Last updated: 2026-07-20
This Privacy Policy describes how HardButton ("we", "our", or "us") collects, uses, and shares your personal information when you use our website at [Website URL], our services, or otherwise interact with us.
We process this data to provide the service, secure your account, and improve product features.
By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website or services.
We collect information you give us directly, including:
Account credentials (email, hashed password)
Profile information (name, avatar, role, organization)
Workspace / project data you create within the product
API tokens and integration credentials (encrypted at rest)
Usage telemetry (features used, session duration, error reports)
Subscription tier and billing history
Payment information (processed by our payment provider — see Section 4 below; we do not store full card numbers on our servers)
When you use our website, we automatically collect certain information through cookies and similar technologies:
Usage data: pages visited, time spent on each page, referring URL, search terms used to find us
Device data: IP address, browser type and version, operating system, device type, screen resolution
Cookie data: see Section 5 (Cookies) below for details
We use the information we collect to:
Authenticate you and provide secure access to your workspace
Provide the core product features you signed up for
Send transactional notifications (password resets, billing alerts, security warnings)
Diagnose bugs and prevent service abuse
Improve product features based on aggregated usage patterns
Understand how visitors use our website so we can improve it
Comply with legal obligations and respond to lawful requests
We share your information with the following categories of third parties:
We share information with third-party service providers who help us operate our business. These providers are contractually required to use your information only for the purposes we specify and to protect it appropriately:
Authentication providers (e.g. Auth0, Supabase Auth, Clerk) — handle login + session management
Payment processors (e.g. Stripe) — manage subscriptions and invoicing
Cloud infrastructure (e.g. AWS, Vercel, Supabase) — host your account data and product workloads
Error monitoring (e.g. Sentry, Datadog) — receive stack traces + anonymized session metadata for debugging
Customer support tools (e.g. Intercom, Zendesk) — handle support tickets and in-app messaging
We may disclose your information if required by law (e.g. in response to a court order, subpoena, or government request) or if we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or others.
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you (e.g. via email and/or a notice on our website) of any such change and the choices you may have.
We do not sell your personal information to third parties for monetary consideration.
We use cookies and similar tracking technologies to operate our website, remember your preferences, and analyze how visitors use our site. The categories of cookies we use:
Strictly necessary cookies — required for the website to function (e.g. session cookies, security cookies). These cannot be disabled.
Functional cookies — remember your preferences (language, region, accessibility settings).
Analytics cookies — help us understand how visitors use the site (which pages, how long, what search terms led them here).
You can manage cookies through your browser settings. Disabling certain cookies may affect website functionality.
We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.
Account data is retained while your subscription is active. After you delete your account, we retain logs for 90 days for security/forensics, then permanently delete personal data within 30 days of that period ending.
Once these periods expire, we securely delete or anonymize your information.
Depending on where you live, you may have certain rights regarding your personal information:
Right to access — request a copy of the personal information we hold about you
Right to correction — request that we correct inaccurate information
Right to deletion — request that we delete your personal information (subject to certain exceptions)
Right to portability — request a portable copy of your data in a machine-readable format
Right to opt out — of marketing communications, certain types of data sharing, and (where applicable) the "sale" of personal information
To exercise any of these rights, contact us at the email address below. We will respond within the time period required by applicable law (typically 30–45 days).
We are committed to SOC 2 controls (audit pending/completed depending on your stage) and follow industry-standard practices for data security. Enterprise customers can request a Data Processing Addendum (DPA) for GDPR compliance.
Our services are not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children in those age groups. If you believe we have collected information from a child, please contact us at the email below and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, by other means (e.g. email or a notice on our website).
We encourage you to review this policy periodically.
If you have questions about this Privacy Policy or want to exercise any of your privacy rights, please contact us at:
HardButton
Email: sdy0814sdy@gmail.com
Website: [Website URL]
This policy was generated using the Lokuma Free Privacy Policy Generator. It is a starting template, not legal advice. Have it reviewed by a qualified lawyer in your jurisdiction before publishing — especially if your industry is regulated (health, finance, children's services) or if you operate across multiple countries.