Privacy isn't a promise here. It's the architecture.
This policy describes what hachiflow collects, why, and what happens to it. It is written to be read, not skimmed past. If anything is unclear, email hello@hachiflow.com and a human will answer.
Effective date: July 29, 2026
This policy is pending review by legal counsel. The facts in it are accurate today; the phrasing may be refined after review, and any substantive change will be announced as described below.
Plain-English summary
- Join the waitlist and we store your email, a timestamp, your country, and the referring page. Nothing else, and only to contact you about access.
- Our analytics run on a first-party cookie, no ad trackers, no fingerprinting, and it is never shared with anyone else's site. When you subscribe, it also tells us which visit led to the purchase, without seeing your name, email or card details.
- Sign-in and payments are handled by WorkOS and Stripe. We never see your password or your card number.
- Ask and we hand you everything we hold for you, and delete it within 30 days of cancellation.
Exactly this. Nothing more.
hachiflow collects the minimum needed to run a waitlist today and a managed hosting service tomorrow. Each category below states what is collected, where it is stored, and why.
Waitlist signups
When you join the waitlist we store your email address, a timestamp, your country (derived at the Cloudflare edge, not from your precise location), and the referring page.
This lives in Cloudflare KV and is used solely to contact you about access. A welcome email is sent via Cloudflare Email Service. No marketing list, no third-party sharing.
Site analytics
hachiflow.com and app.hachiflow.com use DataFast, a privacy-focused analytics service, for page analytics and a small set of conversion goals: signing up, picking a plan, starting checkout, and completing a purchase. A first-party cookie lets DataFast count a visit to the marketing site and a signed-in session in the product as one visitor, so a purchase can be credited to the page that brought you here.
There are no advertising trackers and no cross-site profiles. A visitor is a random id, never your name or email, and DataFast never receives your card details.
Sign-in (when the service is live)
Sign-in is processed by WorkOS AuthKit using Google, Microsoft, or email. We receive your verified email address and use it for one thing: determining which workspace you belong to.
Anyone with a verified email address can create a workspace. The domain only determines what sign-in can offer: on a company domain the first arrival takes the owner seat. A consumer domain such as gmail.com gets a private workspace that grows by invite link. Every member joins by invite, we never add anyone ourselves, and we never see or store passwords.
Billing (when the service is live)
Payments are processed by Stripe. Card numbers go to Stripe directly and never touch our systems.
What we store: your subscription id. That is the whole billing record on our side.
Operational logs
We keep operational logs and metrics via Cloudflare observability tooling: request logs, error traces, and service health metrics.
These exist to keep the service up and debuggable, not to profile anyone, and they age out on short retention windows.
The list that matters most.
Some things are off the table by design, not by policy alone.
We do not sell your data
Not your email, not your usage patterns, not aggregate "insights". No data broker has ever heard of you through us, and none will.
We do not run ad tracking
No advertising pixels, no retargeting, no cookie shared with anyone outside hachiflow. The analytics we run stay on hachiflow.com and app.hachiflow.com and cannot follow you anywhere else.
We do not train models on your content
Your workspace content is never used to train, fine-tune, or evaluate any machine learning model, ours or anyone else's.
Why we are allowed to process what we process.
Where European data protection law (GDPR and equivalents) applies, we rely on the following bases:
- Consent: joining the waitlist. You gave us your email for one purpose and can withdraw at any time by asking us to delete it.
- Performance of a contract: authentication, billing, and hosting your workspace once you are a customer. We cannot provide the service without processing these.
- Legitimate interests: first-party site analytics and operational logs, processed minimally to run and improve a service you asked for, in ways that do not override your rights.
- Legal obligation: the rare case where law requires us to retain or disclose specific records.
Data has a shelf life.
- Waitlist entries are kept until you become a customer or ask to be removed, whichever comes first.
- Workspace content is kept for as long as your subscription is active, and deleted within 30 days of cancellation.
- Billing records (the subscription id) are kept for the life of the subscription plus what tax and accounting law requires.
- Operational logs and metrics age out automatically on short retention windows measured in days to weeks, not years.
Access. Export. Delete. One email away.
You can ask us at any time to tell you what we hold about you, hand you a full export, or delete it. Email hello@hachiflow.com from the address in question and we will act on it promptly, and confirm when it is done.
For workspace customers, that means everything we hold for you, in full and in usable form. Deletion is completed within 30 days of cancellation. If you are in a jurisdiction that grants additional rights, such as rectification, restriction, or portability under the GDPR, those apply too, through the same email address.
US company, global providers.
hachiflow is a US company, and some subprocessors (Cloudflare, Stripe, WorkOS, DataFast) are US companies operating global infrastructure, so limited personal data such as your email address may be processed in the United States under those providers' safeguards.
The exact transfer mechanisms (standard contractual clauses and related safeguards) for each subprocessor are being documented as part of the pending counsel review noted above.
Who touches your data, and why.
The complete list. If it ever changes, this page changes first.
| Subprocessor | Purpose | Location |
|---|---|---|
| Cloudflare | Website hosting, waitlist storage (KV), welcome email delivery, operational observability | Global edge, US company |
| Hetzner Online GmbH | Hosts the Waggle control plane and Waggle hosted machines | Germany (EU) |
| Stripe | Payment processing | US, global infrastructure |
| WorkOS | Authentication (sign-in via Google, Microsoft, or email) | US |
| DataFast | Site analytics, conversion goals and payment attribution | Privacy-focused analytics provider |
When this page changes, you'll know.
We will update this policy as the service evolves, and the effective date at the top will change with it. If a change is substantive, meaning it affects what we collect or what we do with it, we will notify waitlist members and customers by email before it takes effect. We will not quietly weaken this policy.
Questions? A human answers.
Privacy questions, rights requests, or anything this page did not cover: email hello@hachiflow.com. The people answering are the people running hachiflow.