Privacy Policy

1. Information we collect

We collect information you provide directly, information generated when you use Hirda, and limited technical information needed to run the service.

• Account information: email address, password hash, name, company, job title, phone and time zone.
• Ledger data: the items you create, including names, categories, renewal or expiry dates, costs, owners, departments, clients, reminder settings, renewal URLs and any notes or custom fields.
• Credentials: optional login usernames and passwords you attach to items so your team can act on renewals. These are stored encrypted and only shown to users you have granted access.
• Files: attachments you upload to items are stored in private cloud storage.
• Billing information: plan tier, subscription status and payment history. Card details are handled by Stripe and never touch our servers.
• Technical data: browser type, IP address, session cookies and error logs used to keep the service secure and reliable.

2. How we use your information

• To provide, maintain and improve Hirda.
• To send renewal alerts and membership emails.
• To process payments and manage your subscription.
• To enforce limits based on your chosen plan.
• To secure your account, including optional two-factor authentication.
• To respond to support requests.

3. Who we share information with

We do not sell your personal information. We share data only with service providers necessary to run Hirda:

• Lovable Cloud / Supabase — cloud database, authentication, file storage and server functions.
• Stripe — payment processing and billing portal.
• Google — only if you choose to sign in with Google OAuth.
• Email delivery providers — to send alerts from notify.hirda.io.

4. Data retention

We keep your data for as long as your account is active. If you delete your account, we erase or anonymise your ledger data and attachments within 30 days, except where longer retention is required by law or for billing records.

5. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information. You can update most information in your Hirda settings. To request deletion or ask about other rights, email us at privacy@hirda.io.

6. Security

We encrypt data in transit using TLS and offer optional TOTP-based two-factor authentication. Access to ledger entries is controlled by your plan's team and permission settings. No system is completely secure, so please use a strong password and keep your authentication factors safe.

7. Children's privacy

Hirda is not intended for anyone under 18. We do not knowingly collect personal information from children.

8. International transfers

Your data is hosted in the cloud region used by Lovable Cloud. By using Hirda, you consent to this processing and storage.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version here with a new effective date. Continued use of Hirda after changes means you accept the updated policy.

10. Contact us

Questions about this policy can be sent to privacy@hirda.io or to Fionn Technologies, Unit 4, Harbour Works, Dublin, Ireland.