, tasks, and saved results.
• Billing and plan records. Payment details are collected through the billing checkout and are not stored as full card data by hiddenhand.
• Technical and operational data, such as request identifiers, device and network information, service logs, job state, source-volume usage, and error records.
• Support requests, legal acceptance records, and feedback you choose to submit.

Why we use it

• To provide, secure, support, and administer the service and perform our contract.
• To protect customers, prevent abuse, diagnose failures, and improve reliability based on our legitimate interests.
• To manage billing, records, legal claims, and obligations required by law.
• To send service messages and respond to requests. Marketing communications, if introduced, will use the lawful basis and choices stated at collection.

Processing of workspace content

Authorized workspace content is processed only to deliver requested product functions, maintain the service, prevent abuse, and provide support. Document instructions are treated as untrusted data. Customer content is not included in browser session replay or open-ended analytics properties.

Sharing and international transfers

We use vetted service providers for hosting, authentication, storage, communications, payments, error monitoring, and requested document analysis. They may process data only under contract and for the service functions assigned to them. Where personal data is transferred outside the UK or EEA, we use an applicable adequacy decision or contractual and supplementary safeguards as required. We may also disclose information when legally required or as part of a protected business transaction.

Retention and deletion

We keep personal data only while needed for the purposes above, the customer agreement, security, dispute resolution, and applicable law. The separate retention and deletion notice describes operational periods and customer controls.

Your rights

Depending on the circumstances, UK and EEA data-protection law may give you rights to access, correct, erase, restrict, object, receive a portable copy, and complain to a supervisory authority. Requests can be sent to support@hellohiddenhand.com. We may need to verify identity and coordinate with your organization where it controls workspace data.

Security and complaints

Our security overview describes product safeguards. If you are not satisfied with our response, you may complain to the UK Information Commissioner’s Office or your local supervisory authority.