Effective as of 08 March 2026
This Privacy Policy describes how Human API Technologies, Inc. (“HAPI,” “we”, “us” or “our”)
processes personal information that we collect through our HAPI application and digital or online
properties or services that link to this Privacy Policy (including as applicable, our website (including
thehumanapi.com), mobile app and social media pages) as well as our marketing and other activities
described in this Privacy Policy (collectively, the “Service”)). HAPI may provide additional or
supplemental privacy policies to individuals for specific products or services that we offer at the time
we collect personal information.
NOTICE TO U.S. STATE RESIDENTS: Please see the U.S. State Privacy Rights Notice at
Collection section for additional information if you are a U.S. resident.
NOTICE TO USERS OUTSIDE THE UNITED STATES: Please see the Notice to Users Outside the
United States section for additional information for individuals located outside the U.S.
This Privacy Policy does not apply to information that we process on behalf of our business
customers while providing services to them. Our use of information that we process on behalf of our
business customers is governed by our agreements with such customers. If you have concerns
regarding your personal information that we process on behalf of our business customer, please
direct your concerns to the business customer with which you have a relationship.
This Privacy Policy does not apply to (1) our employees or independent contractors or job
candidates or (2) representatives of businesses with which we have a business relationship. For the
avoidance of doubt, users of the HAPI service are not considered employees or independent
contractors of HAPI.
Personal information we collect
Information you provide to us. Personal information you may provide to us through the Service or
otherwise includes:
Contact data, such as your email address, first and last name, signature, billing and mailing addresses, and phone number.
Demographic data, such as your city, state, country of residence, postal code, gender, physical characteristics, and age.
Profile data, such as account name, the username and password that you may set to establish an online account on the Service, biographical details, avatar, photograph or picture, date of birth, preferences, links to your profiles on social media networks, and any other information that you add to your account profile.
Payment data needed to provide you with payment for services (i.e., digital wallet). We use a third-party vendor to directly collect and process your payment data, as described further below.
Communications data based on our exchanges with you, including when you contact us through the Service, communicate with us via phone, email, social media, or otherwise.
Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
User-generated content data, such as any information that you generate, transmit, or otherwise make available on the Service as well as communications you send to other users through the Service, including associated metadata. Metadata includes information on how, when, where and by whom a piece of content was collected and how that content has been formatted or edited. Metadata also includes information that users can add or can have added to their content, such as keywords, geographical or location information, and other similar data.
Audio/video recordings, such as recordings you provide by completing tasks through the Service.
Sensitive Personal Information, including racial, ethnic or national origin; religious or philosophical beliefs; political views, mental or physical health condition, diagnosis, history, treatment or other health data; pregnancy; sex life, sexuality or sexual orientation; status as transgender or non-binary; personal information of individuals between 16 and 18 years old; and account login information.
Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
Third-party sources. We may combine personal information we receive from you with personal
information falling within one of the categories identified above or below that we obtain from other sources, such as:
Public sources, such as government agencies, public records, social media platforms, and other publicly available sources.
Data providers, such as information services, data licensors/brokers, and lead generators.
Service providers that provide services on our behalf or help us operate the Service or our business.
Partners, such marketing partners.
Ad networks
Data analytics providers
Social media platforms
Business transaction partners. We may receive personal information in connection with an actual or prospective business transaction. For example, we may receive your personal information from an entity we acquire or are acquired by, a successor, or assignee or any party involved in a business transaction such as a merger, acquisition, sale of assets, or similar transaction, and/or in the context of an insolvency, bankruptcy, or receivership.
Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:
Device data, such as your computer or mobile device’s operating system type and version, manufacturer and model, installed applications, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
Location data, for example, as inferred from network data or device settings.
Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
Communication interaction data such as your interactions with our email or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.For more information concerning our automatic collection of data, please see the Tracking technologies section below.
Data about others. We may offer features that help users invite their contacts to use the Service, and we may collect contact details about these invitees so we can deliver their invitations. Please do not refer someone to us or share their contact details with us unless you have their permission to do so.
Tracking technologies. Some of the automatic collection described above is facilitated by cookies and other technologies. For more information, see our Cookie Notice.
