Security, Privacy & Data Handling

Authentication & access security

Sign in with OAuth via Google, Microsoft, or Apple — we never ask you to create or store a separate password.
OAuth refresh tokens and integration credentials are encrypted at rest.
Strict tenant isolation with row-level security so one workspace can never read another's data.
Least-privilege access controls across owner, admin, and member roles.

We do not use your product data to train AI models, and we never sell your data.
Data retention is limited to what your reports and analytics require; you can request deletion at any time.
Our practices are aligned with GDPR principles for lawful, transparent processing.
When you connect Google Analytics, we request read-only access and use it solely to attribute AI referral traffic to your products.
Full details are in our Privacy Policy and data processing statement.

Payments are processed securely by Stripe. We never store your full credit card number.
You can cancel anytime. Refund handling follows the policy documented in our Terms of Service.

Cross-device access is tied to your identity provider, so you can restore access securely without losing your workspace.
Account recovery is handled through your Google, Microsoft, or Apple account's own recovery flow.

Real human support. Email support@hasmord.com or use the in-app help center. We aim to respond quickly to every request.