Privacy Policy

The short version: we collect what you give us (a message, a signed contract) and what we need to run the client portal and take payment. We count visits with Cloudflare’s anonymous, cookie-free analytics, and we don’t sell your information.

Hendeca Labs LLC (“Hendeca Labs,” “we”) runs hendecalabs.com. This policy covers hendecalabs.com, including the client portal and the chat. Hendeca Labs’ apps have their own policies, for example Songstorm’s.

What we collect

When you write to us

The contact form and the chat collect the details you type: your name, email address and message. The chat also records which page you were on. Chat details are optional, and a visitor’s chat is tied to a private token kept in your browser so that only you can read the thread.

When you’re a client

Signing in to the portal uses your email address. We also keep the records of the work: quotes, contracts and signatures (with the date, time and the IP address and browser details used to sign, as electronic signature law expects), invoices, milestones and files we exchange.

Payments

Card payments are handled by Stripe. Your card number goes to Stripe and never touches our servers. We receive confirmation that a payment happened, its amount, and the name and email on the Stripe customer record.

Automatically

Our servers log requests (IP address, page, browser type) for security, abuse prevention and debugging. We use your IP address to rate-limit the chat. The site stores a few things in your browser’s local storage: your chat thread, the email you used to request a sign-in link, and a sidebar preference.

We use Cloudflare Web Analytics to see how many people visit and which pages they read. It sets no cookies, doesn’t track you across other sites, and doesn’t build a profile of you. It reports aggregate figures such as page views, referring site, country, browser and device type. See Cloudflare’s explanation.

When we view your portal as you

To help with support, a Hendeca Labs administrator can open the client portal as it appears to you. This lets us see your quotes, contracts, invoices and files, and we use it only to help you or to look into a problem you’ve raised. Only Hendeca Labs administrators can do this.

How we use it

• To reply to you, scope projects and deliver work.
• To run the portal: sign-in, quotes, contracts, invoices and payments.
• To keep the site secure and prevent spam and abuse.
• To meet legal, tax and accounting obligations.

Who we share it with

We use a small set of service providers who handle data only to do their job for us:

• Cloudflare hosts and delivers the site.
• Google Firebase provides sign-in and stores portal data, chats and files.
• Stripe processes payments and subscriptions.
• Resend delivers the email we send, such as sign-in links and replies to the contact form.
• Notion is where we keep our internal project notes and task tracking.
• Telegram relays new chat messages to us so we can answer quickly.

We may also disclose information if the law requires it, or to protect our rights, and it would move with the business if Hendeca Labs were ever sold. We never sell your personal information or share it for advertising.

How long we keep it

Signed contracts and invoices are kept for seven years, for tax and accounting. Other client records are kept while we work together. Enquiries and chats that don’t lead to work are kept until you ask us to delete them.

Your choices

You can ask to see, correct, export or delete the personal information we hold about you by emailing izzy@hendecalabs.com. We’ll respond within 30 days. Residents of California and other places with privacy laws have these rights, and we honor them for everyone. We can’t delete records the law requires us to keep, such as signed contracts and invoices. You can clear the chat from your device by clearing the site’s data in your browser.

Security

Data travels over HTTPS, access to the portal requires a verified sign-in, and our database rules keep each client’s records separate from everyone else’s. No system is perfectly secure, but we take care with what you trust us with.

Children

Our services are for businesses and adults. We don’t knowingly collect information from children under 13, and if we learn that we have, we’ll delete it.

International visitors

Hendeca Labs is in California, United States, and our providers process data there and elsewhere. By using the site you understand your information will be handled in those places.

Changes to this policy

When we change this policy we’ll update the date at the top, and tell clients by email if the change is significant.

Contact

Questions go to izzy@hendecalabs.com.