← Back to Hassa

Privacy Policy

Effective / Last updated: 2026-09-23

This Privacy Policy explains how Hassa LLC collects, uses, discloses, stores and otherwise processes personal information when you use Hassa.

1. Information We Collect

  • Information you provide, including name, email, account and profile data, support communications, prompts, uploads, project content, references, images, videos, audio, voices and generated assets.
  • Information collected automatically, including IP address, browser and device information, operating system, approximate location derived from IP, timestamps, session activity, feature usage, model selections, generation events, errors, performance and security logs, and cookie or similar-technology information.

2. AI Content and Uploaded Media

Hassa may process prompts, photographs, images, video, audio, voices, music, characters, project files and other material to perform the generation, editing, analysis or transformation you request.

Face or voice information may receive special protection in some jurisdictions. Unless separately disclosed for a specific feature, Hassa does not use face or voice content for identity verification.

3. Payments

Payments may be processed by third-party payment providers such as Stripe. Hassa generally does not receive or store your complete payment-card number. We may receive transaction status, billing country, transaction identifiers, subscription status, plan, credits, payment history and limited billing information.

4. How We Use Information

  • Provide, operate and secure Hassa; create and manage accounts; authenticate users; process AI generations, projects, storage, subscriptions, credits and payments.
  • Provide support and service communications; prevent fraud, abuse and security incidents; diagnose errors; maintain infrastructure; improve product functionality; enforce policies; and comply with legal obligations.

5. AI and Infrastructure Providers

Depending on the model or feature selected, Hassa may transmit Inputs and related technical information to third-party AI and infrastructure providers necessary to process the request. Not every provider receives every Input.

Providers may process information in jurisdictions outside your country and may have different retention and model-improvement practices depending on the product, API, agreement or processing environment used by Hassa.

6. Training and Model Improvement

Hassa does not acquire ownership of your project content merely because you use the Services.

Where Hassa or a third-party provider would use customer content for model training, fine-tuning or another purpose beyond providing, securing and supporting the Services, that processing will be handled in accordance with applicable law and contractual requirements. Hassa does not make a blanket representation that every third-party provider follows identical retention or training practices.

7. Legal Bases

Where GDPR, UK GDPR or similar laws apply, Hassa may rely on performance of a contract, legitimate interests, compliance with legal obligations and consent where consent is required. Processing prompts and uploads is generally necessary to perform the generation or editing service you request.

8. How We Share Information

Hassa may disclose information to service providers that help operate the Services, including AI model providers, cloud hosting and storage, database, payment, authentication, security, analytics, communications and customer-support providers, as well as professional advisers.

Hassa may also disclose information when reasonably necessary to comply with law, legal process, court orders or valid governmental requests, or to protect Hassa, users or others. Information may transfer as part of a merger, acquisition, financing, restructuring or sale of assets subject to applicable law.

9. Sale and Sharing

Hassa does not sell personal information for monetary consideration as part of its ordinary business model. Some privacy laws define sale or sharing more broadly, including certain advertising or cross-context behavioral advertising activities.

If Hassa engages in activity legally defined as sale or sharing, Hassa will provide notices and opt-out mechanisms required by applicable law.

10. International Transfers and Retention

Hassa operates internationally and information may be processed or stored outside your jurisdiction, including in the United States and other countries where Hassa or its providers operate. Where required, Hassa will use recognized safeguards for international transfers.

Hassa retains personal information for as long as reasonably necessary to provide the Services, preserve projects where applicable, complete transactions, maintain security, prevent fraud, resolve disputes, comply with law and maintain legitimate business records. Different categories may have different retention periods and information may remain temporarily in backups.

11. Security

Hassa uses reasonable administrative, organizational and technical safeguards designed to protect information. No electronic transmission, storage system, network or cloud service can be guaranteed to be completely secure.

12. Your Privacy Rights

Depending on where you live, you may have rights of access, correction, deletion, portability, restriction, objection, withdrawal of consent, and opt-out rights relating to certain sales, sharing or targeted advertising. Some rights apply only under particular laws or circumstances.

Privacy requests may be submitted to privacy@hassa.ai. Hassa may need to verify your identity before completing a request.

13. California and Other U.S. States

Residents of California and certain other U.S. states may have additional privacy rights where the relevant law applies to Hassa and the particular processing activity. Hassa will recognize legally required browser-based opt-out preference signals, such as Global Privacy Control, where applicable.

14. Cookies and Similar Technologies

Hassa may use cookies, local storage, SDKs and similar technologies for authentication, security, preferences, analytics and other functions. Where required by law, non-essential technologies will not be activated until the required consent is provided. See the Cookie Policy for more information.

15. Children's Privacy

Hassa is intended for adults. You must be at least 18 years old to create or use a Hassa account. Hassa does not knowingly offer the Services to children under 18.

If you believe an ineligible minor has provided information to Hassa, contact privacy@hassa.ai.

16. Contact

Hassa LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States

Privacy: privacy@hassa.ai

Legal: legal@hassa.ai