HILO ("we") is a startup that develops this web application, available at hiloup.com. You can contact us at hello@hiloup.com with any privacy question.
Account data. When you sign in with Google or Microsoft, we receive your name, your email, and the identifier that provider assigns to your account (with Microsoft, also your organization's), and whether the provider guarantees that the email is yours. We also store your sign-up date, your last sign-in date, and your interface language.
Your documents. They are not stored on our servers. They are read and processed in your browser, and saved in two places under your control:
AI queries. When you use a feature that relies on artificial intelligence, the piece of text needed for that operation travels to our server, which sends it to Google Gemini and returns the response to you. That text is not stored: it does not remain in our database or in our logs. We only record the type of operation, the model, how many tokens it used, how many attempts it made, and whether the response was cut off, in order to deduct your hilos and tune the service; these are only numbers, nothing from your text. We use Gemini with a paid account: Google does not use the content of those queries to train its models.
Payments. Payments are processed by Paddle.com Market Limited ("Paddle"), which acts as the seller (Merchant of Record). Your card and billing details are received and handled by Paddle under its Privacy Policy. From Paddle we receive the record of each transaction (identifier, product, amount, currency, date, and your Paddle customer identifier). We do not store any card data: not the number, not the last digits, not the cardholder name, not the expiration date. If Paddle's notice includes them, we discard them before saving anything.
Plan and usage. Your plan, the status and periods of your subscription, your hilos balance, and the detail of how they were used.
Sharing bonus. If you request the monthly bonus for sharing HILO, we record the network you chose and the IP address and browser you requested it from, to prevent it from being claimed more than once.
Problem reports. If you report an error to us, we receive the description you write and technical details of the context (application, screen, browser, window size, plan, language, the internal names of the last actions you took, and the session's recent errors). You can send it signed in or signed out; if you are signed out, you may leave an email so we can reply, and it is optional. Before sending it, we show you exactly what is going to be sent. It never includes the content of your documents. This report is only sent if you ask for it.
Automatic technical errors. When one of the HILO applications has a malfunction, your browser automatically sends a notice to our server, whether or not you are signed in. It includes the application and the screen, the language, the type of browser and system (for example, “Chrome on Windows”), the HILO version, the technical text of the error with its location in our code, and the internal names of the last buttons or screens you went through. Before it is sent, text in quotation marks, email addresses and long numbers are removed. It does not include the content of your documents, the titles of your projects or the names of your files, it is not linked to your account, and it is not stored together with your IP address. Identical errors are grouped under a counter. When the AI returns something the application can’t use, the notice also states the type of problem, the length of the text sent (in characters) and its origin (whether it came from a file, from pasted text or from a project saved in your OneDrive or Google Drive), never its content or its name. We use them only to detect and fix failures.
Welcome fingerprint. The 100 welcome hilos are given only once per Google or Microsoft account. For that, we store an encrypted fingerprint (a cryptographic hash that cannot be reversed) of that account's identifier. It does not contain your name or your email, and it is kept even if you delete your account.
Technical data. Like any web service, our servers and those of our providers receive your IP address and browser data. We use them to make the service work, to limit abuse (for example, too many sign-in attempts), and to diagnose failures.
HILO does not use analytics or advertising tools.
We do not sell your personal data or use it for advertising. HILO does not send you emails: receipts and payment notices are sent to you by Paddle.
HILO does not use its own cookies, neither analytics nor advertising ones. It does use your browser's local storage, which is necessary for the application to work:
Some third parties may set their own cookies when you use a feature that depends on them:
To display the site, fonts from Google Fonts and libraries from the cdnjs (Cloudflare) and jsDelivr services are also downloaded. As with any download, those services receive your IP address.
We do not share your data with anyone else, unless a law or a competent authority requires us to.
Several of these providers process data outside your country, including the United States and the United Kingdom. We use providers that declare transfer mechanisms recognized by data protection regulations, such as standard contractual clauses.
What is deleted automatically, every day, when its period expires:
What is kept for as long as your account exists: your account data, your plan and subscription, your hilos balance, and your payments.
When you delete your account, all of the above is deleted. Of your payments, only the amount, the currency, the date, the product, and the Paddle identifier remain, without any data that identifies you, for 10 years as an accounting record, and then they are deleted. The welcome fingerprint (section 2) is kept so that the welcome hilos are not given again.
The technical logs of our servers are kept for a limited period set by each infrastructure provider. What is in your browser and in your cloud remains until you delete it. Paddle keeps its own records according to its policy.
You can delete your account whenever you want from the application: Settings → Delete my account. When you do:
You can also request it by writing to hello@hiloup.com.
You can request access to your personal data, its rectification, its updating, its erasure, or a copy in a commonly used format, and object to certain processing or ask for it to be restricted. Write to us at hello@hiloup.com: we will respond within the deadlines set by the law that protects you.
If you are in Argentina: the Agency for Access to Public Information (Agencia de Acceso a la Información Pública), as the supervisory authority for Law No. 25,326, has the authority to handle complaints and claims filed regarding noncompliance with personal data protection rules. Access to your data is free of charge at intervals of no less than six months, unless you demonstrate a legitimate interest.
If you are in the European Union or the United Kingdom, you can also lodge a complaint with the data protection authority of your country.
We use encrypted connections (HTTPS), we verify our database's certificate, we limit access to your cloud files to what HILO needs, and we limit the number of requests to curb abuse. No system is 100% secure, but we work to minimize the risks.
HILO is not directed at children under 16, and we do not knowingly collect data from children under that age.
We may update this policy. If the change is significant, we will let you know with a notice in the application. The date above shows the last update.