Privacy & Data Protection Policy

1. Privacy Philosophy & Core Principles

At Hai Technologies LLC, we believe that your intellectual property, keyword intelligence, and Google Search Console performance data belong exclusively to you. We do not monetize, sell, or rent your personal or commercial data to any third party under any circumstances.

2. Strict Zero AI Model Training Guarantee

No Model Training: We explicitly guarantee that customer prompts, generated blog drafts, brand voice profiles, and Google Search Console query metrics are never used to train, retrain, or fine-tune foundation AI models (including OpenAI, Anthropic Claude, Google Gemini, or open-weight models). All API communications with AI gateway providers are executed under commercial zero-data-retention agreements.

3. Data We Collect & Lawful Processing

• Tenant Account Information: Name, business email, encrypted login credentials, and billing records processed securely via Stripe.
• Connected Property Metrics: Domain names, target locales, and authorized Google Search Console metrics (clicks, impressions, query positions) synced strictly to generate topical cluster insights.
• Encrypted Gateway Secrets: Bring-Your-Own-Key (BYOK) API credentials, IndexNow keys, and webhook signing secrets, encrypted at rest via AES-256-GCM authenticated hardware encryption.

4. Multi-Tenant Cryptographic Isolation

Every tenant workspace on our platform operates within a sandboxed multi-tenant boundary. Database queries strictly enforce tenant isolation at the repository level. Inbound and outbound delivery payloads utilize HMAC-SHA256 signatures with nonce-based replay prevention.

5. Global Regulatory Compliance (GDPR, CCPA & UAE PDPL)

Hai Technologies LLC complies with leading global data privacy regulations:

• GDPR (European Union): Full support for Data Subject Access Requests (DSAR), Right to Portability, and Right to be Forgotten.
• CCPA / CPRA (California): Zero sale or sharing of consumer personal data.
• UAE Federal Decree-Law No. 45/2021 (PDPL): Compliance with United Arab Emirates personal data protection laws.

6. Sub-processors & Infrastructure Partners

We partner exclusively with certified, SOC-2 / ISO-27001 compliant cloud infrastructure and payment vendors (e.g. Stripe, Google Cloud Platform). All sub-processors are bound by strict Data Processing Agreements (DPAs).

7. Data Retention & Right to Erasure

You have the right to request a complete machine-readable export or permanent irreversible deletion of your tenant account and all associated site data at any time.

8. Contact Our Data Protection Officer (DPO)

For privacy inquiries, DPA execution, or data deletion requests, contact Hai Technologies LLC directly:
Corporate Entity: Hai Technologies LLC
Email Contact: hello@haitechnologies.com
Official Website: haitechnologies.com