How we use your personal information
We may use your personal information for the following purposes or as otherwise described at the time of collection:
Service delivery and operations. We may use your personal information to:
provide and operate the Service, develop and commercialize our products and services, and as provided in the Human API Terms of Service;
process your requests and transactions;
establish and maintain your user profile on the Service;
enable security features of the Service;
facilitate your invitations to friends who you want to invite to join the Service;
facilitate social features of the Service, such as by creating leaderboards, identifying and suggesting collaborative experiences with other users of the Service, and providing chat or messaging functionality;
communicate with you about the Service, including by sending Service-related announcements, updates, security alerts, and support and administrative messages; and
provide support for the Service, and respond to your requests, questions and feedback.
Service personalization, which may include using your personal information to:
understand your needs and interests;
personalize your experience with the Service and our Service-related communications; and
remember your selections and preferences as you navigate webpages.
Service improvement and analytics. We may use your personal information to analyze your usage of the Service, improve the Service, improve the rest of our business, help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails, and to develop new products and services. For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.
Marketing and advertising. We and our third-party advertising partners may collect and use your personal information for marketing purposes.
Direct marketing. We may send you direct marketing communications and may personalize these messages based on your needs and interests. You may opt-out of our marketing communications as described in the Opt-out of communications section below.
Interest-based advertising. We and our third-party advertising partners may use cookies, pixels and other technologies to collect information about your interaction with the Service, our communications and other third party online services over time, and use that information to serve online ads that they think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online properties. You can learn more about your choices for limiting interest-based advertising in our Cookie Notice.
Compliance and protection. We may use your personal information to:
comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;
protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
audit our internal processes for compliance with legal and contractual requirements or our internal policies;
enforce the terms and conditions that govern the Service; and
prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
Cookies and similar technologies. In addition to the other uses included in this section, we may use Tracking technologies for the purposes set out in our Cookie Notice.
Data sharing in the context of corporate transactions, we may share certain personal information in the context of actual or prospective corporate transactions – for more information, see How we share your personal information, below.
Research and development. We may use your personal information for research and development purposes, including to develop, analyze and improve our products and services, including to train AI systems and models. As part of these activities, we may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you. We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business. We do not attempt to reidentify deidentified information derived from personal information, except for the purpose of testing whether our deidentification processes comply with applicable law.
Further uses, in some cases, we may use your personal information for further uses, in which case we will ask for your consent to use your personal information for those further purposes if they are not compatible with the initial purpose for which information was collected.
How we share your personal information
We may share your personal information with the following parties (or as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection).
Affiliates. Our corporate parent, subsidiaries, and affiliates.
Service providers. Third parties that provide services on our behalf or help us operate the Service or our business (such as hosting, information technology, customer support, email delivery, marketing, consumer research and website analytics).
Payment processors. Any digital wallet you link to the Service is collected and processed directly by our payment processors, such as Stripe. Stripe may use your payment data in accordance with its privacy policy, available at https://stripe.com/privacy.
Artificial Intelligence Platforms. That are our customers and third-party AI providers to power certain aspects of the Services.
Advertising partners / ad networks. Third-party advertising companies for the interest-based advertising purposes described above.
Social networks. We use their ad services to display ads to our customers, or other people like them, on social media.
Data brokers. We give them personal information and they supplement it with additional personal information.
Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so.
Linked third-party services. If you log into the Service with, or otherwise link your Service account to, a social media or other third-party service, we may share your personal information with that third-party service. The third party’s use of the shared information will be governed by its privacy policy and the settings associated with your account on the third-party service.
Partners. Our customers and third parties with whom we partner.
Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers,
where necessary in the course of the professional services that they render to us.
Authorities and others. Law enforcement, government authorities, and private parties, as we
believe in good faith to be necessary or appropriate for the Compliance and protection
purposes described above.
Business transferees. We may disclose personal information in the context of actual or prospective business transactions (e.g., investments in HAPI, financing of HAPI, public stock offerings, or the sale, transfer or merger of all or part of our business, assets or shares). For example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of HAPI as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.
Other users. Your Profile data and some user-generated content may be visible to other users of the Service and the public. For example, when you communicate with other users through the Service.
