Privacy Policy

When you create an account, we collect your name and email address. When you connect a data source, we collect the configuration values you provide (host, database name, etc.) and store any credentials you supply (passwords, API keys, service-account JSON) in an encrypted form accessible only to your organization.

When you use the AI assistant, the prompts you submit and the dashboards you build are stored against your organization. We do not share the contents of your prompts or your data with third parties except as necessary to operate the service (see "Sub-processors").

We use your information to provide the service, authenticate you, send transactional emails (verification, password reset, invitations), and improve the product. We do not sell your personal information.

We rely on the following third-party providers to operate the service:

• Vercel — application hosting and serverless function execution. Vercel also provides the traffic measurement built into the site, which records the pages visited and aggregate visitor counts.
• Neon — managed PostgreSQL database hosting our application data.
• Upstash — Redis used for rate limiting and for the short-lived query result cache described under “Your data and your data sources”. Cached rows returned by your data sources pass through and rest with Upstash until they expire.
• Resend — transactional email delivery.
• Stripe — payment processing and subscription billing. When you subscribe, your email address and your organization's identifier are sent to Stripe, and Stripe collects and stores your payment details directly; card numbers never reach Hanomina's servers.
• Google (Gemini), Anthropic (Claude), and OpenAI (GPT) — large language models used to generate dashboard content from your prompts. Prompt contents may be transmitted to whichever provider your organization has configured (Gemini by default); refer to the respective privacy policies for retention details.
• PostHog — product analytics. The pages you visit and the actions you take in the application are sent to PostHog, along with your account identifier and your email address, so we can see how the product is used. Where session replay is enabled on our PostHog project, this can also include a recording of what was rendered on screen in the application — which may include figures returned by your data sources.
• Sentry — error monitoring. When something fails, a diagnostic report is sent to Sentry. It includes your account identifier and email address, the request that failed, and technical details of the failure such as the organization, dashboard or data source type involved. Session cookies and authorization headers are removed before the report is sent.

When you connect a database or other data source to Hanomina, the SQL queries we run against that source return data into your dashboards.

We cache those query results briefly so that reopening a dashboard, or asking the assistant a follow-up question, does not re-run every query against your source — which would otherwise bill you repeatedly for the same data on usage-priced warehouses. Cached results are held by Upstash (see Sub-processors), scoped to your organization and the specific data source, and expire automatically after a short interval — 60 seconds by default, and never more than one hour. Dashboards show how old the figures they display are, and a Refresh control re-reads the source immediately. Nothing from this cache is retained after expiry.

Separately from that cache, a dashboard you choose to share by link stores a copy of its most recently rendered page — including the figures shown on it — on Hanomina's servers, so that the link can be opened without running further queries against your source. Anyone holding the link can view that stored copy without signing in. It is refreshed while members of your organization view the dashboard, and it is deleted when you stop sharing the dashboard.

Uploaded files (CSVs, Excel) are stored in our database as rows scoped to your organization, and are not held in the query cache described above.

You may access, export, or delete your account and associated data at any time through the application settings. Deleting your account permanently removes your user record and your sole-owned organizations. To request additional data access or export, email support@hanomina.com.

Questions about this policy? Email support@hanomina.com.