Privacy Policy

Information we collect & why

• Account data (via AWS Cognito). Your email address (the verified identifier you sign in with), an optional and unverified phone number, and a password — stored hashed by Cognito, so we never see it. Used to authenticate you and provide account features.
• ENKI conversations (signed-in users). If you are signed in, your ENKI design conversations — your messages, ENKI's replies, and the design state (mission parameters and every calculation artifact) — are saved to your account so you can resume them. You can delete any conversation from the history panel in the studio. If you are not signed in, your conversation is never stored on our servers between turns — it lives only in your browser tab for the session.
• Saved tool history (signed-in users). When you are signed in, the inputs to a calculator run and a short headline of its results are saved to your account so you can reopen and manage them. You can delete any saved run inside the tool.
• First-party usage analytics. We record product-usage events — for example, viewing a tool, running a calculation, or opening the explainer — together with the tool identifier and a short hash of the inputs. These are tied to your account when you are signed in, and otherwise to a salted, anonymized identifier derived from your network address. We do not store your raw IP address for this. It is used only to improve the product; it is not sold, and not shared with advertisers.
• Rate-limit & usage counters. To keep the AI features fairly available and bound their cost, we keep per-caller usage counters. For signed-in users these are keyed by your account; for anonymous visitors they are keyed by a one-way hash of your IP address — never the raw address. We also keep per-request AI usage records (tokens, latency, cost) keyed the same way.
• Contact & newsletter. If you use the contact form or subscribe to our newsletter, we store the name, email, and message you provide so we can reply or send updates. Contact and newsletter submissions also generate a notification email to our team.
• Feedback. If you send feedback (for example from the ENKI studio), we store the message, the page it came from, and — if you are signed in or provide one — your email address, and notify our team by email.
• Technical / operational logs. Standard server and application logs — which can include IP address, user agent, and timestamps — kept for security, abuse prevention, and reliability. These are not joined to your analytics profile.

Where your data lives & how AI features process it

Everything above is stored on Amazon Web Services (AWS) in the ap-south-1 (Mumbai, India) region.

One important exception: when you use ENKI or the tool explainer, the content of that request — your messages, the design state, and the calculator inputs and outputs being explained — is sent to Anthropic, the US-based company whose AI models generate the response. That content leaves our AWS environment (and India) for the duration of processing and is handled by Anthropic under its own privacy policy. We do not send Anthropic your email address, password, or any other account identifier — only the content needed to answer. If you do not want particular information processed this way, don't include it in an ENKI conversation or an explained calculation.

Third-party services

• Google Analytics 4. Google's gtag.js runs on our pages for aggregate page-view and product-interaction analytics (e.g. which tool a button was clicked on — never form contents, emails, or anything you type) and sets analytics cookies. It is governed by Google's privacy policy — policies.google.com/privacy.
• Amazon Web Services (AWS). Hosts the site, delivers it via CloudFront, sends our email (SES), and stores data in the ap-south-1 region.
• Anthropic. Provides the AI models behind ENKI and the tool explainer, as described above — see anthropic.com/legal/privacy.

How long we keep it

• Usage-analytics events: automatically expire after roughly 90 days.
• Unpinned, auto-saved tool runs: automatically expire after roughly 180 days. Pinned runs are kept until you delete them.
• ENKI conversations & design state: kept until you delete the conversation in the studio, or until we delete it at your request. There is no automatic expiry on this store today.
• Rate-limit counters & AI usage records: pseudonymous (hashed IP or account id); kept until deleted at your request. There is no automatic expiry on this store today.
• Account data: kept while your account exists; deleted when you ask us to delete your account (below).
• Contact messages & feedback: kept until you ask us to remove them.
• Newsletter data: kept until you unsubscribe or ask us to remove it.
• Operational logs: kept for a bounded period for security and reliability, then discarded.

Cookies & local storage

Google Analytics sets analytics cookies. Your sign-in tokens are stored in your browser's local storage, not in cookies. We use no advertising or cross-site tracking cookies.

Your rights

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), and — for visitors in the EU, EEA, or UK — the General Data Protection Regulation (GDPR), you have the right to access, correct, and delete your personal data, to receive a copy of it, and to withdraw consent.

In-app: you can delete individual saved tool runs inside each tool, and delete ENKI conversations from the studio's history panel. Newsletter emails carry an unsubscribe path.

Everything else — including full account deletion — is handled on request. Email letstalk@hawklogicsystems.com with the subject "DSAR" (Data Subject Access Request), from the email address registered with us, and tell us what you want — a copy of your data, a correction, or deletion. We verify identity by replying to your registered address, and we respond within 30 days. Account deletion removes your Cognito account and every record keyed to it — saved runs, ENKI conversations, and usage counters.

Grievance redressal

As required by the DPDP Act, you can raise a grievance about how your data is handled with our grievance-redressal contact: Grievance Officer, HawkLogic Systems Private Limited, reachable at founders@hawklogicsystems.com (Bangalore, India). We acknowledge grievances promptly and aim to resolve them within 30 days. If you are unsatisfied with our response, you may escalate to the Data Protection Board of India — or, for GDPR matters, to your local supervisory authority.

Legal bases

We provide account features on the basis of delivering the service you request; we run product analytics and rate limiting on the basis of our legitimate interest in improving and protecting the service; and anything else is done with your consent, which you can withdraw at any time.

Internal access

Authorised HawkLogic staff can access personal data only where needed for support, security, or legal compliance — for example, to fulfil a deletion request. We do not browse your saved work or conversations for curiosity or marketing.

Children

The site is not directed to children, and we do not knowingly collect data from anyone under the age set by applicable law — under 18 under India's DPDP Act, and 16 under GDPR.

Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the latest version.

Contact

Data requests: letstalk@hawklogicsystems.com. Anything else: the contact section on the homepage, or founders@hawklogicsystems.com.