We make commercially reasonable efforts to verify that the parties with whom our mobile application shares personal information provide a level of protection of personal information consistent with the practices described in this Privacy Policy, except that all such parties described above other than service providers and affiliates may, to the extent permitted by law, use personal information as described in their own privacy policies.
SMS Communications
By signing up to the Service, we may collect and process your mobile phone number and
related messaging information to provide the Services. SMS Communications include
information about tasks you can perform on HAPI and related communications. You may opt out of receiving SMS messages at any time by replying STOP to any message you receive from us. After opting out, you will receive a confirmation message and will no longer receive SMS
messages unless you opt in again. Your opt-out will be effective after we send you a
confirmation. By opting out, some features of the Service may not be available.
Children
The Service is not intended for use by anyone under 16 years of age. If you are a parent or
guardian of a child from whom you believe we have collected personal information, please
contact us. If we learn that we have collected personal information through the Service from a
child without the consent of the child’s parent or guardian, or the child directly where the child is under 16 but over 13 years of age, as required by law, we will comply with applicable legal
requirements to delete the information.
Your choices
In this section, we describe the rights and choices available to all users. Users who are located in the United States or Outside the United States can find additional information about their rights below.
Access or update your information. If you have registered for an account with us through the
Service, you may review and update certain account information by logging into the account and navigating to your account profile and settings.
Opt-out of communications. You may opt-out of marketing-related emails by following the opt out or unsubscribe instructions at the bottom of the email, or by contacting us. Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails.
You may opt-out of text messages by texting “STOP” in response to a text that you receive or by other reasonable means. For more information, please see the SMS Communications section above.
Cookies and other technologies. For more information regarding the use of cookie and similar
technologies and your respective options, please see our Cookie Notice.
Additional options for controlling interest-based advertising for U.S. residents are located in our State Privacy Rights Notice At Collection.
Declining to provide information. We need to collect personal information to provide certain
services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.
Retention Period for Personal Information. We generally retain personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. To determine the appropriate retention period for personal information, including Sensitive Personal Information, we may consider factors such as the length of time we have an ongoing relationship with you and provide services to you; the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure of your personal information; the purposes for which we process your personal information and whether we can achieve those purposes through other means; whether there is a legal obligation to which we are subject (for 9example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); whether retention is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation or regulatory investigations; and applicable legal requirements. For example, we will retain your personal information for as long as you have an account with us or keep using our services, and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise. When we no longer require the personal information we have collected about you, we may either
delete it or de-identify it.
Other sites and services
The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.
Security
We employ technical, organizational, and / or physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.
International data transfer
We are headquartered in the United States and may use service providers that operate in other
countries. Your personal information may be transferred to the United States or other locations
where privacy laws may not be as protective as those in your state, province, or country.
Users Outside the United States should read the important information provided in the Notice to Users Outside the United States about transfer of personal information outside of Europe.
Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.
How to contact us
Email: legal@eclipse.builders
Mail: 2261 Market Street STE 10648, San Francisco, CA 94114
U.S. State Privacy Rights Notice At Collection
Except as otherwise provided, this section applies to residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states to the extent they have privacy laws applicable to us that grant their residents the rights described below (collectively the “State Privacy Laws”).
This State Privacy Rights Notice At Collection is part of our full Privacy Policy.
This section describes how we collect, retain, use, disclose, sell and share for the purposes of targeted advertising personal information of residents of these states and the rights these users may have with respect to their personal information. Please note that not all rights listed below may be afforded to all individuals and that if your state does not afford you these rights, you may not be able to exercise these rights. In addition, we may not be able to process your access, correction or deletion request if you do not provide us with sufficient detail to allow us to confirm your identity and understand and respond to your request.
For purposes of this section, the term “personal information” means information that relates to an identified or identifiable natural person, or that is reasonably capable of being used to identify, contact, or precisely locate a natural person, household, or a particular computing system or device.
We do not attempt to reidentify deidentified information derived from personal information, except for the purpose of testing whether our deidentification processes comply with applicable law.
Your privacy rights. You may request to exercise the rights listed below. We will respond to your request in accordance with applicable law. We may decline to honor your request where an exception applies.
Right to know
You can request to know whether we process your personal information.
