Privacy policy

This Privacy Policy describes how Hakama ("Hakama", "we", "us", or "our") collects, protects, and uses personal information you provide through the Hakama website and related services. It also describes the choices available to you regarding our use of your personal information and how you can access or update it.

This policy does not apply to companies we do not own or control, or to people we do not employ or manage. If a customer uses Hakama under a separate written agreement, that agreement controls any conflicting product-specific processing terms.

We receive and store information you knowingly provide when you contact us, request a pilot, subscribe to updates, reply to email, or otherwise use forms on the website. Depending on the interaction, this may include your name, work email address, company, role, phone number, and the message or request you send.

You can choose not to provide certain information, but then we may not be able to respond to a request, provide a pilot, or send updates you asked to receive. If you are unsure which information is required, contact us before submitting the form.

When you visit the website, our servers may automatically record information that your browser sends. This can include IP address, browser type and version, operating system, language preference, referring page, requested page, access time and date, time spent on the page, and similar diagnostic statistics.

We use this technical information to operate the website, detect abuse, debug errors, understand aggregate usage, and improve performance. We do not use it to build cross-site advertising profiles.

Hakama is built as a local governance layer for AI coding tools. In the ordinary product flow, we do not receive your source code, prompts, AI outputs, git history, branch names, commit messages, repository contents, or working-tree files.

If you choose to send a diagnostic bundle, support file, or error report, it may include configuration details, rule names, logs, and the action being evaluated. You choose what to send. Do not include source code, secrets, or regulated data unless a written support agreement expressly covers that transfer.

We may use collected information to respond to inquiries, schedule and operate pilots, provide requested updates, send service messages, improve the website and services, detect abuse, secure our systems, process transactions, and comply with legal obligations.

Aggregated or non-identifying information may be used to understand website usage and product interest. We do not aggregate information in a way intended to identify a specific person unless that is necessary for security, support, billing, or compliance.

If Hakama offers paid services, payment information may be processed by third-party payment processors. We do not need to store full payment card details on our own systems. A payment processor's use of payment information is governed by its own privacy policy and security terms.

We may use vendors and service providers for hosting, form handling, email delivery, analytics, support, security, payment processing, and related business operations. These providers receive only the information needed to perform their functions and are not authorized to use personal information for their own marketing.

If you need the current list of processors used for Hakama services, contact us and we will provide the applicable list for the service or pilot you are using.

The website and Hakama services are intended for professional software teams and the people who evaluate or buy tools for them. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact us and we will delete it where required by law.

We may offer email updates or newsletters that you can voluntarily subscribe to. You can stop receiving marketing or newsletter email by using the unsubscribe instructions in the email or by contacting us. We may still send transactional or service messages where needed.

The website may use cookies or similar storage to operate essential features, remember preferences such as language or theme, measure aggregate usage, and protect the website from abuse. Cookies are small text files placed on your device by a web page server.

Most browsers accept cookies automatically, but you can usually change your browser settings to decline or delete them. If you decline necessary cookies, some website features may not work correctly.

Some browsers send Do Not Track or Global Privacy Control signals. These signals are not implemented consistently across the web, but where our website receives a usable opt-out signal, we treat it as a request to refuse non-essential tracking. Regardless of signal support, we limit collection and do not use cross-site advertising trackers.

We do not share personally identifiable information with advertising networks. If Hakama later runs paid advertising, we may use aggregated and non-identifying information to understand campaign performance, but we will not sell personal information or disclose form submissions for ad targeting.

We may disclose information to affiliates or successor entities where needed to operate Hakama, provide related services, or complete a business transition. Any affiliate that receives personal information is expected to handle it in line with this Privacy Policy or equivalent privacy obligations.

The website may link to third-party websites we do not own or control. We are not responsible for the privacy practices of those websites. Review the privacy statements of any third-party site before providing personal information there.

We use reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, use, modification, and disclosure. These safeguards may include encryption in transit, access controls, least-privilege permissions, logging, and vendor review.

No internet or wireless transmission can be guaranteed to be completely secure. You acknowledge that security and privacy limits exist outside our control, even when reasonable safeguards are in place.

If we become aware that personal information has been compromised, we will investigate and take reasonably appropriate measures. Where notice is required by law or where we believe there is a meaningful risk of harm, we will notify affected individuals and relevant authorities as required.

We may disclose information we collect, use, or receive if required or permitted by law, such as to comply with a subpoena, court order, lawful government request, or similar legal process. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to security issues.

We may update this Privacy Policy from time to time. When we do, we will revise the last-updated date on this page. Continued use of the website or services after an updated policy is posted means the updated policy applies from that point forward.

By using the website or Hakama services, you acknowledge that you have read this Privacy Policy and agree to its terms. If you do not agree with this Privacy Policy, do not use the website or services.