Privacy Policy

What we collect

HugeWho stores account identity, work profiles, projects, saved AI-site links, notes, prompts, support conversations, preference choices and service activity that you create. We also process limited technical records such as session, security, device, browser and request information needed to operate and protect the service.

• We never ask for or intentionally store passwords for other sites, API keys, recovery codes, payment-card details, session cookies or secret tokens.
• Account labels and login URLs are reminders only; they are not a password vault.
• Please do not place confidential client data, government identifiers or another person’s sensitive information in a note or prompt unless you have authority and a genuine need.

Why we use it

We use member data to provide the workspace, explain recommendations, operate support, protect the service and meet legal obligations. Optional analytics, marketing and functional personalization have separate controls.

• Private profiles and workspace data are not sold.
• Commercial relationships never change organic recommendation scores.
• External AI provider sharing remains off unless a later, explicit and controlled feature obtains consent.

Service providers and international processing

HugeWho may use carefully selected infrastructure, email, security, storage and support providers to run the service. They should receive only the information needed for their task and act under appropriate confidentiality and security terms. Some providers may process data outside your country; applicable safeguards and provider details must be reviewed before each production integration is enabled.

• HugeWho does not authorize a service provider to sell private workspace data.
• A link to an external AI tool does not mean HugeWho sends your workspace content to that tool.
• If external model processing is introduced, the product must identify the provider, purpose and controls before information is sent.

Your controls

The Privacy Center lets members see effective settings, change optional choices, download workspace data, request access or correction, restrict processing, object, or start deletion.

• Young-teen accounts receive stronger default restrictions.
• Assistant memory can be paused, reviewed and deleted.
• Consent changes are recorded with a policy version for accountability.

Retention and security

Active workspace data remains member-controlled. Revoked sessions and operational-security logs are targeted for 90-day retention; account recovery is 30 days. Backups may retain encrypted copies for a limited recovery cycle. Financial, fraud-prevention and governance evidence may be retained longer when law, security or an active dispute requires it.

• Sessions use secure HTTP-only cookies and sensitive tokens are hashed.
• Staff governance actions are audited.
• No internet service can promise absolute security. Incidents follow triage, containment, investigation, required notification and lessons-learned steps.

Children and young members

HugeWho is not intended for children under 13. Members aged 13–15 receive restricted personalization and no advertising profiling. A parent, guardian or school should not create a young person’s account without checking the rules that apply where they live.

Contact and requests

Use the signed-in Privacy Center for accountable requests, or email support@hugewho.com when you cannot access the account. Security, privacy and deletion matters receive human ownership and a visible status. HugeWho may need to verify identity before disclosing, correcting or deleting account data.