You can request the following information about how we have collected and used your personal information during the past 12 months and how we will continue to do so:
The categories of personal information that we have collected.
The categories of sources from which we collected personal information.
The business or commercial purpose for collecting, selling, and/or sharing personal information for targeted advertising purposes.
The categories of personal information that we sold or shared for targeted advertising purposes, and the categories of third parties to whom this information was sold or shared, categorized by the type of personal information for each type of third party.
The categories of personal information that we disclosed for business purposes and the types of entities to whom this information was disclosed.
The specific third parties to which we have disclosed personal information.
Access. You can request a portable copy or representative summary of the personal information that we have collected about you.
Correction. You can ask us to correct inaccurate personal information that we have collected about you.
Deletion. You can ask us to delete the personal information that we have collected from or about you.
Revoke consent. You may have the right to revoke your consent to our processing of your personal information.
Opt-out.
Opt-out of targeted advertising. We process personal information for targeted advertising purposes. You can opt out of the use of your personal information for targeted advertising purposes.
Opt-out of sale of your Personal Information. We sell personal information. You can opt out of our sale of your personal information.
For users between 16 and 18 years of age, we obtain opt-in consent before we sell personal information or process personal information for targeted advertising, as required by law. Where state law prohibits such processing, we do not engage in data sales or targeted advertising for users between 16 and 18 in those states.
Automated decision making. We do not use your personal information to engage in automated processing or profiling personal information to evaluate, analyze, or predict personal aspects related to your economic situation, health, personal preferences interests, reliability, behavior, location, or movements to make a decision that produces legal or similarly significant effects.
Sensitive Personal Information.
California Residents: Limit processing of Sensitive Personal Information. We may collect certain categories of Sensitive Personal Information as described in this Privacy Policy. We use Sensitive Personal Information as necessary for certain business purposes, including providing goods or services as requested; ensuring safety, security; and integrity; countering wrongful or unlawful actions; short term transient use such as displaying first party, non-personalized advertising; performing services for our business, including maintaining and servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of our business; activities relating to quality and safety control or product improvement; and other collection and processing that is not for the purpose of inferring characteristics about an individual.
Unless you ask us not to, we use Sensitive Personal Information to train AI models.
Residents outside California: Sensitive Personal Information. You can opt out of our processing your Sensitive Personal Information by electing not to provide it to us or by notifying us of your opt-out.
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.
Appeal. You can appeal our denial of any request validly submitted.
Exercising your right to know, access, correction, deletion, and appeal. You may submit
requests to legal@eclipse.builders or by calling [insert toll free number].
We cannot process your request if you do not provide us with sufficient detail to allow us to
understand and respond to it.
Exercising your right to opt-out of/revoke your consent to the “sale” of your personal
information or “sharing” of your personal information for targeted advertising purposes. You
13can submit requests to opt-out of targeted advertising and other sales of personal information here:
[LINK], via email to legal@eclipse.builders or by broadcasting the Global Privacy Control signal. For information about how to use the Global Privacy Control, please visit
https://globalprivacycontrol.org/. These signals set your opt-out preferences only for the particular browser or device you are using and any consumer profile that we associate with that browser or device unless you are logged into your account, in which case we will honor the signal with respect to that browser or device and your account.
Notice of Financial Incentive
By participating in our service, we may invite you to complete tasks which may constitute a “financial incentive” under the CCPA. If you choose to participate in these tasks, you will receive
communications from us regarding the task and information about the remuneration you will receive for completing the task. We will invite you to participate in these tasks through HAPI, and you can choose to participate by sharing your personal information and otherwise agreeing to the relevant terms. By participation, you will provide us with your personal information including your Contact data, Device data and Audio/video recordings and User-generated data. You have the right to withdraw from participating in these tasks at any time and may do so by not completing the task. The value of any incentive is reasonably related to the value of your personal information, including as applicable: the expenses we incur related to the provision of and the processing of personal information in connection with these incentives and programs; the benefit and insights that we realize and expect to realize from your participation in our programs (such as customer sales); and the quantity and quality of information that you provide to us through your participation.
