Privacy policy

Privacy at Huegoo.

What we collect, how we use it, and what your rights are. For our security architecture, encryption, and access posture, see Security at Huegoo.

Last updated: May 9, 2026

Overview

This policy describes how Huegoo (we, us) collects, uses, stores, and protects information in connection with our website and product. It applies to visitors to huegoo.com, applicants to the design partner program, and users of the product during early access.

Information we collect

We collect three categories of information:

  • Information you provide directly. When you apply to the design partner program or use the product, this includes your name, work email, company, role, and any free-text context you give us.
  • Content you bring into the product. Briefs, sources (decks, sheets, notes), prompts, and the drafts the product produces in response. You retain ownership of this content.
  • Operational metadata. Basic usage events (page views, feature interactions, error reports) needed to keep the product running and improve it.

How we use information

We use the information we collect to:

  • Provide and operate the product, including generating drafts from your sources.
  • Communicate with you about your account, the design partner program, and material changes.
  • Improve the product through aggregated, de-identified usage analysis.
  • Detect, prevent, and respond to abuse, fraud, and security incidents.
  • Comply with legal obligations.

We do not use your content to train third-party foundation models. Where we use third-party model APIs to generate drafts, we send only what is needed to fulfill the request and rely on enterprise terms that prohibit provider-side training on your inputs.

Where we store data

Your data is stored on infrastructure operated by reputable cloud providers in regions chosen for performance and compliance. We will keep this section updated as our infrastructure grows and we add region options.

Security and infrastructure

Our encryption posture, access controls, tenant isolation, verification architecture, and incident-response process are documented separately on the Security at Huegoo page. That page is the canonical reference for how we protect your data and what reviewers should expect during a vendor security review.

Sharing and disclosures

We share information only in limited circumstances:

  • Service providers. Vendors who process data on our behalf to operate the product (cloud hosting, model APIs, analytics). They are bound by contractual confidentiality and security obligations.
  • Legal and safety. When required by law, valid legal process, or to protect rights, property, or safety.
  • Business transfers. In connection with a merger, acquisition, or sale of assets, with continued protection of your data.

We do not sell personal information.

Data retention

We retain data only as long as necessary for the purposes described above or as required by law. You can request deletion of your account and associated content at any time. Some operational logs may be retained for a limited period to support security and legal obligations.

Your rights

Depending on where you are located, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, see Contact below. We will respond within the timeframes required by applicable law.

Cookies and tracking

We use a small number of essential cookies to keep you signed in and remember your preferences (for example, theme). For analytics, we use a privacy-friendly analytics provider that does not track you across other sites and does not use cookies for cross-site identification.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, for active users, notify you through the product.

Contact

For privacy questions or to exercise your rights, reach out through the design partner application form and indicate that your message is a privacy request. We will respond within the timeframes required by applicable law. A dedicated privacy contact channel will be added as the company matures past early access.