Privacy policy
Last updated September 28, 2026
This policy explains what personal data Hullward collects through hullward.com, why, and what you can do about it. We keep it short and specific.
Who we are
The controller of your personal data is Hullward, Serbia. Contact: hello@hullward.com.
What we collect
- Forms. Name, work email, company, platform type and anything you write in the form. On the contact form also your role, monthly active users and timeline. We also store the page you arrived on, the referring site and campaign parameters (UTM) so we know which pages are useful.
- Bookings. When you book a call through Cal.com we receive your name, email, the time you chose and the answers to the booking questions.
- Demo console. Text you write in the console is sent to our API and to Anthropic to produce a decision. We store the input for up to 24 hours, then delete it. We keep the verdict, category, latency and cost without the text. We never store your IP address; we store a one way hash of it with a salt that changes daily, for rate limiting.
- Analytics. Vercel Web Analytics is cookieless and counts page views without identifying you. PostHog product analytics runs only if you choose “Accept analytics”.
- Technical data. Our hosting providers process IP addresses and request logs to deliver the site and protect it from abuse.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry and preparing a call | Steps prior to entering a contract, and our legitimate interest in answering enquiries |
| Running the demo console | Legitimate interest in showing how our work functions |
| Product analytics with PostHog | Your consent, which you can withdraw at any time |
| Security, bot protection and error monitoring | Legitimate interest in keeping the site and your data safe |
How long we keep it
- Leads and bookings: 24 months after our last contact, unless we start working together.
- Demo console input: 24 hours.
- Analytics: according to each provider’s retention settings, no longer than 12 months.
Processors
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Website hosting and cookieless traffic analytics | United States |
| Railway | API hosting, database and cache | United States / EU |
| Cal.com | Booking calls | United States / EU |
| Resend | Sending confirmation and internal emails | United States |
| PostHog | Product analytics, only with your consent | European Union |
| Anthropic | Evaluating text you enter in the demo console | United States |
| Cloudflare | Bot protection (Turnstile) on forms and the demo | Global |
| Sentry | Error monitoring | European Union / United States |
Where data leaves the EU, UK or Serbia we rely on the provider’s standard contractual clauses or an adequacy decision.
Your rights
You can ask for access to your data, correction, deletion, restriction, portability, and object to processing based on legitimate interest. You can withdraw consent to analytics at any time on the cookie page. Email hello@hullward.com and we will respond within 30 days. You can also complain to your data protection authority, in Serbia the Commissioner for Information of Public Importance and Personal Data Protection.
Changes
If we change this policy we update the date at the top of this page.