Privacy
Privacy Policy draft
A plain-language description of how HAT’s marketing website and product landing pages handle inquiries, subscriptions, and aggregate interaction measurements.
Scope
This policy applies to the public HAT Building Technologies website and the public BuildOS, Threadora, and VisionMatch product landing and pricing pages. Authenticated or operational product areas may require separate notices and agreements before commercial use.
Information collected
When you submit an inquiry, the site collects the information you choose to provide, including your name, work email, company, role, contact details, organization type, project timing, message, marketing-consent choice, product interest, and permitted campaign parameters. The form also records limited operational information such as the page where the form was submitted and the time of submission.
When you subscribe to updates, the site collects your email address, optional first name, source page, consent choice, and the time of subscription. The site does not add third-party advertising trackers or cross-site profiling by default.
Aggregate website measurements
The HAT website and product landing pages can send limited first-party interaction events to HAT’s Cloudflare Worker so HAT can understand which public pages and calls to action are useful. These events are limited to the product, page type, event type, selected billing term, selected team size, calculated estimate, and short validated campaign labels when present. New events also include an approximate country code and broad device and likely-bot categories. Raw network addresses and user-agent strings are not stored with these events. They do not include names, email addresses, account identifiers, cookies, message text, full URLs, referrers, raw IP addresses, or user-agent strings.
These aggregate events are stored in Cloudflare Workers Analytics Engine, which currently retains Analytics Engine data for three months. Product-page scripts do not send these events when the browser exposes Global Privacy Control or a Do Not Track preference. The HAT website can also remember a local browser preference to exclude future HAT measurement; this preference is a boolean, not a visitor identifier.
Why we use it
HAT uses inquiry information to respond to requests, understand the context of a requested conversation, operate and protect the website, and maintain appropriate records of communications. Newsletter information is used to send the updates you asked to receive. Optional marketing consent is recorded separately from an inquiry.
Storage and access
Inquiry and subscription records are stored in the website’s Cloudflare D1 database. Aggregate product-page events are stored separately in Cloudflare Workers Analytics Engine. Access should be limited to authorized HAT personnel and service providers who need it to operate the site or respond to an inquiry. HAT should define and document retention periods for inquiry and subscription records before public launch.
Security and anti-abuse controls
The site uses input validation, rate limiting, a honeypot field, and Cloudflare Turnstile verification to reduce abusive submissions. No control can guarantee absolute security, so please do not send passwords, payment information, confidential project material, or other sensitive data through the public form.
Your choices
You may ask HAT to update or delete information submitted through this website, subject to applicable obligations. You may withdraw marketing consent by using the contact form and selecting a general inquiry. A dedicated privacy contact and formal request process should be added after legal review.
Changes
HAT may update this draft as the site or its data practices change. A published policy should show an effective date and a reliable contact method once approved.