Snapshot 19752
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Legal Privacy Policy Updated 2 September 2026 How Hardalion collects, uses, and protects personal information when you use our websites and Nexus. 1. Introduction At Hardalion, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our platform, or interact with our services. By using our Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree with our policies and practices, please do not use our Service. Scope. This Policy describes our practices for personal data collected through hardalion.com, contact and careers flows, waitlists, newsletters where offered, and similar general Service interactions. Authenticated products (such as Nexus) may present supplemental notices at signup or in-product settings; those notices apply together with this Policy. 2. Information We Collect 2.1 Information You Provide to Us We collect information that you provide directly to us, including: Account Information: Name, email address, phone number, company name, and billing information Profile Information: Username, profile picture, and other information you choose to provide Payment Information: Credit card details, billing address, and payment history (processed through secure third-party payment processors) Communication Data: Messages, support requests, feedback, and other communications you send to us Content: Data, files, and content you upload, create, or store through our Service 2.2 Information We Collect Automatically When you use our Service, we automatically collect certain information, including: Usage Data: Pages visited, features used, time spent, and actions taken Device Information: IP address, browser type, operating system, device identifiers, and mobile network information Log Data: Access times, error logs, and system performance data Location Data: General location information based on IP address Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies 2.3 Information from Third Parties We may receive information about you from third-party services, such as authentication providers, payment processors, analytics services, and business partners, in accordance with their privacy policies. 3. How We Use Your Information We use the information we collect for the following purposes: Service Provision: To provide, maintain, and improve our Service, process transactions, and fulfill your requests Account Management: To create and manage your account, authenticate users, and provide customer support Communication: To send you service-related notices, updates, security alerts, and administrative messages Marketing: To send you promotional communications (with your consent) and inform you about new features, products, or services Analytics: To analyze usage patterns, monitor performance, and improve our Service Security: To detect, prevent, and address fraud, security issues, and technical problems Legal Compliance: To comply with legal obligations, enforce our terms, and protect our rights Research and Development: To conduct research, develop new features, and improve user experience 4. Information Sharing and Disclosure We do not sell, rent, or trade your personal information. We may share your information in the following circumstances: 4.1 Service Providers We may share information with third-party service providers who perform services on our behalf, such as hosting, payment processing, analytics, customer support, and email delivery. These providers are contractually obligated to protect your information and use it only for the purposes we specify. 4.2 Business Transfers If Hardalion is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information. 4.3 Legal Requirements We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a legal process. 4.4 With Your Consent We may share your information with third parties when you explicitly consent to such sharing. 5. Data Security We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: Encryption of data in transit and at rest Regular security assessments and penetration testing Access controls and authentication mechanisms Secure data centers and infrastructure Employee training on data protection Incident response and breach notification procedures However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. 6. Your Rights and Choices Depending on your location, you may have certain rights regarding your personal information, including: Access: Request access to your personal information Correction: Request correction of inaccurate or incomplete information Deletion: Request deletion of your personal information Portability: Request transfer of your data to another service Objection: Object to processing of your personal information Restriction: Request restriction of processing Withdraw Consent: Withdraw consent where processing is based on consent Opt-Out: Opt out of marketing communications To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days. 7. Cookies and Tracking Technologies We use cookies, web beacons, and similar tracking technologies to collect and store information about your preferences and activity on our Service. Cookies are small data files stored on your device that help us: Remember your preferences and settings Analyze how you use our Service Provide personalized content and advertisements Improve security and prevent fraud You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Service. 8. Data Retention We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it. Account information is retained while your account is active and for a reasonable period thereafter. Transaction records may be retained for legal and accounting purposes as required by law. 9. Children's Privacy Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information. 10. International Data Transfers Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your information in accordance with this Policy, including standard contractual clauses and other mechanisms approved by relevant data protection authorities. 11. California Privacy Rights If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including: The right to know what personal information we collect, use, and disclose The right to delete your personal information The right to opt-out of the sale of personal information (we do not sell personal information) The right to non-discrimination for exercising your privacy rights To exercise these rights, please contact us at [email protected]. 12. European Privacy Rights (GDPR) If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the rights listed in Section 6 above. Our legal basis for processing your information includes: Performance of a contract Legitimate business interests Compliance with legal obligations Your consent 13. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by: Posting the updated Policy on this page with a new "Last updated" date Sending you an email notification (if you have an account) Displaying a prominent notice on our Service Your continued use of our Service after any changes to this Policy constitutes your acceptance of the updated Policy. 14. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Email [email protected] or use hardalion.com/contact. 15. Data Controller For personal data collected through hardalion.com (including marketing pages, contact and careers forms, waitlists, and general support), the data controller is Hardalion, unless we identify a different controller in product-specific terms (for example, at signup for a particular product or tenant environment). Where we process personal data on behalf of an organization customer, that customer may be the controller for workspace data and we act as a processor under their instructions and our agreement with them. 16. Supervisory Authority (EEA) If you are in the European Economic Area and believe our processing infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority in your member state. A list of EU supervisory authorities is published by the European Data Protection Board. You may still contact us first at [email protected] so we can try to resolve your concern. 17. United Kingdom If UK GDPR applies to you, you have rights substantially similar to those described in Sections 6 and 12, and you may lodge a complaint with the UK Information Commissioner's Office (ICO). Contact details for the ICO are available at ico.org.uk. 18. Brazil (LGPD) If the Lei Geral de Proteção de Dados (LGPD) applies to you, you may have rights including confirmation of processing, access, correction, anonymization, deletion, portability, information about sharing, and withdrawal of consent where processing is consent-based. You may contact [email protected] to exercise these rights. You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD). 19. We Do Not Sell Personal Information As stated in Section 4, we do not sell your personal information for money. Where privacy laws define "sale" or "sharing" broadly (for example, certain digital advertising concepts), we configure analytics and marketing tools to minimize unnecessary disclosure and we honor applicable opt-out rights where required. 20. Automated Decision-Making We do not rely on solely automated decision-making that produces legal or similarly significant effects about you in a manner that would require additional disclosures under applicable law. If we introduce such processing in the future, we will update this Policy and, where required, provide a lawful basis, explanation, and human review mechanism. 21. Sensitive or Special Categories of Data Please do not submit health information, government ID numbers, financial account credentials, or other sensitive categories of data through contact forms or unstructured messages unless we explicitly request them for a defined purpose (for example, a regulated onboarding flow). If we receive sensitive data without a lawful basis and clear need, we may delete it. 22. Hosting, Analytics, and Subprocessors We use major cloud infrastructure and established service providers (hosting, payments, monitoring, and email delivery) to operate the Service. These providers process personal data only as needed to deliver their services to us and are bound by contractual confidentiality and security obligations. A current list is published at /legal/subprocessors; enterprise agreements may include additional notice rights as described in our DPA. 23. Social Sign-In If you authenticate using a third-party account (for example, an OAuth provider), we receive information according to your settings with that provider. That provider's privacy policy also applies to their processing. 24. Retention for Legal Claims and Regulatory Obligations In addition to Section 8, we may retain certain records where required for litigation, regulatory investigations, tax, accounting, or fraud prevention, for the duration of the applicable limitation or retention period. 25. Prior Versions We may retain prior versions of this Policy internally for compliance purposes. If you need a copy of an earlier version, contact [email protected] and we will respond subject to reasonable verification. All policies