Privacy Policy

Last updated: March 19, 2026

At Hulo ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at hulotrade.com, including our AI-powered website builder, CRM, scheduling tools, and invoicing features (collectively, the "Service"). By using Hulo, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Information

When you create an account or use our Service, we may collect the following personal information:

  • Full name, email address, and phone number provided during registration
  • Business name, trade type, service area, and other onboarding details used to generate your website
  • Billing information such as credit card details (processed and stored securely by Stripe — we never store your full card number)
  • Customer records, quotes, job details, and invoices you create within the platform
  • Profile photos, business logos, and images uploaded to our Service

Usage Data

We automatically collect certain information when you access or use the Service:

  • IP address, browser type, operating system, and device information
  • Pages visited, features used, time spent on the platform, and referring URLs
  • Interaction data with our AI chatbot, including conversation history within active sessions
  • Error logs and performance data to improve service quality

Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to maintain your session, remember your preferences, and analyze platform usage. See Section 6 below for more details.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including generating your business website using AI
  • Process transactions, send invoices, and manage your subscription billing
  • Enable CRM features such as customer management, quoting, job scheduling, and invoicing
  • Power the AI agent chatbot to help you manage your business through natural conversation
  • Send you transactional emails (invoice delivery, quote delivery, account notifications)
  • Improve and personalize the Service based on usage patterns and feedback
  • Detect, prevent, and address technical issues, fraud, or security concerns
  • Comply with legal obligations and enforce our Terms of Service

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

Third-Party Service Providers

We use trusted third-party services to operate our platform. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect it:

  • Stripe — Payment processing for subscriptions and invoice payments. Stripe handles all payment card data under their own PCI-compliant infrastructure.
  • Supabase — Database hosting, user authentication, and file storage. Your data is stored on Supabase's infrastructure with encryption at rest.
  • Google Analytics — Website traffic analysis and usage metrics. Data is aggregated and anonymized where possible.
  • Google Gemini AI — Powers website generation and AI chatbot features. Prompts and responses are processed in real time and not stored by Google for model training when using API access.
  • Resend — Transactional email delivery for invoices, quotes, and account notifications.

Legal Requirements

We may disclose your information if required to do so by law, or in the good faith belief that such action is necessary to comply with a legal obligation, protect our rights or safety, investigate fraud, or respond to a government request.

Business Transfers

If Hulo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

  • Encryption of data in transit (TLS/SSL) and at rest on our database infrastructure
  • Secure authentication via Supabase Auth with session token management
  • Payment data handled exclusively by Stripe's PCI DSS-compliant systems
  • Row-level security policies ensuring users can only access their own business data
  • Regular security reviews and dependency updates

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any breach.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access — Request a copy of the personal information we hold about you
  • Correction — Request correction of any inaccurate or incomplete data
  • Deletion — Request deletion of your personal information, subject to certain legal exceptions
  • Data Portability — Request your data in a structured, machine-readable format
  • Opt-Out — Unsubscribe from marketing communications at any time using the link in our emails
  • Restrict Processing — Request that we limit how we use your data in certain circumstances

To exercise any of these rights, contact us at privacy@hulotrade.com. We will respond to your request within 30 days.

6. Cookies and Tracking

We use the following types of cookies and tracking technologies:

  • Essential Cookies — Required for the Service to function, including authentication session tokens and CSRF protection
  • Functional Cookies — Remember your preferences such as theme settings and dashboard layout
  • Analytics Cookies — Help us understand how visitors interact with our platform via Google Analytics. These cookies collect aggregated, anonymous usage data.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal, accounting, or compliance purposes.

Business records you create (customers, quotes, jobs, invoices) are retained for the duration of your account and for up to 7 years after account deletion to comply with tax and financial record requirements.

8. Children's Privacy

Hulo is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: