1. Account and sign-in
- Data: email, display name, language, avatar.
- Purpose: service access. Basis: contract.
- Retention: lifetime of the account.
2. Security analyses
- Data: findings, masked evidence, scan log.
- Purpose: deliver reports. Basis: contract.
- Retention: while the account exists; deleted on request.
3. Intervention log
- Data: requests sent to your targets (not responses).
- Purpose: traceability and proof of authorization. Basis: legitimate interest.
- Retention: 24 months, then purged; tamper-evident meanwhile.
4. Payments and credits
- Data: amount, payment method (processed by GeniusPay or Stripe), credits.
- Purpose: billing. Basis: legal obligation.
- Retention: statutory accounting period.
5. Administrator access
Every action a Hackaiz administrator takes on an account is written to an append-only audit log with author, date and reason.
6. Processors
- Hosting and database: Supabase, Cloudflare.
- AI: model providers through the Lovable AI gateway.
- Email: Resend. Payment: GeniusPay, Stripe. Ambassadors: SiteViral (with consent).
7. Your rights
Access, correction, export and deletion: email contact@hackaiz.com or use your account settings.