Verification of Identity; Authorized agents. We may need to verify your identity to process your
request to know, access, correction, deletion, or appeal requests and reserve the right to confirm your residency. We may need to request your email address and phone number in order to verify your identity and protect against fraudulent requests. If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to reauthenticate yourself before disclosing or deleting your personal information. If you make a request to delete, we may ask you to confirm your request before we delete your personal information.
Under some State Privacy Laws, you may enable an authorized agent to make a request on your behalf. However, we may need to verify your authorized agent’s identity and authority to act on your behalf. Depending on the kind of request you have made, we may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your State Privacy Law rights on your behalf, the information we request to verify your identity, or confirmation that you have given the authorized agent permission to submit the request.
Personal information that we collect, use and disclose. We have summarized the personal
information we collect and may disclose, sell to or share with third parties by reference below to both the categories of personal information defined in the “Personal information we collect,” “How we use your personal information,” and “How we share your personal information” sections of this Policy above and the categories of personal information specified in state law. This table describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below.
See our full Privacy Policy for descriptions of each entry in this table.
Personal Information (“PI”) we collect
California statutory category of PI
Business/commercial purpose for PI collection
Categories of third parties to whom we “disclose” PI for a business purpose
Categories of third parties with whom we “share” PI for cross-context behavioral advertising purposes
Categories of third parties to whom we “sell” PI
Contact data
Identifiers
Customer
records
Service delivery
and operations
Service
personalization
Service
improvement &
analytics
Marketing
Compliance and
protection
Corporate
transactions
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
N/A
Demographic
data
Customer
records
Protected
characteristics
(age, race,
ethnicity,
national origin, religion,
political
affiliation/activiti
es, sexual
orientation,
gender identity
and
expression)
Service delivery
and operations
Service
improvement and
analytics
Marketing
Compliance and
protection
Corporate
transactions
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
AI platforms
Profile data
Identifiers
Customer
records
Sensitive
Personal
Information
Internet activity
Service delivery
and operations
Service
personalization
Service
improvement and
analytics
Marketing
Compliance and
protection
Corporate
transactions
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
AI platforms
Payment data
(Digital Wallet)
Customer
record
Service delivery
and operations
Corporate
transactions
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
N/A
N/A
Communication
data
Commercial
information
Internet activity
Service delivery
and operations
Marketing
Compliance and
protection
Corporate
transactions
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
N/A
Marketing Data
Commercial
information
Internet activity
Service delivery
and operations
Marketing
Compliance and
protection
Corporate
transactions
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
N/A
User Generated
Content
Audio/video/vis
ual data
Internet activity
Service delivery
and operations
Service
personalization
Service
improvement &
analytics
Compliance and
protection
Corporate
transactions
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
AI platforms
Audio/Video
recording data
Audio/video/vis
ual data
Service delivery
and operations
Compliance and
protection
Corporate
transactions
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
AI platforms
Device data
Identifiers
Internet activity
General
location data
Service delivery
and operations
Service
personalization
Service
improvement &
analytics
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
N/A
Location Data
(approximate)
General
location data
Service delivery
and operations
Service
personalization
Service
improvement &
analytics
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
AI platforms
Communication interaction data
Commercial information
Internet activity
Service delivery
and operations
Service
personalization
Service
improvement &
analytics
Marketing
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
N/A
Online activity
data
Commercial information
Internet activity
Service delivery
and operations
Marketing
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
N/A
Sensitive
Personal
Information
Identifiers
Customer
record
Protected
characteristics
See section above
called “Sensitive
Personal
Information”
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
N/A
N/A
Tracking
technology data
Identifiers
Internet activity
Service delivery
and operations
Service
personalization
Service
improvement &
analytics
Direct Marketing
Interest-based advertising
Compliance and
protection
Corporate
transactions
Research and
development
Affiliates
Service providers
Payment processors
AI platforms
Advertising partners /
ad networks
Social networks
Data brokers
Third parties
designated by you
Linked third party
Services
Partners
Professional advisors
Authorities
Business transferees
Advertising
partners / ad
networks
Social
networks
N/A
Consumers under 16. We do not have actual knowledge that we have collected, sold, or shared the personal information of residents who are under 16 years of age.
Retention Period for Personal Information. We retain personal information as described in the
Your Choices section of this Privacy Policy (see Retention Period for Personal Information).
