This Privacy Policy explains how Hu collects, uses, stores, and protects information when merchants and teams use our platform—including connected messaging channels and optional e-commerce integrations (e.g. Shopify, Tiendanube).
Data Controller
Hu is operated from the Republic of Argentina. For questions about this policy or your personal data, contact us at [email protected].
Information We Collect
Connected Accounts
- Professional account identifiers
- Public name and profile picture
- Associated platform (Instagram, Facebook, WhatsApp, Gmail, Telegram, Shopify, Tiendanube, MercadoLibre, Discord, Slack)
Messages and Conversations
- Direct messages from all connected channels
- Comments and replies
- Message metadata (timestamps, channel, sender, sentiment)
- Conversation summaries generated by AI
E-commerce Integrations (e.g. Shopify, Tiendanube)
When a merchant connects an online store, we may process data made available through that integration—such as orders, customers, products, and checkouts—only as needed to provide the features the merchant enabled (e.g. inbox context, notifications, catalog sync), and in line with the permissions granted during install.
Technical Information
- Webhook event data
- Technical logs for diagnostics and security
- Session cookies
- Turnstile anti-bot verification data
Legal Basis for Processing
We process personal data based on: (a) performance of the contract between Hu and the merchant; (b) legitimate interest in providing, improving, and securing the service; and (c) consent, where specifically requested (e.g. optional AI features). You may withdraw consent at any time without affecting the lawfulness of prior processing.
How We Use the Information
- Receive and manage customer messages across channels
- Enable centralized conversation handling
- Assist replies and generate insights using artificial intelligence
- Synchronize and display e-commerce data the merchant chose to connect
- Score and classify contacts based on configurable rules
- Send automated notifications on behalf of the merchant (e.g. order updates via WhatsApp)
- Comply with legal and platform requirements
Artificial Intelligence and Agents
Hu uses artificial intelligence—including optional agents—to assist customer service and sales workflows. These features support human operators; they are not intended to replace legal, financial, or other high-stakes decisions without appropriate human oversight. Data processed by AI features may be sent to vetted third-party AI providers under appropriate agreements. AI operates within authorized accounts and applicable platform policies (e.g. Meta, WhatsApp, Shopify).
Merchants and End-Customers
Merchants who use Hu are generally responsible for their own storefronts and for informing their customers how personal data is processed. Hu processes data on behalf of the merchant to deliver the requested service. If you are a shopper and have questions about a specific store, please contact that merchant directly.
Data Sharing and Subprocessors
Hu does not sell or rent personal data. We use vetted infrastructure and service providers (e.g. cloud hosting, database, scheduling and sales-contact tools such as Calendly and Google, and—where applicable—AI providers) to run the platform. They process data only to deliver the service under appropriate agreements. When the merchant activates integrations such as Zapier, data may also flow to destinations the merchant configures.
Google API Services — Limited Use
Hu's use and transfer of information received from Google Workspace APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising purposes, we do not sell it, and we only access, use, store or transfer it as necessary to provide or improve user-facing features that are prominent in the Hu experience, or as required for security purposes or to comply with applicable law. Human access to Google user data is limited to the cases permitted by that policy.
International Data Transfers
Your data may be processed outside your country of residence by our infrastructure and service providers. We take appropriate safeguards (contractual or otherwise) to protect your data in accordance with applicable law.
Data Retention
We retain personal data for as long as the account is active and for a reasonable period thereafter to fulfill legal obligations, resolve disputes, and enforce agreements. Upon account deletion or merchant request, data is removed within 30 days, except where retention is required by law.
Security
We use industry-standard safeguards including encryption in transit (HTTPS), secure hosting with encryption at rest, HMAC verification for webhooks, and optional two-factor authentication for user accounts.
Your Rights
Depending on your jurisdiction, you may have the right to: access your personal data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; withdraw consent; and lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at [email protected].
Cookies
We use essential cookies for session management and anti-bot protection (Turnstile). We do not use our own marketing or analytics cookies. When you book a meeting from our site, the calendar is provided by Calendly and shown as an embed: that service may set its own cookies, subject to Calendly's privacy policy. Third-party platforms connected by the merchant may also set their own, subject to their respective policies.
Updates to This Policy
Hu may update this policy from time to time. Material changes will be reflected here with an updated effective date. Continued use of the service after changes constitutes acceptance of the revised policy.