Privacy Policy

1. What we collect

• Telegram account data - your Telegram user ID, name and @username, provided by Telegram when you connect HaulHawk in Telegram.
• Your searches and settings - routes, filters, saved and blocked companies, SMS template, and the alerts sent to you.
• Technical and security data - IP address, device and browser information (such as platform, screen size, language, time zone and a device fingerprint) collected when you open the Mini App. We use it to keep accounts secure and to prevent misuse of free trials.
• Payment data - handled by Paddle. We receive your email, country, plan, payment status and the Telegram ID you link to the order. We never see your full card details.
• Messages to support - whatever you send us.

2. Why we use it and legal basis

• To provide the service and your subscription (performance of a contract).
• To keep the service secure and prevent fraud and trial abuse (legitimate interests).
• To meet tax, accounting and legal obligations (legal obligation).
• To answer your questions and send service messages (contract / legitimate interests).

3. Who we share it with

• Paddle.com - our reseller and Merchant of Record, which processes payments, taxes and invoices (Paddle Privacy Policy).
• Telegram - to deliver messages and run the Mini App.
• Hosting and infrastructure providers that run our website and servers.
• Professional advisers and authorities when required by law.

We do not sell your personal data.

4. International transfers

Some providers are located outside the European Economic Area (for example in the United States). Where this happens, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

5. How long we keep it

Account and search data: while your account is active and up to 12 months after. Security records: up to 12 months. Payment and tax records: as long as tax law requires (usually up to 6 years, kept mainly by Paddle).

6. Your rights

You can ask us to access, correct, delete, restrict or transfer your data, object to processing, or withdraw consent where we rely on it. Email omvstudio.dev@gmail.com; we reply within 30 days. You may also complain to your data protection authority (in Poland: the President of the Personal Data Protection Office, UODO).

7. Security

We protect data with access controls, encrypted connections (HTTPS) and limited access to our systems.

8. Cookies

Our website does not use advertising or tracking cookies. The website and Mini App store small settings (such as theme) in your browser. Paddle's checkout may use cookies needed for payment and fraud prevention.

9. Changes

We may update this notice; the current version is always on this page.