--- title: "Privacy Policy | Data Hippo" description: "Data Hippo's privacy policy. How we collect, use, and protect your information." canonical: "https://datahippo.ai/privacy/" lang: "en" modified: "2026-11-06T23:22:50.000Z" --- # Privacy Policy | Data Hippo Source: https://datahippo.ai/privacy/ ## Markdown navigation - [Whole site](https://datahippo.ai/site.md) - [Home](https://datahippo.ai/index.md) - [Contact](https://datahippo.ai/contact.md) - [Platform guide (English)](https://datahippo.ai/docs/index.md) - [Product guide (English)](https://datahippo.ai/docs/products.md) - [Booking guide (English)](https://datahippo.ai/docs/booking.md) - [Privacy (English)](https://datahippo.ai/privacy.md) - [Terms (English)](https://datahippo.ai/terms.md) - [BAA (English)](https://datahippo.ai/baa.md) Available languages: [English](https://datahippo.ai/site.md) · [Português](https://datahippo.ai/pt/site.md) · [Español](https://datahippo.ai/es/site.md) · [Français](https://datahippo.ai/fr/site.md) # Privacy Policy **Effective Date:** January 1, 2025 • **Last Updated:** November 6, 2026 ## 1\. Introduction and Scope This Privacy Policy describes how Data Hippo (a service of Paz Technologies LLC, "we," "our," or "us") collects, uses, and shares information when you use our websites, book a demo, or otherwise interact with us (together, the "Service"). Website analytics is separate from accepting our Terms; Section 4 explains what it collects and how to turn it off. This policy covers our websites, demo booking, and marketing activities. Production deployments of the Data Hippo platform are governed by separate written agreements with our customers, including business associate agreements where applicable, and typically run in the customer's own cloud environment. The Service is not intended to collect protected health information or patient data. Do not submit patient information to our websites or booking forms. ## 2\. Information We Collect ### Information You Provide - **Contact and signup information:** your email address and sign-in details when you book a demo, sign in, or contact us - **Business communications:** the contents of emails, calls, and meetings you have with us ### Publicly Available Business Information To prepare for demos and respond to requests, we may supplement the information you provide with publicly available business information about you and your organization, such as your organization's website, business directories, news coverage, and professional profiles. We collect only business-related information from these sources. ### Information Collected Automatically - Service usage patterns, feature usage, performance metrics, and error reports - Device and technical information, such as IP address, approximate location derived from it, browser type and version, operating system, screen size, language, and time zone - Session information, such as pages visited, clicks and other interactions, session duration, scroll depth, referring pages, and campaign parameters - Session recordings of how pages are used on our public website, with anything typed into fields masked - Requests from software, such as search engines and AI assistants, for our machine-readable files, including the IP address and user-agent string ### Partner Identity Information For organizations entering a partner relationship with us, we collect identity information to verify access eligibility, including organization details, contact person information, and business credentials. ## 3\. How We Use Your Information ### Service Provision - Providing and maintaining the Service - Verifying partner access and authorization ### Communications - Sending service communications, such as sign-in links and booking confirmations - Following up about your demo, our services, and relevant product updates - Responding to your inquiries and providing support You may opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us. Service communications, such as sign-in links, are sent as needed to provide the Service. ### Improvement and Analytics - Analyzing usage to improve the Service and develop new features - Understanding the needs and priorities of the organizations we serve ### Security, Fraud Prevention, and Legal - Protecting the Service against abuse, fraud, and security threats - Enforcing our Terms of Service - Complying with legal obligations ### AI Processing Parts of the Service may use artificial intelligence operated by us and by our service providers. Our service providers process this information on our behalf under agreements that restrict their use of it, and we do not permit them to use your information to train their general-purpose models. ## 4\. Website Analytics, Cookies, and Similar Technologies Website analytics is on by default for all visitors to our public website, in every region, and you can turn it off at any time (see "How to opt out" below). We do not ask for consent before it starts. Necessary storage supports functions such as sign-in, your theme preference, and remembering your analytics choice. Turning analytics off does not prevent you from browsing, contacting us, or booking a demo. ### What we collect - **Pages and interactions:** pages visited, clicks and other interactions with page elements (the element type, its visible label, and the link path), rage clicks and clicks that produce no response, click and pointer positions for heatmaps, scroll depth, time on page, video playback, product interest, and booking progress. We never record what you type into a field, and we do not record the text of the booking or sign-in forms. - **Device and browser:** browser and operating system and their versions, device type, screen and window size, language, time zone, theme, and page-performance measurements such as load time and Core Web Vitals. - **IP address and approximate location:** your IP address, and the approximate location (such as country, region, and city) that PostHog derives from it. We do not collect precise device location (GPS). - **Source and campaign:** the referring website and page (without its query string), campaign parameters in the page address (such as `utm_source`, `utm_medium`, and `utm_campaign`), and advertising click identifiers. We do not keep other parts of page addresses. - **Identifiers:** a random first-party browser identifier with a fixed lifetime of up to 90 days, which visiting another page does not extend, and session identifiers kept in session-scoped browser storage. These are not your name or email address and are not created using fingerprinting. We do not link website analytics to your email address or create named profiles from it. - **Session recordings:** recordings of page activity, such as page changes, scrolling, and clicks, on our public website. Everything typed into form fields is masked before it leaves your browser, and the booking confirmation and management links are excluded. Recordings do not include console logs or network request and response contents. - **Errors:** error categories and code locations, not