Privacy Policy
Effective / Last updated: 2026-09-23
This Privacy Policy explains how Hassa LLC collects, uses, discloses, stores and otherwise processes personal information when you use Hassa.
1. Information We Collect
- Information you provide, including name, email, account and profile data, support communications, prompts, uploads, project content, references, images, videos, audio, voices and generated assets.
- Information collected automatically, including IP address, browser and device information, operating system, approximate location derived from IP, timestamps, session activity, feature usage, model selections, generation events, errors, performance and security logs, and cookie or similar-technology information.
2. AI Content and Uploaded Media
Hassa may process prompts, photographs, images, video, audio, voices, music, characters, project files and other material to perform the generation, editing, analysis or transformation you request.
Face or voice information may receive special protection in some jurisdictions. Unless separately disclosed for a specific feature, Hassa does not use face or voice content for identity verification.
3. Payments
Payments may be processed by third-party payment providers such as Stripe. Hassa generally does not receive or store your complete payment-card number. We may receive transaction status, billing country, transaction identifiers, subscription status, plan, credits, payment history and limited billing information.
4. How We Use Information
- Provide, operate and secure Hassa; create and manage accounts; authenticate users; process AI generations, projects, storage, subscriptions, credits and payments.
- Provide support and service communications; prevent fraud, abuse and security incidents; diagnose errors; maintain infrastructure; improve product functionality; enforce policies; and comply with legal obligations.
5. AI and Infrastructure Providers
Depending on the model or feature selected, Hassa may transmit Inputs and related technical information to third-party AI and infrastructure providers necessary to process the request. Not every provider receives every Input.
Providers may process information in jurisdictions outside your country and may have different retention and model-improvement practices depending on the product, API, agreement or processing environment used by Hassa.
6. Training and Model Improvement
Hassa does not acquire ownership of your project content merely because you use the Services.
Where Hassa or a third-party provider would use customer content for model training, fine-tuning or another purpose beyond providing, securing and supporting the Services, that processing will be handled in accordance with applicable law and contractual requirements. Hassa does not make a blanket representation that every third-party provider follows identical retention or training practices.
7. Legal Bases
Where GDPR, UK GDPR or similar laws apply, Hassa may rely on performance of a contract, legitimate interests, compliance with legal obligations and consent where consent is required. Processing prompts and uploads is generally necessary to perform the generation or editing service you request.
8. How We Share Information
Hassa may disclose information to service providers that help operate the Services, including AI model providers, cloud hosting and storage, database, payment, authentication, security, analytics, communications and customer-support providers, as well as professional advisers.
Hassa may also disclose information when reasonably necessary to comply with law, legal process, court orders or valid governmental requests, or to protect Hassa, users or others. Information may transfer as part of a merger, acquisition, financing, restructuring or sale of assets subject to applicable law.
9. Sale and Sharing
Hassa does not sell personal information for monetary consideration as part of its ordinary business model. Some privacy laws define sale or sharing more broadly, including certain advertising or cross-context behavioral advertising activities.
If Hassa engages in activity legally defined as sale or sharing, Hassa will provide notices and opt-out mechanisms required by applicable law.
10. International Transfers and Retention
Hassa operates internationally and information may be processed or stored outside your jurisdiction, including in the United States and other countries where Hassa or its providers operate. Where required, Hassa will use recognized safeguards for international transfers.
Hassa retains personal information for as long as reasonably necessary to provide the Services, preserve projects where applicable, complete transactions, maintain security, prevent fraud, resolve disputes, comply with law and maintain legitimate business records. Different categories may have different retention periods and information may remain temporarily in backups.
11. Security
Hassa uses reasonable administrative, organizational and technical safeguards designed to protect information. No electronic transmission, storage system, network or cloud service can be guaranteed to be completely secure.
12. Your Privacy Rights
Depending on where you live, you may have rights of access, correction, deletion, portability, restriction, objection, withdrawal of consent, and opt-out rights relating to certain sales, sharing or targeted advertising. Some rights apply only under particular laws or circumstances.
Privacy requests may be submitted to privacy@hassa.ai. Hassa may need to verify your identity before completing a request.
13. California and Other U.S. States
Residents of California and certain other U.S. states may have additional privacy rights where the relevant law applies to Hassa and the particular processing activity. Hassa will recognize legally required browser-based opt-out preference signals, such as Global Privacy Control, where applicable.
14. Cookies and Similar Technologies
Hassa may use cookies, local storage, SDKs and similar technologies for authentication, security, preferences, analytics and other functions. Where required by law, non-essential technologies will not be activated until the required consent is provided. See the Cookie Policy for more information.
15. Children's Privacy
Hassa is intended for adults. You must be at least 18 years old to create or use a Hassa account. Hassa does not knowingly offer the Services to children under 18.
If you believe an ineligible minor has provided information to Hassa, contact privacy@hassa.ai.
16. Contact
Hassa LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States
Privacy: privacy@hassa.ai
Legal: legal@hassa.ai