Privacy policy
Last updated : 22 September 2026
Controller
EB Management, SLU, Avinguda de Santa Coloma 3, Edifici Baluard, escala B, 5th floor, door 1, AD500 Andorra la Vella, Principality of Andorra. Contact: contact@hazzel.app.
What we collect, and why
Buying a kit: email address, country, amount, Stripe payment identifier and arrival parameters (campaign, source). Legal basis: performance of the contract. Retention: 10 years (accounting obligations).
Hazzel account: email address and a session cookie, needed for code sign-in. Legal basis: performance of the contract. Retention: as long as the account exists.
Using a kit: your answers to the diagnostic, exercises, situations and plan, the readings written for you, and, if you provide them, your first name, age and story in your own words. They personalise your program and let you find it again from one visit to the next. Legal basis: performance of the contract. Retention: as long as the account exists; deleted on request.
Signing up to Hazzel Letters or a waiting list: email address and language. Legal basis: consent, withdrawable at any time via the unsubscribe link. Retention: until withdrawal.
TikTok and Meta advertising trackers: set only after your consent in the banner. They measure which videos bring visitors and purchases. Legal basis: consent.
Audience measurement: if enabled, it works without cookies or personal identifiers.
The readings written for you
To write a kit’s readings (after the diagnostic, in the modules, the summary), your answers are sent to a language model provided by OpenAI, with the first name of the person you talk about if you gave it. Under its API terms, OpenAI does not use this data to train its models. No banking data or email address is sent in this process.
Recipients
Stripe (payment), Supabase (database, hosted in Ireland), OpenAI (writing of readings, United States), Vercel (site hosting, United States), Loops (emails), TikTok and Meta (trackers, after consent). For those established in the United States, transfers rely on the European Commission’s standard contractual clauses.
Your rights
Access, rectification, erasure, restriction, portability, objection: write to contact@hazzel.app. Deleting the account deletes the answers and readings. You may also lodge a complaint with the Andorran Data Protection Agency (apda.ad) or with the authority of your country of residence. Andorra benefits from an adequacy decision of the European Commission.
The Hazzel app
The app has its own privacy policy, available from the app. The account is shared between the site and the app.