Privacy Policy

Last updated: 31 August 2026

This Privacy Policy explains how we collect, use, and protect personal data when you use the hize platform and website at hize.app (the "Service").

1. Who we are

The controller of your personal data is Arvella sp. z o.o. with its registered office at ul. Sosnowiecka 89, 31-345 Kraków, Poland, entered in the National Court Register (KRS) under number 0001212888, NIP 9452322787, REGON 543556240 ("we"). Contact: privacy@hize.app.

2. Data we collect

  • Account data — email address, password (stored as a salted hash), company name, and workspace settings you provide at signup. We also record the time you accepted the Terms and Conditions and this Privacy Policy.
  • Communication content — when you use hize agents: call audio and recordings, transcripts, chat messages, and email content processed by your agents on your behalf.
  • Usage and technical data — log data, device and browser information, IP address, and product usage metrics used to operate and improve the Service.
  • Billing data — plan, invoicing details, and payment records (payments are handled by our payment providers; we do not store card numbers).

3. How we use data

  • To provide the Service: run your agents, route calls, deliver messages, and store your workspace data
  • To review and activate accounts and to prevent fraud and abuse
  • To send transactional emails about your account — e.g. confirmation that your account was created and, where applicable, notice that it has been activated
  • To bill for the Service, prevent abuse, and comply with legal obligations
  • To improve the Service using aggregated, de-identified usage statistics

We do not sell personal data. Content processed by your agents is not used to train AI models — neither by us nor by our providers: we use model providers only under terms that prohibit training on this data.

4. Legal bases

Where the GDPR applies, we process data on the basis of contract performance (providing the Service), legitimate interests (security, abuse prevention, product improvement), legal obligations (accounting), and consent where specifically requested.

5. Data processed on your behalf

For content your agents handle (calls with your customers, their messages and emails), you are the data controller and we act as a processor under your instructions; the data-processing terms in the Terms and Conditions apply. You are responsible for informing your callers and contacts and for obtaining any required consents (for example, for call recording).

6. Sharing and sub-processors

We share data only with service providers needed to operate the Service, under data-processing agreements:

  • hosting and infrastructure providers
  • telephony carriers
  • AI model providers — including models running on our own infrastructure and third-party inference providers
  • email delivery services
  • payment processors

We may change the providers we use; we will inform customers for whom we act as a processor of intended changes as described in the Terms. Data may be disclosed where required by law.

7. International transfers

Some of our providers (in particular AI model providers and telephony carriers) may process data outside the European Economic Area, including in the United States. Where that happens, we rely on safeguards recognized by the GDPR — the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. You can request details of the safeguards used at privacy@hize.app.

8. Data retention

  • Account data is kept for as long as your account exists.
  • Communication content is retained according to your workspace settings and plan limits; the Service is not an archive, and content beyond those limits may be deleted (see the Terms, section 8).
  • After account deletion, we remove or anonymize personal data within 30 days, except data we must keep longer by law.
  • Billing and tax records are kept for the period required by accounting and tax law (in Poland, generally 5 years from the end of the relevant tax year).

9. Your rights

  • Access, correct, or delete your personal data
  • Restrict or object to processing in certain cases
  • Receive your data in a portable format
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with your supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO)

To exercise these rights, contact us at privacy@hize.app.

10. Cookies and analytics

We use essential cookies for signing in and keeping your session. On our website we use Swetrix, a privacy-friendly analytics tool that works without cookies and without cross-site tracking. Any other non-essential cookies are used only where permitted and can be controlled in your browser.

11. Security

We protect data with encryption in transit, access controls, and isolation between customer workspaces. No system is perfectly secure — please use a strong, unique password.

12. Changes and contact

We may update this Policy; material changes will be announced by email or in-product notice. This Policy is available in Polish and English; in case of discrepancies, the Polish version prevails. Questions: privacy@hize.app.