Additional information for Texas residents.
NOTICE: We may sell your sensitive personal data, as defined by the Texas Data Privacy
and Security Act.
Additional information for Nevada residents. Nevada residents have the right to opt-out of the
sale, as defined, of certain personal information for monetary consideration.
Additional information for Connecticut residents. We collect, use, or sell personal data for the
purpose of training large language models (“LLMs”).
Contact Us. If you have questions or concerns about our privacy policies or information practices, please contact us using the contact details set forth in the How to contact us section, above.
Notice to Users Outside the United States
General
Where this Notice applies. The information provided in this “Notice to Users Outside the United
States” section applies only to individuals Outside the United States, including the United Kingdom and the European Economic Area. References to “Europe” in this Policy refer to the United Kingdom and the European Economic Area.
Personal information. References to “personal information” in this Privacy Policy should be
understood to include a reference to “personal data” (as defined in the GDPR as applicable) – i.e., information about individuals from which they are either directly identified or can be identified.
Controller. HAPI is the controller in respect of the processing of your personal information covered by this Privacy Policy for purposes of European data protection legislation (i.e., the EU GDPR and the so-called ‘UK GDPR’ (as and where applicable, the “GDPR”)). See the ‘How to contact us’ section above for our contact details.
Our GDPR Representatives. We have appointed the following representatives in Europe as required by the GDPR – you can also contact them directly should you wish:
Our Representative in the EU. Our EU
representative appointed under the EU GDPR is
DataRep. You can contact them:
Email: datarequest@datarep.com
Subject Line: <Human API>
Our Representative in the UK. Our UK
representative appointed under the UK GDPR is
DataRep. You can contact them:
Email: datarequest@datarep.com
Subject Line: <Human API>
Our legal bases for processing
In respect of each of the purposes for which we use your personal information, the GDPR requires us to ensure that we have a “legal basis” for that use.
Our legal bases for processing your personal information described in this Privacy Policy are listed below.
Where we need to perform a contract, we are about to enter into or have entered into with you (“Contractual Necessity”).
Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (“Legitimate Interests”). More detail about the specific legitimate interests pursued in respect of each Purpose we use your personal information for is set out in the table below.
Where we need to comply with a legal or regulatory obligation (“Compliance with Law”).
Where we have your specific consent to carry out the processing for the Purpose in question (“Consent”).
We have set out below, in a table format, the legal bases we rely on in respect of the relevant Purposes for which we use your personal information – for more information on these Purposes and the data types involved, see ‘How we use your personal information’.
Purpose
Categories of personal
information involved
Legal Basis
Service delivery and operations
Contact data
Demographic data
Profile data
Payment data (Digital
Wallet)
Communication data
Marketing Data
User Generated Content
Audio/Video recording data
Device data
Location Data
(approximate)
Communication interaction data
Online activity data
Contractual Necessity
Legitimate Interests. We have a legitimate
interest in ensuring the ongoing security and
proper operation of our Service (including,
where relevant, responding to any contact via
any “contact us” feature or similar), our business and associated IT services, systems and networks.
Service personalization
Contact data
Profile data
Payment data (Digital
Wallet)
User Generated Content
Device data
Location Data
(approximate)
Communication interaction data
Online activity data
Legitimate Interests. We have a legitimate
interest in ensuring that our Services are
tailored to your needs and interests.
Consent, in respect of any optional cookies
used for this purpose.
Service improvement and analytics
Contact data
Demographic data
Profile data
User Generated Content
Device data
Location Data
(approximate)
Communication interaction data
Legitimate Interests. We have a legitimate
interest in providing you with a good service,
which is personalised to you and that
remembers your selections and preferences.
Consent, in respect of any optional cookies
used for this purpose.
Marketing
Contact data
Demographic data
Profile data
Communication data
Marketing data
Communication interaction data
Online Activity Data
Legitimate Interests. We have a legitimate
interest in promoting our operations and goals
as an organisation and sending marketing
communications for that purpose.
Consent, in circumstances or in jurisdictions
where consent is required under applicable
data protection laws to the sending of any
given marketing communications.