form contents or raw error messages. - **Requests from automated software:** when software such as a search engine or AI assistant requests our machine-readable files (such as `llms.txt`, `AGENTS.md`, `robots.txt`, sitemaps, the OpenAPI description, or Markdown copies of our pages), our Cloudflare endpoint records the file requested, the response status, the IP address, the user-agent string, the referring domain, and the country, under an identifier that changes daily. These records do not use cookies and do not create profiles. Sign-in and private proposal pages are excluded from website analytics. ### Why we collect it - To understand how people find and use our website, measure our marketing, and improve our website, products, and demo booking - To understand how search engines and AI assistants read and use our public content - To keep the website secure and to detect abuse, fraud, and automated misuse ### Legal basis Where a legal basis is required, such as under the GDPR or UK GDPR, we rely on our legitimate interests in understanding and improving our website and marketing, understanding how automated software uses our public content, and keeping the website secure. You can object at any time by turning analytics off as described below or by contacting us. ### Who processes it PostHog, our analytics provider, processes website analytics, session recordings, and records of automated requests on our behalf and stores them in the United States. Cloudflare hosts the website and operates the first-party endpoint that forwards these measurements to PostHog. We do not use third-party advertising networks or identity-enrichment services for these measurements. ### How long we keep it Session recordings are kept for 90 days and then deleted. Other analytics events, including IP addresses and records of automated requests, are kept for as long as we need them to understand website usage over time, and are then deleted or aggregated. The browser identifier's 90-day limit applies to your browser, not to records already received. Opting out stops future collection; it does not automatically erase earlier records. Contact us using Section 8 to request deletion. ### How to opt out Use , also available at the bottom of every page, to turn analytics off. Turning it off stops collection, including session recording, immediately and removes our analytics identifiers from accessible browser storage. Your browser remembers this choice until you turn analytics back on or clear that storage. We also treat a Global Privacy Control signal, and a Do Not Track signal, as a request to opt out: when your browser sends either, analytics stays off, and records of automated requests are not made. ## 5\. Information Sharing **We do not sell your personal information.** ### Service Providers We share information with third-party service providers who assist us with service hosting and maintenance, identity and sign-in, email delivery, analytics processing, AI processing, and technical support. Service providers are permitted to use information only to provide services to us. For this website, Cloudflare provides hosting, security, and the analytics forwarding endpoint; PostHog processes website analytics, session recordings, and records of automated requests and stores them in the United States; and Calendly processes the contact details and scheduling information needed to book and manage your demo. Meeting invitations and video calls use the configured Google Calendar and Google Meet services. Your submitted booking contact details and free-text answers are used for scheduling and follow-up, not sent to PostHog. ### Business Transfers If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy's protections. ### Legal Requirements We may disclose information if required by law or court order, or as necessary to comply with legal obligations, protect our rights and property, prevent fraud or security issues, or protect user safety. ## 6\. Data Security We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and audit logging. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. ## 7\. Data Retention We retain information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Website analytics retention is described in Section 4: session recordings are kept for 90 days, and other analytics records for as long as we need them to understand website usage, after which they are deleted or aggregated. Opting out of analytics stops future collection; it does not automatically erase earlier records. You can contact us to request deletion. We delete or de-identify information when it is no longer needed. ## 8\. Your Rights and Choices Depending on your location, you may have certain rights regarding your personal information: - **Access and Correction:** request access to or correction of your personal information - **Deletion:** request deletion of your personal information, subject to legal and business requirements - **Data Portability:** request a copy of your data in a structured, machine-readable format - **Opt-Out:** opt out of marketing communications at any time, and turn off website analytics using the "Manage your privacy choices" control at the bottom of every page or a Global Privacy Control signal - **Objection and Restriction:** object to or request restriction of certain processing where applicable law provides these rights To exercise any of these rights, contact us at legal@datahippo.ai. We will verify your request and respond within the time required by applicable law. ## 9\. International Data Transfers If you are located outside of the United States, please note that your information may be transferred to and processed in the United States, where our servers and service providers are located. We ensure appropriate safeguards are in place for such transfers. ## 10\. Children's Privacy The Service is intended for business use and is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will take steps to delete the information. ## 11\. California Privacy Rights (CCPA) If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect (described in Section 2), the right to delete personal information, the right to correct inaccurate personal information, and the right to non-discrimination for exercising these rights. We do not sell personal information and do not share personal information for cross-context behavioral advertising. ## 12\. Changes to This Privacy Policy We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last Updated" date. Significant changes will be communicated through the Service or other appropriate means. ## 13\. Third-Party Services The Service may contain links to third-party services. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. ## 14\. Contact Information If you have any questions about this Privacy Policy or our data practices, or wish to exercise your rights, please contact us: **Email:** legal@datahippo.ai ## 15\. Governing Law This Privacy Policy is governed by the laws of the United States without regard to conflict of law principles.