What we collect, why, and how long we keep it

Who we are

This site is operated by Hecato AI ("Hecato", "we", "us"). Questions about this policy, or any request relating to your personal data, go to hello@hecato.ai.

This policy covers the website and enquiries made through it. Project data handled when Hecato is deployed for a customer is governed by the agreement with that customer and our data processing terms, not by this policy.

What we collect

Information you give us directly:

• Demo request form: name, work email, company, trade, estimating team size, and bids reviewed per month.
• Direct email: whatever you send us.

Information collected automatically: our hosting infrastructure keeps ordinary server logs, which may include IP addresses, browser type and pages requested. We also use first-party, cookie-free website interaction analytics to understand how pages and buttons are used, such as which links are clicked and whether the demo form is started or submitted. These records do not include the contents of anything you type into the form. We do not use advertising cookies on this site.

Why we process it

We use the information we collect to:

• Respond to enquiries.
• Arrange and run product demos.
• Maintain site security and diagnose issues.

Who we share it with

We do not sell personal data. We share it only with service providers who process it on our behalf, currently our hosting and database infrastructure providers, and our scheduling provider (used when you book a demo, which receives your name and email to set up the booking), under contracts that restrict what they may do with it.

How long we keep it

Demo requests and correspondence are kept for as long as needed to handle the inquiry and any ongoing relationship that follows, and are then deleted. Server logs are retained on the schedules of our infrastructure providers.

Your rights

Depending on where you are located, you have rights over your personal data.

If you are in the United States, you may have the right to access, correct, or delete the personal data we hold about you, and to opt out of certain processing. Residents of California and some other states have specific rights under state privacy laws, including the right to know what personal data we collect and to request its deletion. We do not sell personal data.

If you are in the United Kingdom or European Union, you have the right to access, correct, or delete your personal data, to object to or restrict processing, and to request your data in a portable format. You can also complain to your local data protection authority, such as the UK Information Commissioner's Office at ico.org.uk.

To exercise any of these rights, write to hello@hecato.ai and we will respond within the timeframe required by applicable law.