Privacy Policy

Hgraph, Inc. (“Hgraph,” “we,” “us,” or “our”) is incorporated in the State of Delaware and operates the website located at hgraph.com (“the Website”) and related API services (collectively, “the Services”). This Privacy Policy describes how we collect, use, and share information about you when you visit and interact with our Website and Services. By using the Services, you agree to the collection and use of information in accordance with this policy.

Information Collection and Use

We collect information from you when you use our contact forms, create an account, interact with our API, and through cookies and similar technologies. The types of information we may collect include:

• Account Information: Your name, email address, and other details you provide when you create an account or contact us through our Website.
• Usage and API Data: Information about how you access and use the Services, including API call volume, endpoints accessed, request timestamps, and error logs. This data is used for service delivery, billing, and to maintain platform integrity.
• Cookies and Device Data: Data collected automatically when you visit the Website, including your computer’s Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Website that you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.

Use of Data

The information we collect may be used in the following ways:

• To provide, operate, and maintain our Website and Services
• To manage your account, authenticate access, and deliver API services
• To monitor usage patterns and enforce rate limits and acceptable use
• To understand how users interact with our Website and Services
• To communicate with you, including responding to your inquiries, sending service notifications, and providing updates about changes to our platform
• For analytics purposes, to improve our Website and Services
• To detect, prevent, and address technical issues, fraud, or abuse

Sharing of Data

We use third-party service providers, including analytics platforms, cloud hosting providers, payment processors, and email newsletter providers, to support our operations. For example, if you subscribe to our newsletter, your email address is shared with our newsletter provider for delivery purposes. These third parties have access to your Personal Data only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.

We may also disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Data Retention

We retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Usage and API logs are retained for a reasonable period to support service delivery, troubleshooting, and compliance. We will retain and use your data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

When your account is canceled or deleted, we will remove or anonymize your Personal Data within a reasonable timeframe, except where retention is required by law.

Your Rights

Depending on your jurisdiction, you may have certain rights regarding your Personal Data, including:

• The right to access the Personal Data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your data
• The right to object to or restrict certain processing of your data
• The right to data portability

To exercise any of these rights, please contact us at the email address below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). If you are located in the European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR). Please contact us for more information about how these laws may apply to your use of our Services.

Cookies

We use cookies and similar tracking technologies to track the activity on our Website and hold certain information. The types of cookies we may use include:

• Essential Cookies: Required for the Website to function properly, such as session management and authentication.
• Analytics Cookies: Used to understand how visitors interact with the Website, helping us improve its design and functionality.
• Preference Cookies: Used to remember your settings and preferences.

You can control or disable cookies through your browser settings at any time. Please note that if you choose to block certain cookies, some parts of the Website may not function properly.

Links to Other Sites

Our Website may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

Our Website and Services are not directed at individuals under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us so that we can take the necessary steps to remove that information.

Security

We take the security of your data seriously and implement commercially reasonable administrative, technical, and organizational measures to protect your Personal Data. These measures include encryption of data in transit, secure storage practices, and access controls limiting who within our organization can access your data.

However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. We encourage you to protect your API key and account credentials and to contact us immediately if you suspect any unauthorized access.

International Data Transfers

If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our Services, you consent to the transfer of your information to the United States.

For users in jurisdictions that require specific data transfer mechanisms (such as the European Economic Area), we will take appropriate steps to ensure that your data is transferred in compliance with applicable law.

Data Processing Agreements

If your organization requires a Data Processing Agreement (DPA) to comply with applicable data protection regulations, please contact us. DPAs are available upon request for qualifying Enterprise customers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the Effective Date above. For material changes, we will make reasonable efforts to notify you via email or through a notice on our Website prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us by email at contact@hgraph.com.

Governing Law

This Privacy Policy and any disputes arising from or in connection with it shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions.