Privacy Policy

Who answers for your data

Hiro Digital Solutions is the controller for the data collected on this website. For anything to do with it, including withdrawing a consent, write to hello@hiro-ds.com and a person will answer.

What we collect, and where from

• Contact form: your name, your email, your company and whatever you write to us.
• HIRO Hostess demo gate: your name, your restaurant, your email and your phone. Also whether you ticked the box to receive product news, along with the exact text you accepted and the date.
• The demo conversation: what you type while talking to Alba. It goes to the HIRO agent and to the model provider behind it. We do not store the conversation on the website: only your access pass and the message counter, for six hours.
• Technical data: a hashed version of your IP address to stop abuse, and the errors the site produces while you browse. If you accept cookies, usage analytics as well.

Why we are allowed to

• To answer you and give you access to the demo: because you are asking us to. Leaving your details there is the request, and without them we cannot reply.
• To email you product news: only with your consent, the tick box, which starts unticked and is optional. The demo works the same without it, and you can withdraw it whenever you want.
• To keep the site up and free of bots: our legitimate interest in it working. That is what justifies hashing the IP and counting messages.
• For analytics and non-essential cookies: your consent, the one in the cookie notice. Until you give it, they do not load.

Who else sees it

• We do not sell data and we do not hand it to anyone for their own use. To operate we use these providers, who process it on our behalf and under contract:
• Cloudflare: hosts the site and serves it through its network.
• Supabase: stores a record of the emails we send: recipient, subject and the status the provider reports for each one. If you use the contact form, that includes your email and, in the subject of the notice the team receives, your name and your restaurant.
• Upstash: the demo counters and pass.
• Resend: sends the emails.
• Anthropic: the model that reasons in the Hostess demo.
• Railway: hosts the Hostess agent that runs the demo conversation.
• Sentry: collects the site's errors.
• Google Analytics and Microsoft Clarity: usage analytics and, in Clarity, session recordings, only if you accept cookies. The details are in the cookie policy.
• Several of them are in the United States, so there is an international transfer. It relies on the standard contractual clauses approved by the European Commission.

How long we keep it

• Enquiries and leads: twenty-four months from the last contact. If we end up working together, for as long as that relationship lasts and the tax periods that follow it.
• The proof of your marketing consent: while you keep it and three years after you withdraw it. We keep it precisely so we can show what you accepted and when.
• The demo pass and its message counter: six hours.
• The hashed IP that stops abuse: twenty-four hours.

What you can ask us for

• Access to the data we hold about you.
• Correction of anything wrong.
• Deletion.
• Restriction of, or objection to, our processing.
• Portability, in a readable format.
• Withdrawal of a consent whenever you want, without affecting what was done before. If it is the product news one, just say so and we stop writing. For cookies, use the cookie policy.
• And if you think we got it wrong, a complaint to the Spanish Data Protection Agency, at aepd.es. We would rather you told us first, but it is your right and you do not have to come through us.

If you are a guest of a restaurant that uses HIRO

Then this policy is not yours. There the controller is the restaurant, not us: it decides what data is processed and what for, and HIRO acts as processor, handling it on the restaurant's behalf and on its instructions, under the contract that article 28 requires. To access, correct or delete your data, go to the restaurant. If you write to us, we will put you in touch with them.

Changes

If we change this policy, the date at the top changes. And if the change affects a consent you already gave us, we do not treat it as inherited: we ask you again.