Privacy policy

Haokir values privacy and data autonomy. This policy applies to personal data we process when you use Haokir, Hydite, Cauiril, Vtslx AO, and related websites, applications, and cloud services. We design data flows around data minimization, clear purposes, and verifiable controls, and offer local, self-hosted, and hybrid deployment choices.

1. Scope

This policy applies when Haokir acts as a service provider for an individual, developer, or organization. For content that enterprise and developer customers submit through APIs, private deployments, or managed workspaces, the organization is generally the data controller; we process that data according to the applicable customer agreement, instructions, and deployment settings.

2. Data we process

Depending on the Service and settings, we may process account and contact data; prompts, files, code, project context, tool results, and feedback; device, log, and usage data; transaction data; and security signals needed to protect the Services. Do not submit sensitive data about others without a lawful basis, appropriate authorization, and suitable safeguards.

3. How we use data

We use data to provide, verify, maintain, and improve the Services; administer access and billing; prevent fraud, abuse, and security incidents; respond to support requests; comply with legal obligations; and, where permitted by settings and agreements, improve models, products, and reliability.

Where a product provides the control, individual users may choose whether content is used for model improvement. For enterprise, self-hosted, or explicitly training-disabled data, we follow the relevant product settings and contractual commitments. We do not sell personal data or sell or share it for cross-context behavioral advertising.

4. Sharing and transfers

We share data only as needed to provide the Services, meet legal obligations, protect rights and safety, or when authorized by you or your organization. Recipients can include bound service providers for infrastructure, payment, support, or security; organization administrators; third-party tools you enable; and authorities where required by law.

Data may be processed outside your region. Where required, we use appropriate safeguards for international transfers and seek to align processing location, access scope, and retention with the Service configuration.

5. Retention and deletion

We retain data only for as long as necessary for the purposes in this policy, legal obligations, dispute resolution, and agreement enforcement. After account closure, we delete or de-identify relevant data in accordance with product settings, law, and backup cycles. Some security, tax, or audit records may need to be retained longer.

6. Your rights and choices

Where applicable law provides, you may have rights to access, correct, delete, export, restrict, or object to certain processing, and to withdraw consent. You can update account data, manage in-product privacy settings, opt out of marketing, or submit a request through our website support channel.

7. Security and self-hosting

We use risk-appropriate technical and organizational measures, including access controls, protections for data in transit and at rest, least privilege, audit logging, and incident response. No system is perfectly secure; use strong credentials, manage keys carefully, and report suspected activity promptly.

Haokir supports local, self-hosted, and hybrid architectures. These modes can give organizations more direct control over storage location, model runtime, and administrative boundaries, while requiring them to secure their own infrastructure, permissions, and backups.

8. Children

The Services are not directed to children below the minimum digital-consent age in their location. If you believe a child has provided personal data without appropriate consent, contact us through the support channel on our website.

9. Updates and contact

We may update this policy as products, technology, law, or security practices change. We will communicate material changes through this page, in-product notice, or another reasonable method. For privacy questions or data requests, contact us through the support channel published on our website.