Your privacy is important to us. It is Hairball, Inc’s policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://www.hairball.io, and other sites we own and operate.

Effective date: January 16, 2026

Last updated: January 16, 2026

1. Scope and Definitions

Personal information (or “personal data”) is any information about you that can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.

If our site contains links to third-party sites and services, those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

2. Information We Collect

Information we collect falls into one of two categories: “voluntarily provided” information and “automatically collected” information.

• Voluntarily provided information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions.
  
  
• Automatically collected information refers to any information automatically sent by your devices in the course of accessing our products and services.
  

2.1 Log Data

When you visit our website, our servers may automatically log standard data provided by your web browser, including:

• Internet Protocol (IP) address
  
• Browser type and version
  
• Pages you visit
  
• Time and date of your visit
  
• Time spent on each page
  
• Other details about your visit
  
  

Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding it. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem.

While this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individuals.

2.2 Device Data

When you visit our website or interact with our services, we may automatically collect data about your device, such as:

• Device type
  
• Operating system
  
• Unique device identifiers
  
• Device settings
  
• Geo-location data (depending on your device and permissions)
  
  

The data we collect can depend on your device and software settings. We recommend checking your device manufacturer or software provider policies to learn what information they make available.

2.3 Personal Information You Provide

We may ask for personal information—for example, when you submit content to us or contact us—which may include:

• Name
  
• Email address
  
• Phone/mobile number
  
• Social media profiles
  
• Date of birth
  

3. How We Collect Personal Information

We may collect personal information when you do any of the following:

• Use a mobile device or web browser to access our content
  
• Contact us via email, social media, or similar technologies
  
• Mention us on social media
  
• Submit forms or otherwise provide information to us
  
  

We may also combine voluntarily provided and automatically collected personal information with general information or research data we receive from other trusted sources (for example, marketing and market research insights combined with site usage data to improve our site and your experience).

4. Why We Process Personal Information (Purposes) and Legal Basis

We only collect and use your personal information when we have a legitimate reason for doing so and when the information is reasonably necessary to provide our services.

Depending on applicable law, we process personal information for the following purposes and legal bases:

Purpose	Legal basis (where applicable)
To provide our platform’s core features and services	Performance of a contract / legitimate interests
To respond to inquiries and provide support	Legitimate interests
To operate, maintain, and improve our website and services	Legitimate interests
Analytics, market research, and business development	Legitimate interests (and consent where required)
Marketing and promotional communications	Consent (and/or legitimate interests where allowed)
To comply with legal obligations and protect legal rights	Legal obligation / legitimate interests

5. Disclosure of Personal Information to Third Parties

We may disclose personal information to:

• A parent, subsidiary, or affiliate of our company
  
  
• Employees, contractors, and/or related entities
  
  
• Existing or potential agents or business partners
  
  
• Third-party service providers enabling them to provide services, including (without limitation): IT services, data storage, hosting and server providers, analytics providers, error logging providers, maintenance and troubleshooting providers, marketing providers, professional advisors, and payment systems operators
  
• Credit reporting agencies, courts, tribunals, and regulatory authorities if you fail to pay for goods or services we have provided
  
• Courts, tribunals, regulatory authorities, and law enforcement officers as required by law or in connection with legal proceedings or to establish, exercise, or defend our legal rights
  
• Third parties (including agents/subcontractors) assisting us in providing products, services, or direct marketing
  
• Third parties to collect and process data
  
• An entity that buys, or to which we transfer, all or substantially all of our assets and business
  

Third Parties We Currently Use

• Google Analytics
  
• HubSpot
  

6. International Transfers

Where we transfer personal information to recipients outside your country, we take reasonable steps to ensure appropriate safeguards are in place consistent with applicable law.

7. Security of Your Personal Information

When we collect and process personal information, and while we retain it, we protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

No method of electronic transmission or storage is 100% secure. While we do our best, we cannot guarantee absolute data security.

Where relevant, you are responsible for selecting any password and its overall security strength and for ensuring you do not make personal information publicly available through our services.

8. How Long We Keep Your Personal Information (Retention)

We keep your personal information only for as long as we need to, depending on what we use it for.

For example, if you contact us with an inquiry, we may retain those details while your inquiry is open and for internal recordkeeping so we can address similar inquiries in the future. If your personal information is no longer required, we will delete it or anonymize it.

