1. Scope and Key Definitions

Capitalized terms not defined here have the meanings given in the Terms & Conditions.

• Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular natural person.
• User Data means all data you submit to, store in, transmit through, or otherwise process using the Services, including any Code you submit to obtain Results.

2. Information We Collect

2.1 Information You Provide

We may collect Personal Information and User Data you provide, such as:

• Account information (e.g., email address, password, organization/company name, role, and optional profile details)
• Communications (e.g., support requests, survey responses, feedback, and messages sent to us)
• Billing information for paid plans (handled through our payment processors; we typically receive limited payment metadata rather than full card numbers)

2.2 Information Collected Automatically

When you use the Services, we may automatically collect:

• Device and technical data (IP address, browser type, device identifiers, operating system, language, time zone, and approximate location derived from IP)
• Usage data (pages visited, features used, clicks, timestamps, session duration, referring URLs, error logs)
• Cookies and similar technologies (see Section 10)

2.3 Information From Third-Party Components

If you connect or use Third-Party Components (e.g., OpenAI/ChatGPT, Google/Gemini, Amazon/AWS services, X/Grok, Claude, Polar, or other integrations), we may receive information necessary to provide the Services, such as:

• Authentication tokens or connection metadata
• Import/export data you authorize us to access
• Outputs, logs, and results related to your use of those components as required to deliver the Services

Important: Third-Party Components are governed by their own privacy policies and terms. We do not control their practices.

3. How We Use Information

We use Personal Information and User Data to:

1. Provide and operate the Services (including account creation, authentication, access control, and feature delivery)
2. Process transactions and manage subscriptions, billing, and refunds (where applicable)
3. Maintain, secure, troubleshoot, and improve the Services, including monitoring, debugging, performance analysis, and quality assurance
4. Provide customer support and respond to inquiries
5. Enforce the Terms & Conditions, prevent misuse, fraud, and security incidents, and protect the rights and safety of Hatch, Users, and third parties
6. Communicate about the Services (e.g., service-related notices, security alerts, feature updates)
7. Develop insights and benchmarks using aggregated and/or anonymized data as described in Section 8 (Statistical Information)

4. Legal Bases for Processing

Where required by applicable law, we rely on one or more of the following legal bases:

• Performance of a contract (to provide the Services under the Terms & Conditions)
• Legitimate interests (to secure, maintain, improve, and market the Services, and prevent fraud/abuse)
• Consent (where required for certain cookies/marketing or optional features)
• Compliance with legal obligations (e.g., lawful requests, tax, accounting)

5. How We Share Information

6. Data Retention

We retain Personal Information and User Data only as long as necessary for the purposes described in this Privacy Policy, including to:

• provide the Services
• comply with legal, accounting, or reporting obligations
• resolve disputes and enforce agreements
• maintain security, prevent abuse, and protect our systems

Free Access & Inactivity: Accounts under Free Access that show no activity for thirty (30) consecutive days may be automatically deleted, along with associated data, results, or outputs, as described in the Terms & Conditions. We may also delete User Data upon termination as described in the Terms & Conditions, unless legally prohibited or needed to resolve disputes and enforce agreements.

7. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect Personal Information and User Data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Aggregated / Anonymized Data (Statistical Information)

We may create and use aggregated and/or anonymized information derived from usage of the Services for analytics, product improvement, benchmarking, and reporting. This data is intended not to identify you or include identifiable User Data. Hatch retains all rights in such aggregated/anonymized statistical information.

9. Your Privacy Rights and Choices

10. Cookies and Similar Technologies

We may use cookies, pixels, local storage, and similar technologies to:

• keep you signed in and enable core features
• remember preferences
• analyze usage and performance
• improve the Services

You can manage cookies via browser controls. Where required, we will provide additional notice and/or obtain consent.

11. International Data Transfers

Hatch is based in the United States. If you access the Services from outside the U.S., you understand that your information may be transferred to, stored, and processed in the U.S. and other locations where Hatch or its service providers operate. We take steps designed to ensure an appropriate level of protection where required by law.

12. Children’s Privacy

The Services are not directed to children under 18, and we do not knowingly collect Personal Information from children. If you believe a child has provided Personal Information to Hatch, contact us so we can take appropriate action.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Services or by other means as required by law. Continued use of the Services after the effective date of an updated Privacy Policy means you accept the updated version.

14. Contact Us

For questions, requests, or concerns about privacy, contact: