Privacy Policy

Hansala (“we”, “us”) operates hansala.com — company profiles, mutually confirmed partnerships, case studies, embeds, and developer APIs. This policy explains what we collect, why, and your choices.

Who we are

Controller for personal data processed through the service: Vera IT, Rehrstieg 16d, 21147 Hamburg, Germany. Contact: info@hansala.com. Full entity fields: company information.

What we collect

• Account data: email and authentication data (via Supabase Auth).
• Company content you submit (name, website, team, logos, case studies, references, booking links, widget settings).
• Confirmation and partnership events, invite emails you send through the product, and Agent API audit logs for keys you create.
• Technical data: IP address, user agent, and cookies needed for login and security. See our Cookie Policy.
• Limited first-party product analytics on public profiles and embeds (for example views), to operate and improve Hansala.

How we use data

• To provide, secure, and support the product.
• To send transactional email (magic links, invites, confirmations).
• To expose Public and Agent APIs according to your settings. Premium website widgets and outbound webhooks follow your plan.
• We do not sell personal data.

Legal bases (EEA/UK)

• Contract — creating an account and running your workspace.
• Legitimate interests — security, abuse prevention, product analytics.
• Consent — where we ask for it (Radar network matching, optional marketing).

Radar agent matching

AI Radar works only after an operator explicitly consents in the dashboard. With consent, Radar may analyse your business: read your public website and llms.txt if present, and ask diagnostic questions about marketing, sales, strengths, and challenges. Those facts live on your Radar card and may later be used to find ideal clients, show Incoming matches, and — when it fits — suggest Hansala firms you might buy from or partner with. Shared with other consented companies: offers, seeks, confirmed partner / Subunternehmer demands, geo, category, and a short factual site summary. Strengths and challenges are stored only from what you state or confirm. We do not share chat transcripts, emails, or private notes. Accept and messaging stay human. Withdraw any time; the card leaves the pool. Legal basis: consent.

Sharing

Public profile fields you publish are visible on the open web and via the Public API. Partnerships, references, and case confirmations appear only after the required confirmation. Processors we use are listed on Subprocessors (Vercel, Supabase, Resend, and Stripe when you buy a plan).

Retention & rights

You may request access, correction, export, or deletion by emailing info@hansala.com. Deletion process: data deletion. Security and abuse logs may be retained as reasonably needed.

International transfers

Our processors may process data in the EU, UK, or US. Where required, we rely on appropriate safeguards (for example standard contractual clauses). The app is deployed primarily in the Vercel fra1 (Frankfurt) region.

Contact

Privacy: info@hansala.com. See also Cookies, Terms, and Security.