Skip to main content
Back to Hayaiti

Privacy Policy

Last updated: 2026-04-25

This policy explains what Hayaiti collects, why we collect it, and the rights you have over your data. Plain English, no dark patterns.

1. Introduction

Hayaiti (“we,” “us,” “our”) operates the website at hayaiti.com and the productized engineering services described on it. This Privacy Policy applies to information we collect through that site, our intake forms, and related services.

We treat your data the way we’d want ours treated: minimum collection, no sale, no sneaky retargeting, and a clear way to delete what we hold.

2. Information We Collect

You give us

  • Contact details— name, work email, company, and a description of what you’re trying to build, submitted through our contact and audit forms.
  • Project content— documents, source code, credentials, or assets you share with us under engagement.
  • Billing details— collected and processed by our payment processor (Stripe). We don’t store full card numbers on our servers.
  • Newsletter subscriptions— if you opt in to the Hayaiti shipping log, we keep your email until you unsubscribe.

We collect automatically

  • Server logs— IP address, user-agent, request path, and timestamp. Standard web-server stuff, used for debugging and abuse prevention.
  • Analytics— aggregate page views, funnels, and session replay via PostHog (consent-gated). No third-party advertising cookies.

3. How We Use Your Data

  • To respond to your inquiry, scope your project, and deliver the work you hired us to do.
  • To send you the Hayaiti shipping log if you subscribed.
  • To invoice you and reconcile payments.
  • To debug, secure, and improve our products and site.
  • To meet legal obligations (taxes, contracts, lawful requests).

We do not use your data to train AI models, profile you for advertising, or build psychographic segments. We do not sell your data. Ever.

4. Cookies & Analytics

We use a small number of strictly necessary cookies (e.g., to remember whether you’ve dismissed a banner) and one analytics cookie if you haven’t opted out. We do not use third-party advertising cookies.

You can block cookies in your browser without breaking the site. Blog and marketing pages will continue to work normally.

5. Data Sharing & Processors

We don’t sell your data. We share it only with vendors that help us run the business:

  • Vercel— web hosting, edge delivery, image optimization.
  • Cloudflare— DNS, CDN, WAF, DDoS protection, bot management.
  • Stripe— payment processing for invoices and deposits.
  • Resend— transactional email and newsletter delivery.
  • GitHub— source-code hosting, CI/CD, and issue tracking for client work.
  • Linear— project management and internal task tracking.
  • Slack— real-time team and per-client communication channels.
  • PostHog— product analytics, session replay, and feature flags.
  • Sentry— error monitoring and performance regression alerts.

Each processor is bound by a Data Processing Agreement and may only process data on our instructions for the purposes above. The current and authoritative list lives at /trust-center— we notify customers 30 days before adding a new vendor.

6. Your Rights

Depending on where you live, you may have the right to:

  • Access— request a copy of the personal data we hold about you.
  • Correct— ask us to fix data that’s wrong or incomplete.
  • Delete— ask us to erase your personal data, subject to retention obligations (e.g., tax records).
  • Object / restrict— tell us to stop using your data for specific purposes.
  • Portability— receive your data in a portable format.
  • Opt out of sale or sharing— not applicable, we don’t do either, but if you’re a California resident you’re entitled to the right anyway.

To exercise any of these, email privacy@hayaiti.com. We aim to respond within 30 days.

7. Data Retention

  • Inquiries that don’t become projects: 24 months, then deleted.
  • Project records: for the duration of the engagement plus 7 years for legal and tax compliance.
  • Newsletter: until you unsubscribe.
  • Server logs: 90 days, rolling.

8. International Transfers

Hayaiti is a distributed team. Data may be processed by our vendors in the United States and the EU. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

9. Children’s Privacy

Hayaiti is a B2B service. We don’t target or knowingly collect personal data from anyone under 13. If you believe a child has submitted data to us, email privacy@hayaiti.comand we’ll delete it.

10. Changes to This Policy

We’ll update this page if our practices change. The “Last updated” date at the top reflects the most recent revision. Material changes will be announced via the newsletter or a banner on the site.

11. Contact

Privacy questions, requests, or complaints: privacy@hayaiti.com. General inquiries: hello@hayaiti.com.

Questions?

We’re a small team and we read every email. Reach us at hello@hayaiti.com.