Privacy Policy

Overview

Transparent handling of personal data is very important to us. This privacy policy explains what personal data we collect, for what purpose we use it, and to whom we may disclose it. We review and update this privacy policy regularly to ensure the highest possible level of transparency.

This privacy policy applies to the website www.hamerly.co and to the Hamerly platform operated by Hamerly AG

What data we collect

• General personal data such as your name, email address, company details, and postal address.
• Data you actively provide to us, for example through a contact form, newsletter signup, or account creation.
• Account and authentication data such as password hashes, session identifiers, account verification status, and basic identity information when you use Google sign-in.
• Data collected when you use our website or platform, such as device information, browser metadata, interaction logs, and usage behavior.
• Project-related platform data such as tasks, comments, checklists, issue reports, uploads, documentation, generated exports, and collaboration actions.
• Audit and workflow data such as timestamps, assignments, read receipts, acknowledgments, and project activity history.
• Browser storage data used for authentication, language preferences, user interface settings, and offline read-only functionality.
• Approximate upload location data, where supported, such as latitude, longitude, accuracy, and upload timestamp.
• Financial data when required for payment processing.

How we use your data

• To provide and operate the Hamerly website and platform.
• To enable project coordination, communication, documentation, exports, and collaboration features.
• To create and secure user accounts, manage sessions, and support Google sign-in.
• To respond to inquiries, process business requests, and support users.
• To improve our products and services through product analysis and operational review.
• To maintain security, stability, fraud prevention, and platform integrity.

Data sharing and international transfers

We may share personal data with payment providers, email delivery providers, authentication providers, file storage providers, infrastructure partners, and authorities where legally required. Within the Hamerly platform, certain project information may also be visible to authorized participants in the same workspace.

We work with providers around the world. In individual cases, data may therefore be transferred outside the EU/EEA. Where necessary, we use appropriate safeguards such as standard contractual clauses or comparable legal mechanisms.

Services we use

• Stripe for payment processing and webhooks
• Resend for transactional emails
• Google OAuth for sign-in and authentication
• Google Analytics for website analytics, only after consent has been given
• Supabase Storage for file uploads, image storage, and signed file URLs
• Vercel for deployment and runtime infrastructure

Additional notice for the Hamerly platform

The Hamerly platform supports digital project coordination, including task management, issue tracking, photo uploads, project collaboration, documentation, exports, and communication between project members.

Platform data such as project records, assignments, status changes, comments, uploaded files, export data, and project activity history is stored within the Hamerly infrastructure and may be visible to authorized project participants according to their project role.

Authorized users can export project documentation in formats such as PDF, ZIP, and CSV-based files. These exports may include project details, issues, comments, photos, attachments, workflow history, participant references, and timestamps.

Projects may become read-only after expiry or archive. Active project content and files are generally deleted after the 90-day retention period, and based on the repository audit no recovery mechanism after full deletion was confirmed. Certain audit logs, workflow records and security-related event data may be retained beyond project deletion where necessary to ensure traceability, platform integrity, fraud prevention, legal obligations or legitimate business purposes.

We do not sell or monetize user data. We only process personal data to operate the platform, improve the product, ensure security, and support legitimate business and legal requirements.

Free Offer feature

If you share an offer through Hamerly, the recipient may open the offer through a public link without creating an account.

As part of this feature, recipients may voluntarily provide their name, email address, and optional messages, for example change requests.

We use this data to process the offer response (acceptance, rejection, or change request), inform the offer creator, and maintain traceable documentation of the communication.

This data is stored as part of the offer and event documentation and is visible to the offer creator. Offer-related events and responses may be retained where necessary for evidence, fraud prevention, contractual communication or legal obligations.

Processing takes place for pre-contractual measures and for our legitimate interests in maintaining traceable offer communication.

Location data

When you upload photos, files or documents, Hamerly records your approximate device location (latitude, longitude, and accuracy) to document where work took place. This data is stored alongside the upload and is only visible to members of your project.

Users should avoid uploading unnecessary sensitive personal data. Original file metadata may remain unless it is removed before upload. You can decline location capture at any time in the app. You may request deletion of your location data by contacting us at hello@hamerly.co.

GDPR notice and your rights

If you are based in the EU/EEA or UK, you may request access to your personal data, correction, deletion where legally possible, restriction of processing, data portability, and the withdrawal of consent. You also have the right to object to certain processing activities and to lodge a complaint with a supervisory authority.

Certain project records, logs, and documentation may need to remain stored where this is necessary for platform integrity, project continuity, legal obligations, or legitimate business purposes.

Security measures

We apply standard security measures such as HTTPS, access controls, and the use of trusted providers. Nevertheless, no online service can guarantee absolute security.

Contact

If you have questions about data protection or would like to exercise your rights, please contact:

Hamerly AG, Herbergstrasse 31, 9524 Zuzwil (SG), Switzerland, hello@hamerly.co

Changes to this privacy policy

We may change this privacy policy at any time. Changes will be published on www.hamerly.co and will not be communicated separately.