However, we may retain personal information where necessary for legal, accounting, or reporting obligations, or for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, where permitted by law.

9. Children’s Privacy

We do not aim any of our products or services directly at children under 13, and we do not knowingly collect personal information about children under 13.

10. Your Rights and Controlling Your Personal Information

Your rights vary by jurisdiction. Where applicable, you may have rights including:

• Choice: You do not have to provide personal information, but if you do not, it may affect your use of our website or services.
  
• Access: Request details of the personal information we hold about you.
  
• Correction: Request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading information.
  
• Deletion: Request deletion of certain personal information (subject to legal exceptions).
  
• Objection/Restriction: Object to or restrict certain processing.
  
• Portability: Request a copy of your data in a portable format (where required by law).
  
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.
  
• Marketing Permission: If you previously agreed to direct marketing, you can change your mind at any time.
  

Information from Third Parties

If we receive personal information about you from a third party, we will protect it as set out in this policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have their consent to provide it.

Complaints

If you believe we have breached a relevant data protection law and wish to complain, contact us with full details. We will promptly investigate and respond in writing with the outcome and any steps we will take. You may also contact a regulator or data protection authority.

Opting Out of Communications

You may opt out of communications from us, including marketing and promotional messages, at any time via:

• The “unsubscribe” link in marketing emails
  
• Replying “STOP” or “UNSUBSCRIBE” to SMS (if applicable)
  
• Contacting us directly
  

Even if you opt out of marketing, we may still contact you for non-promotional purposes (e.g., account servicing, responding to service inquiries, or important updates).

11. Cookies

We use cookies to collect information about you and your activity across our site. A cookie is a small piece of data stored on your device that our website can access when you visit, so we can understand how you use our site and serve content based on preferences you have specified.

Please refer to our Cookie Policy for more information.

12. Do Not Track

Some browsers have a “Do Not Track” feature. At this time, we do not respond to browser “Do Not Track” signals.

13. Business Transfers

If we or our assets are acquired, or if we enter bankruptcy or go out of business, personal information may be among the assets transferred to parties acquiring us. You acknowledge such transfers may occur and that the acquiring party may continue to use your personal information as permitted by applicable law and consistent with this policy.

14. Limits of Our Policy

Our website may link to external sites not operated by us. We have no control over their content and policies and cannot accept responsibility or liability for their privacy practices.

15. Changes to This Policy

We may change this Privacy Policy at our discretion to reflect updates to our processes, acceptable practices, or legislative/regulatory changes. If we change this Privacy Policy, we will post the changes at the same link by which you are accessing this Privacy Policy.

Where required by law, we will obtain your consent or give you the opportunity to opt in/out of new uses of your personal information.

Additional Disclosures for U.S. States Privacy Law Compliance

This section applies only to residents of states with applicable privacy laws (including California, Colorado, Delaware, Florida, Virginia, and Utah). References to a particular state apply only to residents of that state.

California Privacy Laws (CCPA/CPRA)

California Notice of Collection

In the past 12 months, we have collected the following categories of personal information enumerated in the CCPA:

• Identifiers: such as name, email address, phone number, account name, IP address, and an ID assigned to your account
  
  
• Demographics: such as age or gender (which may qualify as protected classifications under other laws)
  
  
• Internet activity: such as interactions with our service
  
  

We collect and use these categories for the business purposes described in the “Information We Collect” and “Why We Process Personal Information” sections.

Right to Know and Delete

You have the right to request:

• The categories of personal information we collected about you
  
• The categories of sources from which personal information was collected
  
• The categories of personal information disclosed for a business purpose (or sold, if applicable)
  
• The categories of third parties to whom personal information was disclosed for a business purpose (or sold, if applicable)
  
• The business or commercial purpose for collecting (or selling, if applicable) personal information
  
• The specific pieces of personal information we collected about you
  

Shine the Light (California Civil Code §1798.83)

If you are a California resident and your relationship with us is primarily personal, family, or household, you may request information about how we share certain personal information with third parties and affiliates for their direct marketing purposes.

Requests must include “Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code.

Financial Incentives

We may offer financial incentives permitted by CCPA/CPRA that can result in different prices, rates, or quality levels. Any incentive will reasonably relate to the value of your personal information. Participation requires prior opt-in consent and may be revoked at any time.

Contact Us

For any questions or concerns regarding your privacy, or to exercise your rights, contact:

Hairball, Inc

Email: hey@hairball.io