Privacy Policy

Last updated: October 2026

1. Who we are

Hafzen operates hafzen.com and app.hafzen.com, a B2B SaaS measuring brand visibility across search engines and AI answer engines. Contact for any privacy question or rights request: legal@hafzen.com.

2. Data we collect

Account data (email, auth identifiers via Supabase Auth); analysis data (URLs, brand names, competitors, countries, languages you submit, and the resulting reports); payment references (processed by Stripe — we never see your card number); standard technical server logs for security.

3. How we use it

To provide the service (run tests, compute scores, keep history), process payments, send transactional emails, and improve the product with aggregated de-identified statistics. We never sell your data and never share your reports with other customers.

4. Third-party processors

AI engine APIs (OpenAI, Google, Anthropic, Perplexity), search data (DataForSEO), database (Supabase), email (Resend), hosting (Vercel, Cloudflare), payments (Stripe). Prompts sent to AI engines contain your brand name and market category — never your account data.

5. Legal basis & retention (GDPR)

Contract performance, legitimate interest and legal obligations. Data kept while your account is active; erased within 90 days of a deletion request. Payment records kept for the legal accounting period.

6. Your rights

Access, rectification, export, erasure, restriction, objection, and complaint to your supervisory authority (FDPIC in Switzerland). Email legal@hafzen.com — we answer within 30 days.

7. Security

TLS in transit, encryption at rest, row-level security isolating each account, secrets in environment variables only, payments fully delegated to Stripe (PCI-DSS Level 1).