Privacy Notice

1. Who we are

Hibi is operated by Aidan Walsh, who acts as the data controller for the personal data described in this notice. You can reach us at support@hibiwork.com.

2. What we collect

• Account data — your name, email address, and login credentials, used to create and secure your account.
• Workspace content — the projects, tasks, comments, and files you create, used to provide the service to you and your team.
• Usage data — product analytics such as pages viewed and features used, used to improve the product.
• Technical data — IP address, device and browser identifiers, used for security and fraud prevention.
• Support messages — anything you send us when asking for help, used to respond to you.

Payment details are collected and processed directly by Paddle, our Merchant of Record, and are not covered by this notice.

3. Legal basis

We process account data and workspace content to perform our contract with you. We process usage and technical data based on our legitimate interests in securing and improving the service. Where required by law, we rely on your consent, and we process data where necessary to comply with legal obligations.

4. Who we share data with

• Service providers — hosting and database infrastructure (Lovable Cloud) and product analytics (PostHog), who process data on our behalf.
• Paddle — our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance, and invoicing.
• Professional advisers — such as legal and accounting advisers, where necessary.
• Authorities — where we are required to do so by law.

Some of these providers are located outside your country, including in the United States. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

5. Retention

We keep your personal data for as long as your account is active or as needed to provide the service. When data is no longer needed, we delete or anonymize it, unless we are required to keep it longer by law.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal data, to data portability, to object to processing, and to withdraw consent at any time. You also have the right to complain to your local data protection authority. To exercise any of these rights, email support@hibiwork.com — we respond within one month.

7. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and row-level isolation of workspace data.

8. Cookies

We use essential cookies and local storage to keep you signed in and remember your preferences. We also use analytics cookies (PostHog) to understand how the product is used. You can control cookies through your browser settings; blocking essential cookies will prevent sign-in.

9. Changes

If we make material changes to this notice, we'll update the date above and, where appropriate, notify you in the app or by email.