Compliance and protection
Any and all data types relevant
in the circumstances
Compliance with Law.
Legitimate Interests. Where Compliance with
Law is not applicable, we have a legitimate
interest in participating in, supporting, and
following legal process and requests, including
through co-operation with authorities. We may
also have a legitimate interest in ensuring the
protection, maintenance, and enforcement of
our rights, property, and/or safety.
Corporate transactions
Any and all data types relevant
in the circumstances
Legitimate Interests. We have a legitimate
interest in sharing certain personal information
when necessary for the completion of actual or
prospective business transactions. For more
information, see ‘How we share your personal
information’.
Research and Development
Any and all data types relevant
in the circumstances
Contractual necessity
Legitimate Interests. We have legitimate
interest, and believe it is also in your interests,
that we are able to take steps to ensure that
our Services operate as intended.
Further uses
Any and all data types relevant
in the circumstances
The original legal basis relied upon, if the
relevant further use is compatible with the
initial purpose for which the Personal
Information was collected.
Consent, if the relevant further use is not
compatible with the initial purpose for which
the personal information was collected.
Other info
Sensitive Personal Information: Where we process your sensitive personal information for the
purposes described above, we do with your consent where required by law.
No Automated Decision-Making and Profiling. As part of the Service, we do not engage in
automated decision-making and/or profiling, which produces legal or similarly significant effects.
Your rights
General. International data protection laws give you certain rights regarding your personal
information. If you are located outside the United States, you may ask us to take the following
actions in relation to your personal information that we hold to the extent these rights are provided by the applicable data protection law in your jurisdiction:
Access. Provide you with information about our processing of your personal information and give you access to your personal information.
Correct. Update or correct inaccuracies in your personal information.
Delete. Delete your personal information where there is no good reason for us continuing to process it - you also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
Restrict. Restrict the processing of your personal information, for example if you want us to establish its accuracy or the reason for processing it.
Object. Object to our processing of your personal information where we are relying on Legitimate Interests – you also have the right to object where we are processing your personal information for direct marketing purposes.
Withdraw Consent. When we use your personal information based on your consent, you have the right to withdraw that consent at any time.
Exercising These Rights. You may submit these requests by email to legal@eclipse.builders or our postal address provided above. We may request specific information from you to help us confirm your identity and process your request. Whether or not we are required to fulfill any request you make will depend on a number of factors (e.g., why and how we are processing your personal information), if we reject any request you may make (whether in whole or in part) we will let you know our grounds for doing so at the time, subject to any legal restrictions.
Your Right to Lodge a Complaint with your Supervisory Authority. In addition to your rights
outlined above, if you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.
For users in the European Economic Area – the contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/board/members_en
For users in the UK – the contact information for the UK data protection regulator can be found here: https://ico.org.uk/make-a-complaint/
Data Processing outside Europe
We are a U.S.-based company and many of our service providers, advisers, partners or other
recipients of data are also based in the U.S. This means that, if you use the Service, your personal information will necessarily be accessed and processed in the U.S. It may also be provided to recipients in other countries outside your jurisdiction. Please see the International Data Transfer section of this Privacy Policy for more information if you are located outside of Europe.
If you are located in Europe, where we share your personal information with third parties who are based outside Europe, we try to ensure a similar degree of protection is afforded to it by making sure one of the following mechanisms is implemented:
Transfers to territories with an adequacy decision. We may transfer your personal information to countries or territories whose laws have been deemed to provide an adequate level of protection for personal information by the European Commission or UK Government (as and where applicable) (from time to time).
Transfers to territories without an adequacy decision.
We may transfer your personal information to countries or territories whose laws have not been deemed to provide such an adequate level of protection.
However, in these cases:
we may use specific appropriate safeguards, which are designed to give personal information effectively the same protection it has in Europe – for example, standard-form contracts approved by relevant authorise for this purpose; or
in limited circumstances, we may rely on an exception, or ‘derogation’, which permits us to transfer your personal information to such country despite the absence of an ‘adequacy decision’ or ‘appropriate safeguards’ – for example, reliance on your explicit consent to that transfer.
You may contact us if you want further information on the specific mechanism used by us when transferring your personal information out of Europe. See the How to contact us section above for our contact details.
