Privacy Policy
Last updated 10 August 2026. Plain-language summary first, the legal text after.
In plain language
The legal text
Hushward (“we”, “us”, “our”) operates the Hushward platform. For data-protection purposes, Hushward is the controller of personal information collected through this service. You can reach our team at hushward@polsia.app.
Account data. When you create an account, we collect your email address, display name, and authentication credentials. We also collect optional profile fields you choose to fill out, such as your organization name.
Scan inputs. To run a broker scan on your behalf, you provide the identifiers we need to look you up: name, aliases, prior locations, age range. We use these only to query broker sites and are deleted on request.
Service records.We log the actions the platform takes on your behalf — which DSAR was filed, when, under which statute, and the response or its absence — so you have a complete audit trail.
Billing. Paid accounts are billed through Stripe. We receive your billing email, plan tier, and invoice history; card numbers are held by Stripe and never touch our servers.
Operational telemetry. Standard server logs (IP address, user agent, request path) are kept for security and debugging. These are short-retention and never sold.
We process your information to operate the service, file requests on your behalf, maintain an accurate audit trail, send service notifications, and prevent abuse. Legal bases under GDPR Article 6 are performance of contract (Articles 6(1)(b)), legitimate interest in security and product improvement (6(1)(f)), and your consent where applicable (6(1)(a)).
We do not use your information for automated decision-making that produces legal effects on you.
We share data only with the subprocessors necessary to run the service: cloud hosting (database and compute), email delivery, payment processing, and authentication. A current list is available on request.
We do not sell, rent, or trade personal information to third parties for their own purposes. We disclose information to authorities only where compelled by valid legal process, and we will notify you before responding unless we are legally prohibited from doing so.
Hushward stores data in regions chosen to minimize transfer friction for our users. Where personal data is transferred outside your jurisdiction, we rely on Standard Contractual Clauses or equivalent mechanisms and apply additional safeguards (encryption in transit and at rest, access controls, subprocessors bound by data-processing agreements).
We keep your account data while your account is active. Scan inputs and per-request records are kept for the duration necessary to maintain an accurate audit trail, typically the lifetime of the account plus 24 months, unless a longer retention is required by law. On account deletion, we erase personal data within 30 days, except for records we must keep for legal or accounting reasons.
Depending on where you live, you have the right to access, correct, delete, or export your personal information; to object to or restrict certain processing; and to lodge a complaint with your data-protection authority. To exercise any of these rights, email hushward@polsia.app — we respond within 30 days.
We protect your data with encryption in transit and at rest, role-based access controls, per-user query scoping, and continuous monitoring. If a security incident affects your personal information, we notify you without undue delay.
Hushward is not directed at children under 16, and we do not knowingly collect personal information from them.
When we make material changes, we notify active account holders by email and post the new date at the top of this page. Non-material edits (typos, clarifications) are reflected in the last-updated date.