Privacy notice

Who we are

Hectae Analytics And Software Solutions Private Limited ("Haass", "we", "us") operates haass.io. Our registered address is No 61, Developed Plots Estate, Industrial Estate, Perungudi, Chennai, Tamil Nadu 600096, India.

We are the data controller for the information described here. For anything in this notice, write to marketing@haass.io.

What we collect

Only what you type into our contact form:

• Your name
• Your phone number, including the country code you select
• Your business email address

Analytics and session replay

We use two tools. Google Analytics tells us which pages are read. Microsoft Clarity shows us how they are used: where people scroll, what they click, and where a page loses them. Clarity records page interactions, which can be replayed as a session recording.

Clarity masks the text you type into form fields before it leaves your browser, so your name, phone number and email are not visible in a replay. We look at aggregate patterns rather than individuals, we do not build advertising audiences, we do not run remarketing, and we do not connect either tool to what you send us through the form.

Google and Microsoft act as our processors for this. Our cookie notice lists the specific cookies each one sets and how to turn them off from your browser.

What we do not collect

We want to be specific here, because most privacy notices are vague about it.

• No advertising pixels. No Meta pixel, no LinkedIn Insight tag, no remarketing tag
• No visitor-identification tools. We do not use services that try to work out which company or person is behind a visit so we can approach you
• No tag manager, so no third party can add tracking without a code change
• Fonts are served from our own domain rather than from Google Fonts, so no request is made to a third party when a page loads
• No sensitive categories of data. Please do not send us health, financial, biometric or government-identifier information through the form

Server logs

Our hosting provider keeps standard technical logs so the site can run and stay secure. These typically include IP address, request time, page requested, and browser user agent. We do not use these logs to build a profile of you, and we do not combine them with contact form submissions.

These logs are retained under our hosting provider's own policy and are deleted on their schedule.

Why we use it, and our lawful basis

We use your contact details for one purpose: to reply to your enquiry and, if it goes further, to arrange and hold a discovery call.

Where the UK or EU GDPR applies, our lawful basis is that processing is necessary to take steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries. Where India's Digital Personal Data Protection Act 2023 applies, we process on the basis of the consent you give when you submit the form.

We do not use your details for marketing, and we will not add you to a mailing list. We have no mailing list.

Who sees it

Your enquiry is delivered into a private Microsoft Teams channel used by our team, through Microsoft Power Automate. Microsoft acts as our processor for this. Beyond our own staff and Microsoft as our infrastructure provider, nobody else receives it.

We do not sell personal data. We do not share it with advertisers, data brokers or partners. We may disclose information if we are legally required to, and we will tell you if we are permitted to do so.

Where it goes

Our hosting and Microsoft 365 infrastructure may process data in countries other than your own, including the United States and the European Union. Where data leaves the UK, EU or India, transfers are covered by the receiving provider's standard contractual clauses or equivalent safeguards.

How long we keep it

Enquiries stay in the Teams channel while the conversation is live and for up to 24 months afterwards, so we can pick up a thread you started earlier. After that they are deleted.

If you ask us to delete your enquiry sooner, we will, unless we are required to keep it for a legal or accounting reason.

Your rights

Depending on where you live, you have some or all of the following rights over your data:

• Access: ask for a copy of what we hold about you
• Correction: ask us to fix anything inaccurate
• Deletion: ask us to erase it
• Restriction and objection: ask us to stop or limit how we use it
• Portability: ask for it in a machine-readable form
• Withdraw consent: where we rely on consent, withdraw it at any time
• Complain: raise a complaint with your data protection authority. In the UK that is the ICO, in the EU your national authority, in India the Data Protection Board
• Nominate: under India's DPDP Act, nominate someone to exercise these rights on your behalf if you die or become incapacitated

How to exercise them

Email marketing@haass.io and tell us what you want. We will respond within 30 days. We do not charge for this, and we will not make you justify the request.

Security

The site is served over HTTPS. Form submissions are sent to our own server, which relays them to Microsoft; the credentials for that relay are held server-side and are never present in the page you load.

No system is perfectly secure. If a breach affects your data and presents a risk to you, we will notify you and the relevant authority within the timeframes the law requires.

Children

This is a business-to-business site and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us information, email us and we will delete it.

Changes

If we change how we handle your data, we will update this page and change the date at the top. Material changes will be described rather than quietly slipped in.