Legal

Privacy Policy

Last updated: 23 June 2026

This policy explains what personal data Hiyya.ai collects, why, how we look after it, and the rights you have over it. We keep data collection to the minimum we need to help your business.

1. Who we are

Hiyya.ai (“we”, “us”) is Hiyya.ai Ltd, a company registered in England & Wales (no. 16275501), registered address 309 Hoe Street, Walthamstow, London, United Kingdom, E17 9BG. We are the data controller for the personal data described here. For any privacy question, contact info@hiyya.ai.

2. What we collect

Information you give us through the AI Business Review and contact forms: your name, email, business name, website, and the answers you provide about your business.
Information about your website, where you ask us to review it: publicly available pages and a screenshot of your homepage, used to prepare your review.
Technical information: basic details such as your browser type and the page you came from, plus locally-stored progress so you can resume your review.

3. How we use it

To produce your personalised AI Business Review, diagnosis and recommendations.
To contact you about your enquiry, send your review, and arrange a call.
To improve our service and keep it secure.

Our lawful bases are your consent (which you give in the review) and our legitimate interest in responding to enquiries and running our business.

4. The tools we share data with

We use a small number of trusted providers (processors) to run the service:

Supabase — secure database and authentication that stores your review (hosted in the EU).
Resend — sends the confirmation and notification emails.
Microlink / Thum.io — generate the screenshot of your website (only when you consent to a website review; only your public URL is sent).

We never sell your data, and we only share it with these providers so they can perform their service to us.

5. How long we keep it

We keep enquiry and review data for as long as needed to follow up and provide our services, and no longer than 24 months after our last contact, unless you ask us to delete it sooner.

6. Your rights

Under UK GDPR you can ask us to access, correct, delete or restrict your data, object to processing, or receive a copy to reuse. To exercise any right, email info@hiyya.ai. You also have the right to complain to the Information Commissioner's Office (ICO).

7. Cookies & local storage

We use essential local storage to save your review progress and keep you signed in. We do not use advertising or third-party tracking cookies.

8. Changes

We may update this policy from time to time; the date above shows the latest version.

This is a starting template tailored to how Hiyya.ai works. Replace the [bracketed] details and have it reviewed by a qualified professional before relying on it.