Privacy Policy

This Privacy Policy explains, in plain terms, how hakuya.ai, a private limited company (Hakuya.ai Private Limited) ("hakuya.ai", "we", "us", or "our"), handles information when you use the Hakuya website and managed-cloud service (together, the "Service").

Last updated: July 1, 2026

By using the Service, you agree to what this Policy describes. If you don't agree, please don't use the Service. This Policy is part of our Terms of Use.

1. Who we are

The Service is run by hakuya.ai, a private limited company (Hakuya.ai Private Limited). We operate in line with the laws and regulations that apply to us. For any privacy question, request, or grievance, email us at tech@hakuya.ai.

2. Information we collect

2.1 Information you provide

  • Account information — name, email address, organization name, and password credentials when you register for the managed cloud or a console account.
  • Billing information — when you purchase a paid plan, payment is processed by our payment processor, Razorpay. We do not collect or store full card numbers; we receive limited transaction metadata (such as a subscription identifier, plan, status, and the last digits or brand of the instrument) needed to manage your subscription.
  • Communications — information you provide when you contact us, request support, or submit our contact form.

2.2 Information collected automatically

  • Usage and log data — IP address, browser/device type, pages viewed, API endpoints called, timestamps, and diagnostic information used to operate, secure, and improve the Service.
  • Cookies and similar technologies — used for authentication (session cookies) and basic analytics. You can control cookies through your browser settings; disabling them may limit some functionality.

2.3 Customer Content

When you use the managed cloud, you and your end users may submit data ("Customer Content") that is stored and processed on your behalf — including the memories, conversations, and metadata your agents write to Hakuya. We process Customer Content solely to provide the Service and in accordance with our agreement with you; you are the controller of that data and are responsible for having the necessary rights and notices to submit it.

3. How we use information

  • To provide, operate, maintain, and secure the Service;
  • To authenticate users and manage accounts, plans, and subscriptions;
  • To process payments and prevent fraud (via Razorpay);
  • To respond to inquiries and provide customer support;
  • To monitor usage, enforce plan limits, and improve performance and features;
  • To send service, security, and transactional notices; and
  • To comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use Customer Content to train models.

4. How we share information

We share information only as described here:

  • Service providers — vendors who process data on our behalf to run the Service (e.g., cloud hosting, our payment processor Razorpay, email, and analytics), under contracts that limit their use of the data.
  • Legal and safety — when required by law, legal process, or to protect the rights, property, or safety of Hakuya, our users, or the public.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

5. Data retention

We retain personal information for as long as needed to provide the Service and for legitimate business or legal purposes. Customer Content is retained per your plan and instructions; you can delete data through the Service, and Hakuya supports verified per-subject erasure. On account termination we delete or de-identify personal information within a reasonable period, except where retention is required by law.

6. Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit, access controls, and a tamper-evident audit trail. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Depending on the data-protection laws that apply to you, you may have rights to:

  • access the personal data we hold about you and how it is processed;
  • correct, complete, update, or delete your personal data;
  • withdraw consent where processing is based on your consent;
  • object to or restrict certain processing; and
  • raise a grievance about how your data is handled.

To exercise any of these rights or raise a grievance, email tech@hakuya.ai. We will verify and respond within the timeframe required by applicable law. We do not sell your personal data. If you are an end user of one of our customers, please direct your request to that customer, who controls that data; we will assist them as their processor.

8. Where your data is processed

We may store and process your information in countries other than your own, which may have different data-protection laws. When we move personal data across borders, we do so in line with applicable law and put appropriate safeguards in place. Enterprise customers can ask us about the specific hosting region and cross-border-transfer terms for their account.

9. Children's privacy

The Service is not directed to children under 18, and we do not knowingly process a child's personal data without verifiable consent of a parent or lawful guardian. If you believe a child has provided us personal data, contact us and we will delete it.

10. Third-party links

The Service may link to third-party sites and services (such as GitHub or our documentation). We are not responsible for the privacy practices of those third parties; their policies govern.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date and, where appropriate, additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact us

hakuya.ai — a private limited company (Hakuya.ai Private Limited)
Email: tech@hakuya.ai