Privacy Policy | HasFocus

Information We Collect

When you use our website, client portal, or contact us, we may collect the following information:

Account information: Name, email address, and company name when you create a portal account or request an audit.
Communication data: Messages, files, and correspondence exchanged through the portal or email.
Usage data: Pages visited, browser type, and IP address collected automatically for analytics and security purposes.
Payment information: Billing details processed securely through our payment provider (Stripe). We do not store payment card numbers.

How We Use Your Information

To provide and manage audit services and client portal access.
To communicate about projects, invoices, and findings.
To improve our website and services.
To comply with legal obligations.

Data Security

As a security firm, we take data protection seriously. All data is encrypted in transit (TLS) and at rest. Portal access is authenticated, and sensitive audit findings are shared only with authorised client contacts.

Third-Party Services

We use the following third-party services that may process your data:

Vercel: Website hosting and deployment.
Supabase: Authentication and database services.
Stripe: Payment processing.
Calendly: Meeting scheduling.

Data Retention

We retain account and project data for the duration of our business relationship and for a reasonable period afterward to comply with legal and audit requirements. You may request deletion of your personal data by contacting us at privacy@hasfocus.com.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, as well as the right to data portability and the right to object to processing. Contact us at privacy@hasfocus.com to exercise these rights.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on our website.

Contact

For privacy-related inquiries, contact privacy@hasfocus.com.