Privacy Policy

1. Who is responsible

The controller responsible for your personal data is:

You can contact us about privacy at support@hailera.com. Our company details are in the Imprint.

This policy does not cover businesses or other third parties that process data under their own responsibility. It provides the information the law requires, including under Art. 13 and 14 of the EU General Data Protection Regulation (GDPR), and is not part of a contract.

2. What we collect

• Account data: contact details such as your name and email address, sign-in information and your settings.
• Business content: information account holders publish about their business. It is public.
• Conversations and requests: what you send through the service, such as searches and questions to business agents, the answers, and any contact or booking details you choose to give.
• Usage and technical data: information about your device and browser, your IP address, how you use the service, and logs.
• Correspondence: messages you send us and our replies.

Data comes from you, from account holders (for example when they publish content or arrange something for someone else), from your use of the service, and from the other sources described below.

3. Businesses we list

We may list businesses that have not signed up, so that people can find them and so that we can invite them to use the service. We use publicly available sources, such as the business's own website, and providers of business contact data. This can include the business's name, contact details and information it has made public. On request, we tell you where the data came from. If this is your business, you can ask us to remove the listing or to stop contacting you.

4. Why we use it, and our legal bases

• To provide and operate the service — performance of a contract (Art. 6(1)(b) GDPR), or our legitimate interest in operating the service where we have no contract with you (Art. 6(1)(f)).
• To maintain and improve the service and to develop new features — our legitimate interest.
• To understand how the service is used — our legitimate interest.
• To keep the service secure and to prevent misuse and fraud — our legitimate interest.
• To provide support and to communicate with users and businesses — performance of a contract or our legitimate interest.
• To list businesses and to invite them to use the service — our legitimate interest.
• To comply with the law and to establish, exercise or defend legal claims — legal obligation (Art. 6(1)(c)) and our legitimate interest.
• Where we ask for it, your consent (Art. 6(1)(a)), which you can withdraw at any time.

Our legitimate interests are offering, improving and promoting a reliable and secure service, and protecting our rights. Details are available on request. You are not legally required to give us personal data, but parts of the service cannot work without it.

5. When we act for a business

When a business uses Hailera to communicate with people, for example through its agent, the business decides how that data is used and is the controller. We process the data on its behalf (Art. 28 GDPR). The business can see those conversations, including details people choose to share, and is the first point of contact for requests about them.

6. AI and automated decisions

The service uses AI to generate answers and automated systems to order search results. AI answers can be wrong. We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR). Please do not share sensitive personal data, such as health information, in a conversation or a search.

7. Who receives data

We do not sell personal data. We share it with:

• service providers that process it for us: cloud hosting, database and sign-in, AI model providers, email delivery, analytics, maps and address look-up, and other technical service providers
• businesses you choose to contact through the service, and the business behind an agent you talk to
• professional advisers, and authorities or courts where the law requires it or to protect our rights
• a buyer, successor or other party in a merger, acquisition, financing or sale of all or part of our business

We can tell you which providers we use on request.

8. International transfers

Hailera, Inc. is based in the United States. We and our service providers may process personal data in the United States and in other countries outside the European Economic Area. Where the law requires, we use appropriate safeguards for these transfers, such as the European Commission's standard contractual clauses or an adequacy decision. You can request a copy of the safeguards.

9. How long we keep data

We keep account data for as long as the account exists. We keep other personal data for as long as we need it for the purpose we collected it for, and then delete or anonymise it. We keep data longer where the law requires it, or where we need it to establish, exercise or defend legal claims. Deleted data can remain in backups until they are overwritten.

10. Cookies and similar technologies

We use cookies and similar technologies that are necessary to provide the service, for example to keep you signed in, remember your settings and keep a conversation open. We also use analytics to understand how the service is used; it relies on our legitimate interest, and you can object at any time. You can control cookies in your browser settings, but blocking necessary ones can stop parts of the service from working.

11. Security

We use reasonable technical and organisational measures to protect personal data. No method of transmission over the internet or of storage is free of risk, and we cannot guarantee security.

12. Your rights

Depending on the law that applies to you — for people in the EU, Art. 15–22 GDPR — you have the right to access your personal data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, and to withdraw consent at any time with effect for the future.

To exercise your rights, write to support@hailera.com. We may ask you to confirm your identity, and we respond within the time the law allows. Account holders can also delete their data and their account in the account settings. For data a business controls, we may refer you to that business.

13. Information for US residents

We do not sell personal information, and we do not share it for targeted advertising. You can ask us to access, correct or delete your personal information by writing to support@hailera.com.

Do Not Track. Your browser may let you send a "Do Not Track" signal. There is no common standard for responding to it, and our service does not respond to it. We do not permit third parties to collect personal information about your activity across other websites through our service.

14. Children

The service is not directed at children, and we do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.

15. Changes to this policy

We may update this policy. The date at the top shows the current version. Where the law requires it, we will tell you about changes.