Privacy Notice

Effective October 4, 2026 · Version HDNA_PRIVACY_2026_10_04_V2

Information H/DNA may process

Depending on the features you use, H/DNA may process account and identity information, product entitlements, device and security state, content you provide, workflow and intelligence state, connected-source data you explicitly authorize, organization membership and permissions, referral attribution, and commercial or tax metadata. Payment-card details are handled by the payment provider rather than stored as application data by H/DNA.

How information is used

H/DNA uses information to authenticate users, provide and secure requested features, maintain entitlements and permissions, deliver intelligence and workflows, operate referrals and commerce, improve reliability and relevance, prevent abuse, and meet legal, tax and security obligations.

AI-provider credentials and connected sources

H/DNA 1.0 includes an H/DNA-managed AI connection and does not require the customer to provide an AI API key or separate AI API subscription. To operate H/DNA 1.0, H/DNA may transmit customer prompts, attachments, and necessary governed context to authorized AI service providers; those providers’ processing remains subject to their applicable terms and policies. Optional integrations or future products may use customer-authorized provider credentials only when explicitly disclosed and authorized. Other connected-source access is permissioned. H/DNA is designed to fail closed when a source, permission or identity boundary is missing rather than treating unavailable data as if it were present.

Personal and company scope

H/DNA distinguishes personal customer context from governed organization-wide contexts where applicable. Organization information requires appropriate scope and permissions.

Retention and security

Records may be retained as reasonably necessary for service operation, continuity, security, fraud prevention, commercial records and legal obligations. H/DNA uses authenticated sessions, scope controls and deterministic software controls intended to limit access to authorized contexts.

Your choices

You may choose which optional integrations to connect. Where applicable, you may request access, correction or deletion of personal information, subject to records H/DNA must retain for security, commercial or legal reasons.