Privacy Policy

1. Introduction

HAPIS — HAP Intel Systems is the trade name under which Oswaldo Hernández Arrambide operates an independent RF engineering sole-proprietorship based in Guadalajara, Jalisco, México (“HAPIS”, “we”, “our”, or “us”). We operate hapintel.com and hapintel.store (collectively, the “Services”). This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and your rights with respect to that data.

We are committed to processing personal data in accordance with the applicable privacy laws of the jurisdictions where we operate, including (where applicable) the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), and the data-protection law of México (LFPDPPP).

2. Data Controller

For the purposes of GDPR and similar regulations, the data controller is:

HAPIS — HAP Intel Systems
Guadalajara, Jalisco, México
Email: contact@hapintel.com

3. Information We Collect

3.1 Information you provide directly

• Account information — name, email address, organization (when you register or purchase a plan).
• Payment information — billing address and payment-method metadata. Full card numbers are processed and stored exclusively by Lemon Squeezy; HAPIS does not see or store card numbers.
• Communications — content of emails, support tickets, and forms you submit to us.

3.2 Information collected automatically

• Usage data — anonymized page-view analytics via Vercel Web Analytics, which does not use cookies and does not track individual users across sites.
• Log data — IP address, user agent, request timestamps, endpoint accessed, and response status, retained for security, abuse prevention, and troubleshooting.
• API request metadata — for each call to the Link Budget API and related Services, we may log the request parameters and response summary for billing, rate limiting, debugging, and abuse prevention.

3.3 Customer Data submitted to the Services

When you use the API, Dashboard, or Simulator, you submit input parameters (e.g., antenna gains, frequencies, geographic coordinates, deployment scenarios). This is treated as Customer Data and is processed solely to provide the requested calculation, return results, and operate the Services. We do not use Customer Data to train machine-learning models, and we do not share it with third parties except as strictly required to deliver the Services.

If you submit geographic or operational parameters that may be sensitive (e.g., for defence or government applications), you are responsible for ensuring that such submission is permitted under applicable law and your own policies.

4. Legal Bases for Processing (GDPR)

Where GDPR applies, we rely on the following legal bases:

• Contract performance — to provide the Services you have subscribed to.
• Legitimate interests — for security, fraud prevention, service improvement, and limited analytics, balanced against your rights.
• Legal obligation — to comply with tax, accounting, and law-enforcement requests.
• Consent — where you have explicitly opted in (e.g., marketing emails).

5. How We Use Your Information

We process personal data to:

• provide, maintain, and improve the Services;
• process transactions and deliver receipts;
• respond to inquiries and support requests;
• monitor for fraud, abuse, and security incidents;
• communicate operational notices (service changes, outages, policy updates);
• comply with legal obligations.

We do not sell personal data, and we do not engage in cross-context behavioural advertising.

6. Sub-processors and Third Parties

We share personal data only with the following categories of sub-processors, under written agreements requiring appropriate safeguards:

• Lemon Squeezy — Merchant of Record; processes payments, billing, tax handling, and chargebacks.
• Vercel — hosting and infrastructure provider; processes web requests.
• Zoho Mail — email service provider for transactional and support communications.
• Cloud and operational tooling — as required to deliver the Services; current list available on request to contact@hapintel.com.

We may also disclose data when required by law, court order, or governmental request, or to protect the rights, safety, or property of HAPIS, our users, or third parties.

7. International Transfers

Your data may be processed in countries outside your country of residence, including the United States and the European Union. Where required, we rely on Standard Contractual Clauses or other adequate transfer mechanisms approved under GDPR.

8. Data Retention

• Account data — retained while your account is active and for up to 24 months after account closure, unless a longer retention period is required by law.
• Billing records — retained for the period required by applicable tax and accounting law (typically 5–10 years).
• API request logs — retained for up to 13 months for billing, debugging, and abuse prevention.
• Support communications — retained for up to 24 months after resolution.
• Anonymized analytics — retained indefinitely in aggregate form.

You may request earlier deletion by contacting contact@hapintel.com, subject to legal retention obligations.

9. Your Rights

Depending on your jurisdiction, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion (“right to be forgotten”);
• request restriction or object to processing;
• request data portability in a machine-readable format;
• withdraw consent (where consent is the legal basis);
• lodge a complaint with your local data-protection authority.

CCPA-specific rights (California residents):

• Right to know what personal data is collected and how it is used;
• Right to delete personal data;
• Right to opt out of sale/sharing — HAPIS does not sell or share personal data for cross-context behavioural advertising;
• Right to non-discrimination for exercising your rights.

To exercise any right, contact contact@hapintel.com. We will respond within the timeframe required by applicable law (typically 30 days under GDPR, 45 days under CCPA).

10. Security

We apply reasonable technical and organizational measures to protect personal data, including encryption in transit (TLS), encryption at rest for credential storage, access controls, and routine security review. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

11. Data Breach Notification

In the event of a personal-data breach likely to result in a risk to the rights and freedoms of affected individuals, we will notify the competent supervisory authority within 72 hours where required by GDPR, and we will notify affected individuals without undue delay when legally required.

12. Children's Privacy

The Services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact contact@hapintel.com so we can delete it.

13. Cookies

hapintel.com does not use tracking cookies. Vercel Web Analytics is cookieless. hapintel.store may use strictly necessary session cookies operated by Lemon Squeezy for cart and checkout functionality, which do not require consent under applicable law.

14. Marketing Communications

If you opt in to marketing emails, you may unsubscribe at any time using the link in any email or by contacting contact@hapintel.com. Transactional emails (billing, security, service updates) are not subject to opt-out while your account is active.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and/or by posting a prominent notice on hapintel.com at least 14 days before the changes take effect. The “Last updated” date will be revised accordingly.

16. Contact

For privacy questions or to exercise your rights:

HAPIS — HAP Intel Systems
Attn: Data Protection
Guadalajara, Jalisco, México
Email: contact@hapintel.com