Privacy policy
Effective 26 October 2026
1. Who is responsible
The controller of your personal data is:
- Company: Jiveal Desarrolladores S.L.
- Tax ID (CIF): B42627711
- Registered address: Calle Lo Platero 12A, 03177 San Fulgencio, Alicante, Spain
- Email: hi@huginnova.com
For any privacy question or request, write to hi@huginnova.com.
2. Two roles: controller and processor
We act as controller for the data of people who visit our website, create an account, belong to a workspace or pay for a subscription. When our customers enter information into the service (brands, competitors, prompts, notes), we process it as a processor on their behalf and only according to their instructions; in that case the customer is the controller. The service is designed to track brands and companies, not individuals.
3. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, password (hashed by our authentication provider), workspace and role | Creating and securing your account, team management, service emails | Performance of a contract (art. 6.1.b GDPR) |
| Billing details, company name, VAT number, invoices | Charging subscriptions, issuing invoices, tax obligations | Contract and legal obligation (art. 6.1.b and 6.1.c) |
| Content you add: brands, domains, competitors, prompts, settings | Providing the service you subscribed to | Contract (as processor for the customer) |
| Technical data: IP address, browser, device, session cookies, security logs | Keeping the service secure and working, preventing abuse | Legitimate interest (art. 6.1.f) |
| Free report requests: email, website, topic, market, and a one-way hash of your IP address | Generating and showing your report, preventing abuse, and occasional product emails you can opt out of | Legitimate interest (art. 6.1.f); you can object at any time |
| Messages you send us | Answering questions and providing support | Legitimate interest or contract |
We do not sell personal data, we do not use it for advertising, and we do not make decisions with legal or similarly significant effects based solely on automated processing.
4. Who we share it with
We use carefully selected providers (sub-processors) to run the service, such as authentication, payments, hosting and the AI providers we query on your behalf. Each one is bound by a data processing agreement. The current list is on our sub-processors page. We may also disclose data when required by law or to protect our rights.
Prompts you track are sent to AI providers to collect their answers. Do not include personal data about individuals in prompts; they are meant to describe what buyers ask about products and brands.
5. Where data is stored and international transfers
The service and its database are hosted by Hetzner Online GmbH in the European Union (Germany).
Some providers are located outside the European Economic Area, mainly in the United States. Transfers rely on an adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed.
6. How long we keep it
- Account and workspace data: while your account is active, then deleted or anonymized within 90 days.
- Billing and invoices: for the period required by Spanish tax and commercial law (generally 6 years).
- Security logs: up to 12 months.
- Customer content: until the customer deletes it or closes the account, then deleted within 90 days.
7. Your rights
You can request access, rectification, erasure, restriction of processing, data portability and object to processing based on legitimate interest, and withdraw any consent at any time, by writing to hi@huginnova.com. We answer within one month. If you are not satisfied, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
If your data was entered into the service by one of our customers (for example, your agency), please contact that customer first; we will help them respond.
8. Security
We apply technical and organizational measures appropriate to the risk, including encryption in transit, access control by workspace and role, hashed credentials handled by our authentication provider, and least-privilege access for staff.
9. Cookies
We only use cookies that are strictly necessary for signing in and keeping your session secure. See our cookie policy.
10. Changes
We may update this policy. If changes are material we will notify account owners by email or in the product before they take effect.