Privacy Policy

1. Introduction

HAS Platform LLC (“HAS Platform”, “we”, “us”, or “our”) operates hasplatform.com and related software products including FlowDispatch and TradeReach. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

We collect the following categories of information:

• Account information — name, email address, company name, and password when you register.
• Business profile data — trade type, phone number, website, and other details you provide during onboarding.
• Contact data — names, email addresses, and company details of your business contacts that you add to TradeReach.
• Gmail data — when you connect your Gmail account, we access your email only to send outreach emails on your behalf and detect replies. We do not read, store, or analyze any emails outside of threads initiated by our platform.
• Usage data — pages visited, features used, and actions taken within the platform for product improvement purposes.

3. How We Use Google User Data

HAS Platform’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we use Gmail access to:

• Send outreach emails to your contacts using your Gmail account
• Detect replies to those emails so you can respond promptly
• Generate draft replies for your review

We do not use Gmail data to serve advertising, sell to third parties, or for any purpose other than the features described above. Gmail access tokens are stored encrypted and never shared.

4. Data Storage and Security

All data is stored on Supabase (PostgreSQL) infrastructure hosted in the United States. We use industry-standard encryption in transit (TLS 1.2+) and at rest. OAuth tokens are stored securely and refreshed automatically. You can revoke Gmail access at any time from your Google Account permissions page.

5. Data Retention

We retain your data for as long as your account is active. If you cancel your account, we will delete your data within 30 days upon written request to privacy@hasplatform.com. Email logs and contact records are deleted immediately when you remove them from the platform.

6. Third-Party Services

We use the following third-party services:

• Supabase — database and authentication
• Vercel — hosting and deployment
• Google Gmail API — email sending and reply detection
• Stripe — payment processing (no card data stored on our servers)

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Revoke Google OAuth access at any time
• Export your contact and campaign data

To exercise any of these rights, email privacy@hasplatform.com.

8. Children’s Privacy

HAS Platform is intended for business use by adults aged 18 and older. We do not knowingly collect data from anyone under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Contact us at privacy@hasplatform.com or write to: HAS Platform LLC, United States.