Privacy Policy

1. Who We Are

HADI.agency ("we", "us", "our") is a marketing validation agency that helps founders and businesses validate product ideas using real-world data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website at hadi.agency (the "Site") and our services.

2. Information We Collect

We collect information that you provide directly to us, as well as information collected automatically when you use our Site.

2.1 Information You Provide

• Contact form data: name, phone number, selected package, and optional message
• Communications: any information you share when contacting us via WhatsApp, Telegram, LinkedIn, phone, or email

2.2 Information Collected Automatically

• Usage data: pages viewed, time spent on page, referral source, browser type, device type
• Cookies & analytics: we may use analytics tools (such as Google Analytics) to understand how visitors interact with our Site
• IP address: collected automatically by our hosting provider for security and analytics purposes

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and contact requests
• Provide, maintain, and improve our services
• Send you relevant information about our services (only if you opted in)
• Analyze Site usage to improve user experience
• Comply with legal obligations
• Protect against fraud, abuse, and unauthorized access

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: when you submit a contact form or reach out to us directly
• Legitimate interest: to improve our services, analyze Site performance, and ensure security
• Legal obligation: to comply with applicable laws and regulations

5. Data Sharing & Third Parties

We do not sell your personal data. We may share your information with:

• Service providers: hosting (Vercel), analytics (Google Analytics), CRM tools — only to the extent necessary to provide our services
• Advertising platforms: Meta, Google Ads, Reddit — when running validation campaigns on your behalf (only with your explicit consent under a service agreement)
• Legal requirements: if required by law, regulation, or legal process

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Contact form submissions are retained for up to 24 months after your last interaction with us, after which they are securely deleted.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted connections (HTTPS), secure hosting infrastructure, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data
• Restriction: request restriction of processing of your data
• Portability: request transfer of your data in a machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

9. Cookies

Our Site may use cookies and similar tracking technologies to enhance your experience. Types of cookies we may use:

• Essential cookies: required for the Site to function properly
• Analytics cookies: help us understand how visitors use the Site (e.g., Google Analytics)

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of the Site.

10. Third-Party Links

Our Site may contain links to third-party websites (e.g., WhatsApp, Telegram, LinkedIn). We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us: